Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/qWZEFT_OxQeqd6Y0OYCdMhrVv30.roa
File: qWZEFT_OxQeqd6Y0OYCdMhrVv30.roa (raw, json)
Hash identifier: g41dSquqqdgjaDzTxJvTsOMXpBmPaLOtw6LNHhJmIbg=
Subject key identifier: A9:66:44:15:3F:CE:C5:07:AA:77:A6:34:39:80:9D:32:1A:D5:BF:7D
Certificate issuer: /CN=ecebb32bd6b84b01cfa4d4277d49bb752f16d480
Certificate serial: 019F232037106A48E71F289A21D5221F84D4
Authority key identifier: EC:EB:B3:2B:D6:B8:4B:01:CF:A4:D4:27:7D:49:BB:75:2F:16:D4:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/qWZEFT_OxQeqd6Y0OYCdMhrVv30.roa
Signing time: Thu 02 Jul 2026 13:59:01 +0000
ROA not before: Thu 02 Jul 2026 13:59:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198272
IP address blocks: 91.233.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:20:37:10:6a:48:e7:1f:28:9a:21:d5:22:1f:84:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecebb32bd6b84b01cfa4d4277d49bb752f16d480
Validity
Not Before: Jul 2 13:59:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a96644153fcec507aa77a63439809d321ad5bf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:11:af:85:09:6a:66:4c:50:83:dd:6c:e4:
3f:70:98:67:74:a9:57:ca:24:40:0e:43:13:4e:49:
3b:57:ea:3c:02:1f:d3:ff:60:6b:f1:32:5a:a6:cc:
01:02:fe:b9:1a:23:35:56:b3:b9:e5:81:15:2e:06:
61:ec:26:b3:fe:65:0e:b7:44:60:65:dc:d3:f1:9b:
b1:e8:3c:80:8c:df:fb:fa:06:31:fa:dc:22:39:37:
19:fb:e7:c4:7f:c7:a0:ab:21:a4:01:40:0f:15:ed:
59:87:85:21:96:fe:a7:32:4c:79:11:09:f8:84:08:
2a:7f:fa:76:dd:0f:c6:0c:fd:49:80:7d:5b:5c:e2:
84:0a:c9:c7:f7:a7:fc:70:23:87:49:a3:f8:16:d0:
56:64:24:0f:28:a5:44:2d:08:be:a4:84:be:93:4f:
dd:f5:9f:f5:d9:d9:79:07:95:53:39:ec:c0:30:87:
6c:cd:c4:7f:32:3b:8c:9c:1f:a5:66:66:fc:7e:44:
9d:9e:7d:d5:ec:cb:d3:ca:f2:3e:ce:b4:c2:a9:6d:
23:a0:ad:e9:75:68:99:9e:64:3f:fd:51:e8:34:82:
eb:64:d0:fd:97:63:85:f5:ef:ef:32:80:91:ec:45:
93:60:ac:ba:04:56:a8:32:0b:90:51:4c:5b:6f:f7:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:66:44:15:3F:CE:C5:07:AA:77:A6:34:39:80:9D:32:1A:D5:BF:7D
X509v3 Authority Key Identifier:
keyid:EC:EB:B3:2B:D6:B8:4B:01:CF:A4:D4:27:7D:49:BB:75:2F:16:D4:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/qWZEFT_OxQeqd6Y0OYCdMhrVv30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:75:d2:1f:a7:5c:9f:46:c6:bd:98:95:43:86:8d:bf:b9:f5:
4f:ab:38:84:d2:03:5f:3b:1b:a4:34:eb:99:21:24:d3:96:b9:
7b:b6:e0:9e:6e:e8:02:bd:05:99:2b:cc:56:fd:ec:09:bf:78:
02:9b:6b:63:7d:e0:3d:a9:1f:3c:82:ff:7e:1c:4b:05:d9:fb:
38:76:ab:7e:9c:8e:38:cc:dd:36:16:b3:6a:35:2d:d5:b0:6b:
e6:e4:32:5c:2a:b0:b4:0a:89:a3:8e:d6:8d:e6:4a:ce:37:a5:
9b:31:7c:1a:e9:76:34:d5:bc:31:91:8e:0a:8a:a5:75:e0:c7:
8e:b1:a6:8b:72:1b:90:ee:9c:d3:7c:fa:69:70:d4:21:50:55:
a3:5e:78:8f:56:1b:f5:00:08:d4:1a:3d:ab:5b:e4:13:88:2a:
63:dc:05:84:22:82:1b:cd:ca:04:16:01:8c:c5:04:b4:99:6f:
5a:3c:d2:bf:53:3f:e7:16:71:e2:26:2d:a4:03:81:8c:60:eb:
eb:b7:63:6a:83:82:0b:6b:ee:8d:88:47:75:31:0e:90:95:19:
b2:46:fb:fc:72:18:d0:a5:aa:7c:e6:c4:ea:e4:6d:97:fe:88:
87:47:ce:87:ce:5e:a3:07:88:ef:4f:eb:72:ce:be:38:4e:0b:
43:15:ba:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jIDcQakjnHyiaIdUiH4TUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWJiMzJiZDZiODRiMDFjZmE0ZDQyNzdkNDliYjc1MmYx
NmQ0ODAwHhcNMjYwNzAyMTM1OTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTY2NDQxNTNmY2VjNTA3YWE3N2E2MzQzOTgwOWQzMjFhZDViZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZkRr4UJamZMUIPdbOQ/cJhndKlX
yiRADkMTTkk7V+o8Ah/T/2Br8TJapswBAv65GiM1VrO55YEVLgZh7Caz/mUOt0Rg
ZdzT8Zux6DyAjN/7+gYx+twiOTcZ++fEf8egqyGkAUAPFe1Zh4Uhlv6nMkx5EQn4
hAgqf/p23Q/GDP1JgH1bXOKECsnH96f8cCOHSaP4FtBWZCQPKKVELQi+pIS+k0/d
9Z/12dl5B5VTOezAMIdszcR/MjuMnB+lZmb8fkSdnn3V7MvTyvI+zrTCqW0joK3p
dWiZnmQ//VHoNILrZND9l2OF9e/vMoCR7EWTYKy6BFaoMguQUUxbb/fL/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKlmRBU/zsUHqnemNDmAnTIa1b99MB8GA1UdIwQY
MBaAFOzrsyvWuEsBz6TUJ31Ju3UvFtSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN091eks5YTRTd0hQcE5RbmZVbTdkUzhXMUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85YmE1ZmEtY2E5Yi00Zjk5LTljZTUt
MDg3MGMxOWVkN2Y4LzEvcVdaRUZUX094UWVxZDZZME9ZQ2RNaHJWdjMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85YmE1ZmEtY2E5Yi00Zjk5LTljZTUtMDg3MGMxOWVkN2Y4
LzEvN091eks5YTRTd0hQcE5RbmZVbTdkUzhXMUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+kTMA0G
CSqGSIb3DQEBCwUAA4IBAQCdddIfp1yfRsa9mJVDho2/ufVPqziE0gNfOxukNOuZ
ISTTlrl7tuCebugCvQWZK8xW/ewJv3gCm2tjfeA9qR88gv9+HEsF2fs4dqt+nI44
zN02FrNqNS3VsGvm5DJcKrC0ComjjtaN5krON6WbMXwa6XY01bwxkY4KiqV14MeO
saaLchuQ7pzTfPppcNQhUFWjXniPVhv1AAjUGj2rW+QTiCpj3AWEIoIbzcoEFgGM
xQS0mW9aPNK/Uz/nFnHiJi2kA4GMYOvrt2Nqg4ILa+6NiEd1MQ6QlRmyRvv8chjQ
pap85sTq5G2X/oiHR86Hzl6jB4jvT+tyzr44TgtDFbo3
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:57 2026 by rpki-client