Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/AMQVPdnd5gupAf5BUQnxLVvfPz4.roa
File: AMQVPdnd5gupAf5BUQnxLVvfPz4.roa (raw, json)
Hash identifier: s2nhQfFPjFWsBfYKQNz+So9BoEG35m98vEDyLpUK0wg=
Subject key identifier: 00:C4:15:3D:D9:DD:E6:0B:A9:01:FE:41:51:09:F1:2D:5B:DF:3F:3E
Certificate issuer: /CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
Certificate serial: 019F236893EE1093EDAD167A9672E9D6FA29
Authority key identifier: 0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/AMQVPdnd5gupAf5BUQnxLVvfPz4.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31651
IP address blocks: 81.88.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:93:ee:10:93:ed:ad:16:7a:96:72:e9:d6:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b310dbb6df8e06221bffde92820c79cbb14ae5c
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00c4153dd9dde60ba901fe415109f12d5bdf3f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:bb:6b:49:d9:31:66:db:9d:e9:e3:ac:2e:
ff:bc:3e:42:62:f5:5f:f1:22:4c:6b:97:cb:d3:c3:
9e:33:67:de:39:d3:ed:39:f5:d0:7f:32:e1:57:d9:
d0:a5:77:4a:d6:3d:94:f0:da:f8:f1:31:d5:c0:89:
18:19:93:a8:f4:53:9c:75:05:01:2e:bc:6f:a9:cf:
a0:ef:41:13:29:8b:d0:76:e8:dd:fd:79:e2:ca:b3:
03:8e:9e:e8:16:d8:88:ce:37:cf:a1:d5:10:2e:b0:
e0:9e:b5:e6:84:5c:1f:6f:57:fd:91:20:8c:b8:04:
b1:54:30:25:81:59:ba:89:af:01:ad:11:b4:02:38:
53:31:5a:42:0e:bf:2e:cd:04:5c:ff:2e:6b:f0:e6:
93:20:7e:aa:af:d8:4d:2c:4e:5c:57:44:c8:10:04:
1d:90:89:85:8f:ee:99:c5:a0:c3:dd:42:8a:bf:77:
d0:4d:e8:02:01:d4:ab:cd:91:bd:10:bc:ad:6e:5a:
2a:7f:9f:01:69:96:7d:df:2e:c2:8d:be:37:c3:21:
cf:bd:86:05:a2:82:6d:74:5a:ec:30:74:79:de:54:
e8:48:ef:97:59:27:63:7e:18:6a:c7:20:71:52:55:
a5:07:73:90:8d:b8:ff:7f:2b:21:1d:89:b7:f8:43:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C4:15:3D:D9:DD:E6:0B:A9:01:FE:41:51:09:F1:2D:5B:DF:3F:3E
X509v3 Authority Key Identifier:
keyid:0B:31:0D:BB:6D:F8:E0:62:21:BF:FD:E9:28:20:C7:9C:BB:14:AE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzENu2344GIhv_3pKCDHnLsUrlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/AMQVPdnd5gupAf5BUQnxLVvfPz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/CzENu2344GIhv_3pKCDHnLsUrlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:b6:cb:b4:72:51:85:91:ea:43:10:fd:f0:56:6d:0d:a6:dd:
77:42:64:07:d2:ae:7f:ef:a3:6a:aa:08:d1:e0:3f:50:14:46:
26:69:c1:23:d0:93:0d:8b:c9:3f:b1:d8:fd:ae:9a:9a:10:1f:
8e:f4:7b:d3:c2:27:dc:9d:b7:51:73:7e:35:cd:f6:4b:a3:d7:
81:cc:eb:c4:fc:e6:19:f2:03:a0:d4:fa:62:89:9b:8a:7d:2d:
9a:f7:c7:0c:f4:69:87:2e:e0:46:36:e6:11:d3:bc:0c:5e:13:
4d:b5:8f:73:c1:01:41:28:0c:24:34:77:6b:9d:2a:ea:f0:f0:
8c:ce:28:88:c0:c1:90:a0:16:e7:79:db:cc:e7:bd:47:80:22:
14:30:21:c2:c8:09:bf:4e:7d:56:ac:5f:16:1f:51:67:31:62:
0a:eb:20:66:f3:b7:8b:1d:40:5b:e9:eb:d2:21:94:14:68:29:
80:86:3b:11:02:45:f6:d8:85:30:02:da:29:db:9a:9e:1c:9c:
ac:1e:da:62:a8:85:b4:8b:c6:3b:ed:44:d3:20:da:d6:c6:16:
3d:c7:44:51:31:9a:1f:b7:56:89:22:05:4b:d1:47:a7:f2:5d:
bd:62:7a:95:e7:95:19:e5:5f:d5:27:ad:15:d0:df:3f:45:48:
bc:00:9e:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaJPuEJPtrRZ6lnLp1vopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzEwZGJiNmRmOGUwNjIyMWJmZmRlOTI4MjBjNzljYmIx
NGFlNWMwHhcNMjYwNzAyMTUxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGM0MTUzZGQ5ZGRlNjBiYTkwMWZlNDE1MTA5ZjEyZDViZGYzZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oS7a0nZMWbbnenjrC7/vD5CYvVf
8SJMa5fL08OeM2feOdPtOfXQfzLhV9nQpXdK1j2U8Nr48THVwIkYGZOo9FOcdQUB
Lrxvqc+g70ETKYvQdujd/XniyrMDjp7oFtiIzjfPodUQLrDgnrXmhFwfb1f9kSCM
uASxVDAlgVm6ia8BrRG0AjhTMVpCDr8uzQRc/y5r8OaTIH6qr9hNLE5cV0TIEAQd
kImFj+6ZxaDD3UKKv3fQTegCAdSrzZG9ELytbloqf58BaZZ93y7Cjb43wyHPvYYF
ooJtdFrsMHR53lToSO+XWSdjfhhqxyBxUlWlB3OQjbj/fyshHYm3+EM75QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADEFT3Z3eYLqQH+QVEJ8S1b3z8+MB8GA1UdIwQY
MBaAFAsxDbtt+OBiIb/96Sggx5y7FK5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pFTnUyMzQ0R0lodl8zcEtDREhuTHNVcmx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2It
ZDg0NmQxMDZiNWY3LzEvQU1RVlBkbmQ1Z3VwQWY1QlVRbnhMVnZmUHo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2ItZDg0NmQxMDZiNWY3
LzEvQ3pFTnUyMzQ0R0lodl8zcEtDREhuTHNVcmx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUVhsMA0G
CSqGSIb3DQEBCwUAA4IBAQCxtsu0clGFkepDEP3wVm0Npt13QmQH0q5/76NqqgjR
4D9QFEYmacEj0JMNi8k/sdj9rpqaEB+O9HvTwifcnbdRc341zfZLo9eBzOvE/OYZ
8gOg1PpiiZuKfS2a98cM9GmHLuBGNuYR07wMXhNNtY9zwQFBKAwkNHdrnSrq8PCM
ziiIwMGQoBbnedvM571HgCIUMCHCyAm/Tn1WrF8WH1FnMWIK6yBm87eLHUBb6evS
IZQUaCmAhjsRAkX22IUwAtop25qeHJysHtpiqIW0i8Y77UTTINrWxhY9x0RRMZof
t1aJIgVL0Uen8l29YnqV55UZ5V/VJ60V0N8/RUi8AJ5N
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:22 2026 by rpki-client