Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/qnONVkF_M-vtNihhtsXh0zM04k0.roa
File: qnONVkF_M-vtNihhtsXh0zM04k0.roa (raw, json)
Hash identifier: AaKR7xKCkFq/gBrhGm01TbC+Cp8UgyjlwsWBI+Oke+M=
Subject key identifier: AA:73:8D:56:41:7F:33:EB:ED:36:28:61:B6:C5:E1:D3:33:34:E2:4D
Certificate issuer: /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial: 019F4FE56E1641D827F6051CE2A8EF19FAE0
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/qnONVkF_M-vtNihhtsXh0zM04k0.roa
Signing time: Sat 11 Jul 2026 06:37:43 +0000
ROA not before: Sat 11 Jul 2026 06:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 31.40.4.0/22 maxlen: 22
91.206.177.0/24 maxlen: 24
92.51.56.0/21 maxlen: 21
153.51.0.0/19 maxlen: 19
153.51.128.0/19 maxlen: 19
193.37.38.0/24 maxlen: 24
194.5.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4f:e5:6e:16:41:d8:27:f6:05:1c:e2:a8:ef:19:fa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Validity
Not Before: Jul 11 06:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa738d56417f33ebed362861b6c5e1d33334e24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:b3:f0:d9:da:75:f6:85:1b:37:d2:30:08:
84:4c:ff:c2:62:9a:1b:23:f8:97:74:66:7e:58:33:
11:b0:0d:f5:61:e8:aa:30:08:07:07:26:29:76:fe:
28:4c:0b:02:b9:7e:28:24:19:5c:f8:40:8b:6c:ff:
02:ef:14:7f:66:33:85:23:f7:38:68:49:4e:8c:22:
50:b2:1c:13:4a:cb:88:4a:70:53:db:9f:19:88:98:
a7:b3:fd:8e:2c:25:b1:09:f4:3b:ba:49:3a:27:ab:
be:09:06:9a:08:d0:9d:f9:b2:68:a5:b7:96:6b:b8:
b4:b1:91:31:df:46:30:0c:c7:00:2b:db:b9:a2:95:
a7:a7:7f:83:aa:ee:ae:29:97:be:0b:74:71:5a:c9:
16:37:37:e5:80:ec:63:d6:9f:65:25:56:42:9a:16:
ff:a2:22:6c:b8:5d:c6:6b:88:d7:0b:9e:4b:d0:8c:
3e:b5:7f:93:fc:24:17:59:57:21:35:cc:cf:6f:29:
4a:0d:99:91:23:fb:0a:32:4a:35:a1:c6:e4:08:e1:
74:b6:6b:7e:a5:e3:d5:bf:f7:ae:f2:36:95:e7:8a:
e4:b0:21:a5:da:93:be:6a:2d:59:04:b3:76:27:73:
ae:15:44:1a:f5:9d:ee:88:2c:c9:7d:25:ba:58:a3:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:8D:56:41:7F:33:EB:ED:36:28:61:B6:C5:E1:D3:33:34:E2:4D
X509v3 Authority Key Identifier:
keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/qnONVkF_M-vtNihhtsXh0zM04k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.4.0/22
91.206.177.0/24
92.51.56.0/21
153.51.0.0/19
153.51.128.0/19
193.37.38.0/24
194.5.16.0/24
Signature Algorithm: sha256WithRSAEncryption
94:67:a8:d7:e4:b7:f8:38:7a:2c:86:16:f1:0c:2b:46:52:94:
d9:e0:c6:4f:c5:ec:de:63:40:9f:2b:aa:5a:43:9c:d4:f4:66:
f8:96:7d:83:63:c1:86:df:6c:d5:ac:bd:70:35:42:fd:c9:c0:
83:05:c0:51:f0:7f:71:87:ef:21:c5:98:c6:24:df:da:23:99:
80:25:e2:23:f7:8c:88:2c:30:53:aa:ac:19:a1:7c:53:54:e4:
ac:5e:8c:bf:bc:be:1c:a0:8c:51:16:66:9f:e2:f5:2c:bf:0c:
c2:c5:6a:28:3b:5b:d9:71:f0:fa:d1:19:44:89:c6:90:4c:c9:
a4:83:94:f1:9a:72:11:e5:86:95:28:58:95:8d:e8:ff:0c:b8:
72:dd:cf:19:d4:07:be:fc:86:ae:a9:c5:14:0a:7e:9c:68:bd:
f2:c1:51:34:81:21:59:aa:95:51:a6:79:e8:c7:cf:9c:52:b2:
f5:3a:ef:c0:83:f9:e7:72:c9:c4:c6:d6:d8:1d:4b:5c:b5:24:
ff:7c:90:ff:f4:dd:9f:4d:fd:00:40:25:65:87:3a:c5:2d:78:
5d:90:a2:fb:02:55:d9:a3:4e:b6:e9:2d:6d:52:20:ca:e8:a1:
73:75:de:3c:ba:c5:b1:20:47:b9:dd:ce:d8:a5:fb:c8:75:8d:
15:e1:7d:4d
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ9P5W4WQdgn9gUc4qjvGfrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OGNlNmU0ZWUwOWVmNjY2NTgyODY0NTE3OTA5NjlkN2Nm
ZmU5YjkwHhcNMjYwNzExMDYzNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTczOGQ1NjQxN2YzM2ViZWQzNjI4NjFiNmM1ZTFkMzMzMzRlMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa2z8NnadfaFGzfSMAiETP/CYpob
I/iXdGZ+WDMRsA31YeiqMAgHByYpdv4oTAsCuX4oJBlc+ECLbP8C7xR/ZjOFI/c4
aElOjCJQshwTSsuISnBT258ZiJins/2OLCWxCfQ7ukk6J6u+CQaaCNCd+bJopbeW
a7i0sZEx30YwDMcAK9u5opWnp3+Dqu6uKZe+C3RxWskWNzflgOxj1p9lJVZCmhb/
oiJsuF3Ga4jXC55L0Iw+tX+T/CQXWVchNczPbylKDZmRI/sKMko1ocbkCOF0tmt+
pePVv/eu8jaV54rksCGl2pO+ai1ZBLN2J3OuFUQa9Z3uiCzJfSW6WKNFgwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFKpzjVZBfzPr7TYoYbbF4dMzNOJNMB8GA1UdIwQY
MBaAFJiM5uTuCe9mZYKGRReQlp18/+m5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUl6bTVPNEo3MlpsZ29aRkY1Q1duWHpfNmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNTZmNDUtZGEyMy00ZTI1LWEwOGMt
MzY4N2MyZjdkODNlLzEvcW5PTlZrRl9NLXZ0TmloaHRzWGgwek0wNGswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xNTZmNDUtZGEyMy00ZTI1LWEwOGMtMzY4N2MyZjdkODNl
LzEvbUl6bTVPNEo3MlpsZ29aRkY1Q1duWHpfNmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCHygEAwQA
W86xAwQDXDM4AwQFmTMAAwQFmTOAAwQAwSUmAwQAwgUQMA0GCSqGSIb3DQEBCwUA
A4IBAQCUZ6jX5Lf4OHoshhbxDCtGUpTZ4MZPxezeY0CfK6paQ5zU9Gb4ln2DY8GG
32zVrL1wNUL9ycCDBcBR8H9xh+8hxZjGJN/aI5mAJeIj94yILDBTqqwZoXxTVOSs
Xoy/vL4coIxRFmaf4vUsvwzCxWooO1vZcfD60RlEicaQTMmkg5TxmnIR5YaVKFiV
jej/DLhy3c8Z1Ae+/IauqcUUCn6caL3ywVE0gSFZqpVRpnnox8+cUrL1Ou/Ag/nn
csnExtbYHUtctST/fJD/9N2fTf0AQCVlhzrFLXhdkKL7AlXZo0626S1tUiDK6KFz
dd48usWxIEe53c7YpfvIdY0V4X1N
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:02 2026 by rpki-client