Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/lQPkRwjAgL9s8Del_fG_YG6m55w.roa
File: lQPkRwjAgL9s8Del_fG_YG6m55w.roa (raw, json)
Hash identifier: tt7eRX7rLhh4+WSgLjRaVmZ3euA+zhr35kKk4/BemZs=
Subject key identifier: 95:03:E4:47:08:C0:80:BF:6C:F0:37:A5:FD:F1:BF:60:6E:A6:E7:9C
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019F23685102317F5B9A0669A556BDD818CC
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/lQPkRwjAgL9s8Del_fG_YG6m55w.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60241
IP address blocks: 185.34.60.0/22 maxlen: 22
185.120.128.0/22 maxlen: 22
198.52.44.0/22 maxlen: 24
198.52.46.0/23 maxlen: 23
2a04:5d00::/29 maxlen: 29
2a06:9a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:51:02:31:7f:5b:9a:06:69:a5:56:bd:d8:18:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9503e44708c080bf6cf037a5fdf1bf606ea6e79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:97:9e:fb:53:60:27:8d:a7:91:63:07:3f:8d:
54:67:86:5e:35:99:51:fb:23:19:f3:47:f1:f6:32:
ce:62:20:b6:d6:65:4b:73:62:a2:63:cf:79:e6:5d:
cc:da:5f:74:f1:0a:ad:28:7e:7e:ed:ab:fb:08:e6:
75:4b:96:48:3b:85:a6:44:6f:7e:69:d3:0d:2c:36:
d5:d6:ad:a6:2c:51:a7:27:57:77:40:eb:4c:9c:95:
8d:a6:b6:52:0b:61:42:ac:fc:17:d6:85:d7:63:e3:
51:d2:48:ac:8a:50:b5:ef:45:b8:e8:0d:c6:53:40:
72:47:b9:85:89:0e:86:d9:c2:b2:11:b6:6c:f8:4d:
2a:89:f9:d0:c7:d2:32:ce:09:dc:f0:47:10:5f:dc:
cb:4c:1b:88:b8:5e:55:c0:3d:ea:fb:76:6d:ff:ad:
f1:b3:87:f9:fc:99:2b:40:b7:03:0c:63:0c:6a:a6:
11:3b:e0:9b:a5:a5:1a:d5:0f:43:7e:c3:21:6d:16:
b1:7e:9d:99:ea:7d:c5:23:69:2d:06:20:c2:f0:ac:
8a:41:da:4a:96:4b:ee:54:49:81:c3:76:f9:c8:93:
9e:3c:34:de:99:9e:e9:e5:fb:29:ba:99:9d:85:33:
0d:b6:25:88:ce:dd:32:e3:97:11:a1:10:fb:82:3f:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:03:E4:47:08:C0:80:BF:6C:F0:37:A5:FD:F1:BF:60:6E:A6:E7:9C
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/lQPkRwjAgL9s8Del_fG_YG6m55w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.60.0/22
185.120.128.0/22
198.52.44.0/22
IPv6:
2a04:5d00::/29
2a06:9a80::/29
Signature Algorithm: sha256WithRSAEncryption
21:c4:7f:9b:3f:fb:92:a3:da:f2:8f:c2:33:10:77:1c:1e:e4:
e7:79:52:9b:77:08:08:a5:fb:bb:56:3d:58:12:d0:ff:48:79:
36:1f:d4:c1:7e:4b:9f:7e:dc:e6:83:27:35:e8:8d:61:78:93:
07:3d:3c:7c:ef:a0:43:af:85:86:18:88:c2:8b:ed:90:5c:25:
a2:b4:bc:0b:33:c2:59:c4:a2:ff:cd:e9:6a:5a:82:c1:c2:ad:
d2:fe:b7:fd:4a:6e:39:26:6c:47:39:1a:67:ae:c1:9e:52:4f:
35:e9:88:b2:8a:d2:6f:79:bc:29:de:0b:42:42:eb:2e:c7:f1:
61:9a:03:61:c5:97:4c:18:ac:49:36:aa:5b:c1:92:c3:30:55:
33:ac:24:3d:d0:ab:7e:13:fb:b6:f3:3f:ea:c0:61:b3:59:fd:
de:f5:cb:00:fc:fe:35:99:07:3c:a6:31:58:f0:df:44:d1:f9:
8e:67:61:ad:bb:ba:03:68:a5:25:63:76:69:13:5b:db:b5:0c:
8f:e8:75:f3:f2:c2:07:6d:3b:08:dc:86:12:ba:a4:ff:ee:0d:
43:11:29:fe:90:79:93:7d:ba:17:45:e4:23:55:e2:5e:64:c0:
9f:67:76:02:10:ab:cd:20:4b:db:81:f3:83:6b:fa:db:58:95:
9c:e2:3b:80
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZ8jaFECMX9bmgZppVa92BjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjgzNTc2MGUxNDJhY2VhNGJmMGE3ZmY4YWU3Njc2OGY1
ZGNkYzcwHhcNMjYwNzAyMTUxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTAzZTQ0NzA4YzA4MGJmNmNmMDM3YTVmZGYxYmY2MDZlYTZlNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJee+1NgJ42nkWMHP41UZ4ZeNZlR
+yMZ80fx9jLOYiC21mVLc2KiY8955l3M2l908QqtKH5+7av7COZ1S5ZIO4WmRG9+
adMNLDbV1q2mLFGnJ1d3QOtMnJWNprZSC2FCrPwX1oXXY+NR0kisilC170W46A3G
U0ByR7mFiQ6G2cKyEbZs+E0qifnQx9Iyzgnc8EcQX9zLTBuIuF5VwD3q+3Zt/63x
s4f5/JkrQLcDDGMMaqYRO+CbpaUa1Q9DfsMhbRaxfp2Z6n3FI2ktBiDC8KyKQdpK
lkvuVEmBw3b5yJOePDTemZ7p5fspupmdhTMNtiWIzt0y45cRoRD7gj/8dQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFJUD5EcIwIC/bPA3pf3xv2BupuecMB8GA1UdIwQY
MBaAFAH4NXYOFCrOpL8Kf/iudnaPXc3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZnMWRnNFVLczZrdndwXy1LNTJkbzlkemNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvbFFQa1J3akFnTDlzOERlbF9mR19ZRzZtNTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvQWZnMWRnNFVLczZrdndwXy1LNTJkbzlkemNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuSI8AwQC
uXiAAwQCxjQsMBQEAgACMA4DBQMqBF0AAwUDKgaagDANBgkqhkiG9w0BAQsFAAOC
AQEAIcR/mz/7kqPa8o/CMxB3HB7k53lSm3cICKX7u1Y9WBLQ/0h5Nh/UwX5Ln37c
5oMnNeiNYXiTBz08fO+gQ6+FhhiIwovtkFwlorS8CzPCWcSi/83palqCwcKt0v63
/UpuOSZsRzkaZ67BnlJPNemIsorSb3m8Kd4LQkLrLsfxYZoDYcWXTBisSTaqW8GS
wzBVM6wkPdCrfhP7tvM/6sBhs1n93vXLAPz+NZkHPKYxWPDfRNH5jmdhrbu6A2il
JWN2aRNb27UMj+h18/LCB207CNyGErqk/+4NQxEp/pB5k326F0XkI1XiXmTAn2d2
AhCrzSBL24Hzg2v621iVnOI7gA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:00 2026 by rpki-client