Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/q7L0IplR48XvIYXG1vo7q0nqStI.roa
File: q7L0IplR48XvIYXG1vo7q0nqStI.roa (raw, json)
Hash identifier: OtAKeVylVZxm/6LVx9Mo+nBXdTqqgUjXcDKzesZIhas=
Subject key identifier: AB:B2:F4:22:99:51:E3:C5:EF:21:85:C6:D6:FA:3B:AB:49:EA:4A:D2
Certificate issuer: /CN=b062991d318b0eb603ad17cb3a5114eed5b77e34
Certificate serial: 01A0E6DA318D7E33B7F3C9CE0266BE5FC243
Authority key identifier: B0:62:99:1D:31:8B:0E:B6:03:AD:17:CB:3A:51:14:EE:D5:B7:7E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/q7L0IplR48XvIYXG1vo7q0nqStI.roa
Signing time: Mon 28 Sep 2026 07:10:54 +0000
ROA not before: Mon 28 Sep 2026 07:10:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213115
IP address blocks: 67.221.248.0/23 maxlen: 23
2001:67c:2474::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:da:31:8d:7e:33:b7:f3:c9:ce:02:66:be:5f:c2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b062991d318b0eb603ad17cb3a5114eed5b77e34
Validity
Not Before: Sep 28 07:10:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abb2f4229951e3c5ef2185c6d6fa3bab49ea4ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:b9:3e:e3:82:e3:c1:b7:99:c4:f6:94:df:
f2:1a:ff:43:23:e9:9e:2d:5f:f6:36:33:86:d6:ef:
79:bd:99:9b:77:df:71:33:49:c7:6a:9d:88:73:51:
7a:9a:90:a0:6c:b4:5b:c7:29:be:7c:6a:e9:dc:e1:
bb:d3:90:a6:9a:f7:df:6e:9a:4e:08:5b:41:80:77:
cf:b0:58:df:8a:7f:71:81:63:0e:6e:79:f0:e0:26:
29:61:1b:0e:3e:bd:9e:24:c6:88:70:36:f9:51:ad:
70:44:98:99:f0:a8:bc:5d:7f:5d:8a:e0:c6:52:0a:
d3:c7:1d:a1:af:8e:28:44:29:46:85:b0:4e:9f:47:
ab:12:9e:0d:b3:de:23:14:fa:6b:a9:a5:40:1d:92:
70:3b:31:fe:c4:29:41:f3:9d:1c:9e:80:bc:8b:8b:
a4:2f:01:e9:7b:6b:bf:e4:68:7c:3c:85:0e:d7:6c:
43:35:e4:58:47:88:d4:fa:97:fc:61:bd:45:b1:0f:
15:4f:de:fd:12:57:b0:df:fc:9c:f7:7e:8d:7a:4d:
25:79:ef:11:ac:65:18:98:d3:f6:05:12:ec:b8:26:
d7:59:aa:7f:05:42:8b:9b:05:53:82:4e:46:fb:59:
40:8d:12:16:ec:9b:b8:3c:bb:b2:6a:31:68:e9:f8:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B2:F4:22:99:51:E3:C5:EF:21:85:C6:D6:FA:3B:AB:49:EA:4A:D2
X509v3 Authority Key Identifier:
keyid:B0:62:99:1D:31:8B:0E:B6:03:AD:17:CB:3A:51:14:EE:D5:B7:7E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/q7L0IplR48XvIYXG1vo7q0nqStI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.221.248.0/23
IPv6:
2001:67c:2474::/48
Signature Algorithm: sha256WithRSAEncryption
49:a9:e5:f1:82:81:fc:5d:24:d7:c9:98:9e:1f:15:1b:1d:63:
57:2e:f7:bd:88:d1:7d:e8:52:f8:96:c4:a1:34:25:75:68:5f:
40:21:9a:11:db:f4:e1:e8:04:5a:c9:4d:3c:eb:9b:8a:71:a7:
65:81:04:d9:8e:f9:90:09:36:58:f7:f3:36:c8:90:a8:a1:a1:
76:6b:fb:ab:7a:21:5e:b1:f5:f4:36:cf:35:cf:ea:75:ec:55:
62:99:e6:03:20:cc:f4:eb:71:86:b9:45:07:1d:ae:e6:b0:e7:
4d:c9:f4:06:9a:15:d9:61:72:bd:7d:d4:f3:f6:19:65:d8:71:
4f:f1:4d:9b:0b:67:a4:b8:de:fc:4a:9c:f3:f7:e9:fd:3e:f9:
1a:fe:04:17:8a:f7:5b:68:2f:08:b2:a6:02:ce:6a:ac:27:5b:
44:f2:d8:27:fc:cc:4a:27:47:83:28:97:0a:b5:9b:fc:c7:d8:
1f:e3:4e:e7:b7:37:6e:a1:8f:e5:38:44:df:cb:58:53:03:19:
0c:3f:38:cc:cf:29:be:f7:cf:e4:38:b3:6c:06:69:08:f1:5b:
39:d2:1f:f9:b8:c9:03:5f:5e:f7:75:cf:62:a7:a2:71:10:74:
c1:36:a7:6d:70:cc:03:5e:03:8f:54:67:b7:c1:66:c2:e9:62:
56:56:de:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaDm2jGNfjO388nOAma+X8JDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNjI5OTFkMzE4YjBlYjYwM2FkMTdjYjNhNTExNGVlZDVi
NzdlMzQwHhcNMjYwOTI4MDcxMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmIyZjQyMjk5NTFlM2M1ZWYyMTg1YzZkNmZhM2JhYjQ5ZWE0YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+i5PuOC48G3mcT2lN/yGv9DI+me
LV/2NjOG1u95vZmbd99xM0nHap2Ic1F6mpCgbLRbxym+fGrp3OG705CmmvffbppO
CFtBgHfPsFjfin9xgWMObnnw4CYpYRsOPr2eJMaIcDb5Ua1wRJiZ8Ki8XX9diuDG
UgrTxx2hr44oRClGhbBOn0erEp4Ns94jFPprqaVAHZJwOzH+xClB850cnoC8i4uk
LwHpe2u/5Gh8PIUO12xDNeRYR4jU+pf8Yb1FsQ8VT979Elew3/yc936Nek0lee8R
rGUYmNP2BRLsuCbXWap/BUKLmwVTgk5G+1lAjRIW7Ju4PLuyajFo6fizQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKuy9CKZUePF7yGFxtb6O6tJ6krSMB8GA1UdIwQY
MBaAFLBimR0xiw62A60XyzpRFO7Vt340MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0dLWkhUR0xEcllEclJmTE9sRVU3dFczZmpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85NjU1ODUtNmVkYy00ZTQ0LTk0M2It
OTY3YzU0NWRiODEwLzEvcTdMMElwbFI0OFh2SVlYRzF2bzdxMG5xU3RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85NjU1ODUtNmVkYy00ZTQ0LTk0M2ItOTY3YzU0NWRiODEw
LzEvc0dLWkhUR0xEcllEclJmTE9sRVU3dFczZmpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBQ934MA8E
AgACMAkDBwAgAQZ8JHQwDQYJKoZIhvcNAQELBQADggEBAEmp5fGCgfxdJNfJmJ4f
FRsdY1cu972I0X3oUviWxKE0JXVoX0AhmhHb9OHoBFrJTTzrm4pxp2WBBNmO+ZAJ
Nlj38zbIkKihoXZr+6t6IV6x9fQ2zzXP6nXsVWKZ5gMgzPTrcYa5RQcdruaw503J
9AaaFdlhcr191PP2GWXYcU/xTZsLZ6S43vxKnPP36f0++Rr+BBeK91toLwiypgLO
aqwnW0Ty2Cf8zEonR4Molwq1m/zH2B/jTue3N26hj+U4RN/LWFMDGQw/OMzPKb73
z+Q4s2wGaQjxWznSH/m4yQNfXvd1z2KnonEQdME2p21wzANeA49UZ7fBZsLpYlZW
3k0=
-----END CERTIFICATE-----
Generated at Tue Oct 6 22:38:17 2026 by rpki-client