Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/qvxb9I-qtYwq5nyaTOxh967mrFw.roa
File: qvxb9I-qtYwq5nyaTOxh967mrFw.roa (raw, json)
Hash identifier: 0+npisFp4U/poMLopt75vxz8Mv7lcpuIpt+bI27YjSA=
Subject key identifier: AA:FC:5B:F4:8F:AA:B5:8C:2A:E6:7C:9A:4C:EC:61:F7:AE:E6:AC:5C
Certificate issuer: /CN=9f91443630bed4a41827ace57079a947ac87cbbe
Certificate serial: 019B7758B52ABA28ACB2188AE74EF8A1A9A8
Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/qvxb9I-qtYwq5nyaTOxh967mrFw.roa
Signing time: Thu 01 Jan 2026 02:17:40 +0000
ROA not before: Thu 01 Jan 2026 02:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205622
IP address blocks: 185.198.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:b5:2a:ba:28:ac:b2:18:8a:e7:4e:f8:a1:a9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe
Validity
Not Before: Jan 1 02:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aafc5bf48faab58c2ae67c9a4cec61f7aee6ac5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:ff:1d:1c:2b:6b:dc:63:47:bb:3c:87:21:
7a:fe:2f:4a:7f:74:4b:a4:4c:5c:56:03:0e:6e:81:
84:ba:01:63:e6:d0:bb:8f:29:47:59:8c:b5:e8:c6:
53:65:a0:16:12:bb:ef:3d:51:10:33:90:25:c6:bf:
36:79:15:44:42:4a:29:95:c9:d4:db:d4:bf:f8:17:
73:4c:ab:ab:61:7c:47:56:f8:a0:11:bf:92:38:a6:
3f:74:4d:c7:7a:e6:e7:34:02:2c:96:48:92:7d:f5:
dd:67:56:62:c6:c2:d4:e2:6e:e9:bd:bf:84:b2:97:
f4:74:29:a2:97:fe:8d:5a:cf:e9:75:3c:64:c1:41:
5e:c4:81:41:39:27:3c:af:ef:fa:c2:a5:52:4e:11:
af:f0:36:63:46:d7:97:76:e9:b5:bf:61:81:41:63:
d0:b7:cb:c0:88:2b:3b:93:58:16:08:b9:47:cc:4d:
58:d4:84:b4:d5:f6:aa:34:4f:91:42:c7:59:36:45:
12:09:0b:01:fb:3f:80:b9:52:11:11:ae:0d:24:90:
55:76:52:fe:04:d5:a8:01:73:1a:ef:a7:c3:88:f8:
94:da:ec:ca:96:c1:7c:68:cf:df:ea:1b:f1:b8:1e:
25:e5:ac:fb:41:47:81:f4:72:b7:0d:dd:51:f3:9e:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:5B:F4:8F:AA:B5:8C:2A:E6:7C:9A:4C:EC:61:F7:AE:E6:AC:5C
X509v3 Authority Key Identifier:
keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/qvxb9I-qtYwq5nyaTOxh967mrFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.160.0/22
Signature Algorithm: sha256WithRSAEncryption
23:7c:b3:84:6b:92:d2:ac:99:29:2e:f5:79:98:a4:76:3a:f5:
6d:9e:00:c2:c9:6d:0e:28:d7:3a:1d:a3:b4:e8:93:73:0c:a5:
9e:9c:42:cc:23:81:e1:d4:17:c2:e5:d0:c8:66:54:36:d7:f8:
8a:3d:0e:e0:0c:75:02:7d:ea:7e:37:18:23:03:9a:b6:45:46:
f1:21:68:8a:c6:4f:ce:0c:52:d3:1b:20:dd:61:fd:7e:13:68:
51:88:80:68:f5:af:45:39:83:e1:00:d5:a6:5e:62:cb:67:73:
02:b8:40:36:24:c2:df:e4:d1:24:0f:83:3d:2c:06:b7:ba:78:
57:38:82:9b:5b:f8:5f:47:a3:98:d4:3f:ab:d8:f5:c8:ef:83:
5a:3e:08:d6:07:7c:45:78:26:ad:25:e9:87:af:b3:77:f0:38:
d4:60:03:cd:15:64:bb:f2:37:6a:4b:9f:02:56:93:0f:64:e4:
be:1f:d4:60:ad:b4:da:94:5e:93:ac:78:9c:94:b5:1e:0c:84:
15:c8:b5:9f:69:04:92:95:43:fb:32:75:76:03:45:8c:0e:aa:
d8:62:bd:37:55:f0:04:25:75:80:7b:33:c3:a2:6e:18:61:e7:
31:a3:ac:e5:37:1c:c9:a4:15:a3:32:ef:8d:3a:6b:c3:e5:97:
23:8c:26:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WLUquiisshiK5074oamoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTE0NDM2MzBiZWQ0YTQxODI3YWNlNTcwNzlhOTQ3YWM4
N2NiYmUwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWZjNWJmNDhmYWFiNThjMmFlNjdjOWE0Y2VjNjFmN2FlZTZhYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscT/HRwra9xjR7s8hyF6/i9Kf3RL
pExcVgMOboGEugFj5tC7jylHWYy16MZTZaAWErvvPVEQM5Alxr82eRVEQkoplcnU
29S/+BdzTKurYXxHVvigEb+SOKY/dE3HeubnNAIslkiSffXdZ1ZixsLU4m7pvb+E
spf0dCmil/6NWs/pdTxkwUFexIFBOSc8r+/6wqVSThGv8DZjRteXdum1v2GBQWPQ
t8vAiCs7k1gWCLlHzE1Y1IS01faqNE+RQsdZNkUSCQsB+z+AuVIREa4NJJBVdlL+
BNWoAXMa76fDiPiU2uzKlsF8aM/f6hvxuB4l5az7QUeB9HK3Dd1R857FBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKr8W/SPqrWMKuZ8mkzsYfeu5qxcMB8GA1UdIwQY
MBaAFJ+RRDYwvtSkGCes5XB5qUesh8u+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMt
NjE3MDBkZGU3NjkyLzEvcXZ4YjlJLXF0WXdxNW55YVRPeGg5NjdtckZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMtNjE3MDBkZGU3Njky
LzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucagMA0G
CSqGSIb3DQEBCwUAA4IBAQAjfLOEa5LSrJkpLvV5mKR2OvVtngDCyW0OKNc6HaO0
6JNzDKWenELMI4Hh1BfC5dDIZlQ21/iKPQ7gDHUCfep+NxgjA5q2RUbxIWiKxk/O
DFLTGyDdYf1+E2hRiIBo9a9FOYPhANWmXmLLZ3MCuEA2JMLf5NEkD4M9LAa3unhX
OIKbW/hfR6OY1D+r2PXI74NaPgjWB3xFeCatJemHr7N38DjUYAPNFWS78jdqS58C
VpMPZOS+H9RgrbTalF6TrHiclLUeDIQVyLWfaQSSlUP7MnV2A0WMDqrYYr03VfAE
JXWAezPDom4YYecxo6zlNxzJpBWjMu+NOmvD5ZcjjCan
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:26:23 2026 by rpki-client