Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/_QLic1olYUPd_fY2d_h9WrgGPIA.roa
File: _QLic1olYUPd_fY2d_h9WrgGPIA.roa (raw, json)
Hash identifier: OjCrer3sO5hPLgOKZ7yjVlWStPYb1xzzz03u7geE+lE=
Subject key identifier: FD:02:E2:73:5A:25:61:43:DD:FD:F6:36:77:F8:7D:5A:B8:06:3C:80
Certificate issuer: /CN=f6832f42a5cba79648e31697a969900d7b617d8e
Certificate serial: 019E82DFD32FB11DDDF2FEAC61F62BF11C28
Authority key identifier: F6:83:2F:42:A5:CB:A7:96:48:E3:16:97:A9:69:90:0D:7B:61:7D:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oMvQqXLp5ZI4xaXqWmQDXthfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/_QLic1olYUPd_fY2d_h9WrgGPIA.roa
Signing time: Mon 01 Jun 2026 11:09:27 +0000
ROA not before: Mon 01 Jun 2026 11:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213559
IP address blocks: 185.60.182.0/24 maxlen: 24
2a14:bd00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oMvQqXLp5ZI4xaXqWmQDXthfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:df:d3:2f:b1:1d:dd:f2:fe:ac:61:f6:2b:f1:1c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6832f42a5cba79648e31697a969900d7b617d8e
Validity
Not Before: Jun 1 11:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd02e2735a256143ddfdf63677f87d5ab8063c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:4d:a3:22:43:b8:1a:6f:0e:c7:0d:92:35:
ad:50:d2:c6:c9:d5:9b:da:be:2e:71:5c:fb:59:09:
66:75:a8:67:88:70:65:2a:6f:25:5d:87:3d:98:fc:
3d:f2:f5:1b:b7:7a:3d:ec:d3:36:1f:c9:1b:72:97:
31:f8:cd:58:7f:41:e3:96:00:3f:19:30:ba:35:3e:
6d:0c:e3:52:a0:fe:c9:2b:93:ff:6a:03:a8:c8:8a:
b5:d4:64:d9:24:e7:f8:9c:5a:27:15:c6:64:77:38:
bb:cf:d4:6f:66:63:41:a0:88:00:05:f5:5c:2a:34:
6b:b9:c6:b1:3e:e8:b0:7b:a1:bf:47:b9:f8:da:a3:
a5:fc:00:93:b3:b8:3d:e0:1e:3f:f6:d1:f2:c3:7d:
d9:76:37:fa:f5:3f:c1:13:0d:47:2a:3d:5d:52:a3:
b2:ee:8e:70:10:e0:86:fa:1f:92:32:02:ab:b4:e8:
e6:61:74:0c:5e:7a:a3:bd:f0:5c:ed:f9:19:22:60:
c4:34:11:f4:17:1d:de:43:52:d5:74:05:f6:5b:fd:
89:ec:9f:62:08:95:e2:70:a1:80:1b:bd:d1:a8:fd:
33:b4:91:c7:ea:4d:d6:de:ad:cb:57:8e:ab:f2:f6:
02:96:2d:17:48:0b:9e:17:57:48:4c:05:02:d6:bd:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:02:E2:73:5A:25:61:43:DD:FD:F6:36:77:F8:7D:5A:B8:06:3C:80
X509v3 Authority Key Identifier:
keyid:F6:83:2F:42:A5:CB:A7:96:48:E3:16:97:A9:69:90:0D:7B:61:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oMvQqXLp5ZI4xaXqWmQDXthfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/_QLic1olYUPd_fY2d_h9WrgGPIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.182.0/24
IPv6:
2a14:bd00::/29
Signature Algorithm: sha256WithRSAEncryption
1f:57:41:81:63:17:4c:66:d9:02:ce:c7:5b:dc:7b:1f:7d:82:
51:ce:47:ff:ba:94:ea:ad:9b:e3:cf:3f:20:43:87:44:7f:54:
9d:c8:38:c9:4c:1b:0c:fe:ca:47:3f:97:a2:be:49:55:6b:db:
fe:14:47:9b:49:00:2f:24:48:62:e9:3b:98:79:4d:a5:78:33:
c0:60:e9:0a:9a:ce:10:df:c6:0f:7c:ff:0b:fe:04:26:dd:d0:
f7:64:73:e8:0c:ef:eb:f7:d9:4c:22:8b:e8:e0:c2:f7:21:a4:
7a:e7:3f:e4:40:37:d3:a5:df:52:bd:51:ba:c9:5c:72:e3:d9:
dd:e2:4f:0c:7d:50:c5:16:24:3c:b8:f3:7a:b5:5b:8b:04:2a:
8a:4a:63:7a:56:40:55:3a:c4:d0:99:98:2b:73:d7:4f:60:e9:
25:02:ef:34:ae:87:9d:e8:93:e5:4e:67:10:91:6d:88:d6:7f:
76:9b:b8:d5:ba:f4:35:7b:92:18:3b:25:67:11:75:54:cc:37:
1c:2f:5b:cf:0a:a4:d4:4b:ff:29:18:5b:17:8b:a1:1f:98:23:
e1:8b:33:98:16:1a:ce:90:27:38:2a:15:6d:c3:5f:50:69:62:
ca:94:0f:49:b8:4a:12:2d:4f:dc:e0:4d:b2:12:74:af:55:97:
74:05:3d:f0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ6C39MvsR3d8v6sYfYr8RwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODMyZjQyYTVjYmE3OTY0OGUzMTY5N2E5Njk5MDBkN2I2
MTdkOGUwHhcNMjYwNjAxMTEwOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDAyZTI3MzVhMjU2MTQzZGRmZGY2MzY3N2Y4N2Q1YWI4MDYzYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUpNoyJDuBpvDscNkjWtUNLGydWb
2r4ucVz7WQlmdahniHBlKm8lXYc9mPw98vUbt3o97NM2H8kbcpcx+M1Yf0HjlgA/
GTC6NT5tDONSoP7JK5P/agOoyIq11GTZJOf4nFonFcZkdzi7z9RvZmNBoIgABfVc
KjRrucaxPuiwe6G/R7n42qOl/ACTs7g94B4/9tHyw33Zdjf69T/BEw1HKj1dUqOy
7o5wEOCG+h+SMgKrtOjmYXQMXnqjvfBc7fkZImDENBH0Fx3eQ1LVdAX2W/2J7J9i
CJXicKGAG73RqP0ztJHH6k3W3q3LV46r8vYCli0XSAueF1dITAUC1r3D7wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFP0C4nNaJWFD3f32Nnf4fVq4BjyAMB8GA1UdIwQY
MBaAFPaDL0Kly6eWSOMWl6lpkA17YX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9NdlFxWExwNVpJNHhhWHFXbVFEWHRoZlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iNTYwMWEtMzQ3NC00MDgyLTgwMzAt
OGU4OThlOWZhOWVhLzEvX1FMaWMxb2xZVVBkX2ZZMmRfaDlXcmdHUElBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iNTYwMWEtMzQ3NC00MDgyLTgwMzAtOGU4OThlOWZhOWVh
LzEvOW9NdlFxWExwNVpJNHhhWHFXbVFEWHRoZlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuTy2MA0E
AgACMAcDBQMqFL0AMA0GCSqGSIb3DQEBCwUAA4IBAQAfV0GBYxdMZtkCzsdb3Hsf
fYJRzkf/upTqrZvjzz8gQ4dEf1SdyDjJTBsM/spHP5eivklVa9v+FEebSQAvJEhi
6TuYeU2leDPAYOkKms4Q38YPfP8L/gQm3dD3ZHPoDO/r99lMIovo4ML3IaR65z/k
QDfTpd9SvVG6yVxy49nd4k8MfVDFFiQ8uPN6tVuLBCqKSmN6VkBVOsTQmZgrc9dP
YOklAu80roed6JPlTmcQkW2I1n92m7jVuvQ1e5IYOyVnEXVUzDccL1vPCqTUS/8p
GFsXi6EfmCPhizOYFhrOkCc4KhVtw19QaWLKlA9JuEoSLU/c4E2yEnSvVZd0BT3w
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:35 2026 by rpki-client