Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/QSmZ1EAuBflnfjeVfuOnxgoHbRo.roa
File: QSmZ1EAuBflnfjeVfuOnxgoHbRo.roa (raw, json)
Hash identifier: xJ2YfVUINNeEYTnAowsXWuUvfUAahaZckwya27zpePw=
Subject key identifier: 41:29:99:D4:40:2E:05:F9:67:7E:37:95:7E:E3:A7:C6:0A:07:6D:1A
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019E0CB08A073E25C05870477E134B9C0725
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/QSmZ1EAuBflnfjeVfuOnxgoHbRo.roa
Signing time: Sat 09 May 2026 12:22:36 +0000
ROA not before: Sat 09 May 2026 12:22:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400536
IP address blocks: 91.190.187.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0c:b0:8a:07:3e:25:c0:58:70:47:7e:13:4b:9c:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: May 9 12:22:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=412999d4402e05f9677e37957ee3a7c60a076d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:8f:56:a1:40:6f:0c:9e:e8:29:d5:70:32:
42:3c:74:61:29:49:75:2c:df:d8:f5:c1:aa:94:e2:
14:40:43:42:a4:b5:22:79:d0:5d:78:e2:13:e6:3c:
73:e7:9b:ae:71:d7:c1:9c:5d:c2:fe:9c:72:82:48:
42:da:28:a8:40:2d:a5:c7:41:58:41:b9:9f:9b:42:
08:4b:1b:bc:7e:72:13:51:c0:ec:24:59:ee:be:98:
da:bb:5d:b5:dd:bc:f0:65:7d:00:fe:2b:b8:2d:ae:
e1:73:61:a4:33:56:80:a2:09:72:55:83:93:f2:57:
fc:f3:02:31:5a:5b:58:e3:9e:fc:c2:ba:a2:e2:8d:
c5:ee:ab:ce:84:71:af:57:4e:05:83:fe:98:82:d1:
2e:54:44:64:2e:03:c7:2c:98:a1:6a:33:79:7c:4c:
7c:b6:96:72:e4:c0:9c:b5:3b:51:ef:85:45:fd:28:
b0:21:02:33:92:3a:54:85:9e:e2:b3:64:b8:90:fa:
ad:06:88:ed:95:1c:3c:ad:65:62:2f:34:c2:91:4a:
b6:c1:7b:8f:71:bc:a5:d1:e7:3b:7e:4b:c2:17:f8:
b0:b9:b6:a0:c0:0c:0a:dd:48:fd:51:d3:c8:e0:14:
7c:d5:a3:08:f2:14:b6:fe:b8:68:9e:a4:f8:9a:b2:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:29:99:D4:40:2E:05:F9:67:7E:37:95:7E:E3:A7:C6:0A:07:6D:1A
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/QSmZ1EAuBflnfjeVfuOnxgoHbRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.187.0/24
92.61.103.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ec:89:33:68:e0:bb:87:47:29:ed:ff:40:5c:ce:c3:25:da:
dd:c3:c3:38:5f:74:6e:49:b1:19:41:68:82:05:e4:89:57:52:
58:da:c8:89:a9:11:8e:5b:56:4c:0a:06:17:96:1c:3f:f6:69:
11:f0:a2:f5:00:57:cc:aa:53:38:b2:eb:77:8e:a7:4a:e4:ea:
1a:bd:54:a1:58:6b:4b:1a:07:e8:17:1e:96:7d:6c:66:4e:3d:
e3:3b:3e:92:3c:fe:e8:0a:88:63:ac:e9:5d:95:84:fe:be:32:
62:a3:e8:6a:f0:ed:70:94:53:22:ef:1c:93:69:02:3e:37:16:
01:7e:ee:d6:36:b4:91:d8:9f:7a:51:76:1f:16:3f:77:2c:85:
39:f7:3c:81:b8:e5:1f:f2:0f:18:8c:36:f9:6a:22:3c:af:ae:
d4:8f:ac:ac:f0:5f:ea:6b:f3:77:f8:b3:0b:9d:3a:de:db:69:
45:64:59:0f:f1:95:d4:f0:2b:b1:25:d5:7f:a2:84:c3:db:7d:
fd:c7:85:12:4f:3e:1b:e5:e2:c4:a8:e4:87:42:db:d9:07:2d:
04:49:e3:94:81:c1:ee:8d:e8:0b:e8:33:df:13:88:da:74:32:
a8:66:6c:0b:04:29:74:09:b8:c6:b4:58:e3:cb:ba:1b:72:bc:
9f:4e:d9:6b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4MsIoHPiXAWHBHfhNLnAclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjYwNTA5MTIyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTI5OTlkNDQwMmUwNWY5Njc3ZTM3OTU3ZWUzYTdjNjBhMDc2ZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFSPVqFAbwye6CnVcDJCPHRhKUl1
LN/Y9cGqlOIUQENCpLUiedBdeOIT5jxz55uucdfBnF3C/pxygkhC2iioQC2lx0FY
Qbmfm0IISxu8fnITUcDsJFnuvpjau1213bzwZX0A/iu4La7hc2GkM1aAoglyVYOT
8lf88wIxWltY4578wrqi4o3F7qvOhHGvV04Fg/6YgtEuVERkLgPHLJihajN5fEx8
tpZy5MCctTtR74VF/SiwIQIzkjpUhZ7is2S4kPqtBojtlRw8rWViLzTCkUq2wXuP
cbyl0ec7fkvCF/iwubagwAwK3Uj9UdPI4BR81aMI8hS2/rhonqT4mrKQnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEEpmdRALgX5Z343lX7jp8YKB20aMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvUVNtWjFFQXVCZmxuZmplVmZ1T254Z29IYlJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW767AwQA
XD1nMA0GCSqGSIb3DQEBCwUAA4IBAQCx7IkzaOC7h0cp7f9AXM7DJdrdw8M4X3Ru
SbEZQWiCBeSJV1JY2siJqRGOW1ZMCgYXlhw/9mkR8KL1AFfMqlM4sut3jqdK5Ooa
vVShWGtLGgfoFx6WfWxmTj3jOz6SPP7oCohjrOldlYT+vjJio+hq8O1wlFMi7xyT
aQI+NxYBfu7WNrSR2J96UXYfFj93LIU59zyBuOUf8g8YjDb5aiI8r67Uj6ys8F/q
a/N3+LMLnTre22lFZFkP8ZXU8CuxJdV/ooTD2339x4USTz4b5eLEqOSHQtvZBy0E
SeOUgcHujegL6DPfE4jadDKoZmwLBCl0CbjGtFjjy7obcryfTtlr
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:02 2026 by rpki-client