Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/qjFyOVNC7cy2BWp-9aeHp4PinTw.roa
File: qjFyOVNC7cy2BWp-9aeHp4PinTw.roa (raw, json)
Hash identifier: fOUXYgSgvqQL9hg9nKQBJUXVnY8YtOYVKAMT4wMofyk=
Subject key identifier: AA:31:72:39:53:42:ED:CC:B6:05:6A:7E:F5:A7:87:A7:83:E2:9D:3C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019F662B60AD02630CB8BC62920F5B53C5AD
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/qjFyOVNC7cy2BWp-9aeHp4PinTw.roa
Signing time: Wed 15 Jul 2026 14:25:46 +0000
ROA not before: Wed 15 Jul 2026 14:25:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203367
IP address blocks: 193.142.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:2b:60:ad:02:63:0c:b8:bc:62:92:0f:5b:53:c5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Jul 15 14:25:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa3172395342edccb6056a7ef5a787a783e29d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:fd:8e:be:7a:53:67:a1:c5:df:cb:6a:f6:
9a:9f:9a:f3:fb:f9:8e:c2:70:cf:3b:74:c5:b7:89:
72:10:3b:c1:00:1f:92:95:0f:b2:1e:38:9d:03:4a:
eb:7f:85:96:19:b8:ef:5f:80:40:00:f4:5c:99:76:
2c:72:5c:f0:25:cb:f0:5e:df:38:5e:ba:f5:f1:13:
b0:fa:3e:14:54:f0:ee:37:c0:c6:d0:2e:7d:13:f3:
76:78:1b:98:c4:8e:4d:47:b4:d3:6e:e3:f1:83:5b:
5c:c3:67:70:97:5d:0a:a5:c8:3e:9f:14:4b:44:ba:
1c:66:61:9e:65:c1:20:fd:a0:cf:2c:b0:a0:55:09:
85:53:e6:68:b0:37:69:61:73:ed:0a:c0:1f:67:43:
9b:68:87:b7:b9:14:56:23:b4:e1:2b:c5:e0:e2:9a:
23:2d:d1:57:79:cf:a4:5e:9c:40:af:50:2a:7f:52:
9e:ca:c2:c0:bd:0b:d5:5b:38:ff:84:9f:f9:0c:b8:
2b:ef:74:a1:9a:a0:65:7a:77:2c:cd:ea:b3:1b:54:
59:6c:28:76:f1:15:d6:1e:30:6a:25:8d:17:21:99:
5f:a5:37:99:5d:73:e9:06:59:8f:22:45:65:91:2a:
89:3c:62:d1:b2:f1:02:3d:f2:d8:bd:54:82:cf:4b:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:72:39:53:42:ED:CC:B6:05:6A:7E:F5:A7:87:A7:83:E2:9D:3C
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/qjFyOVNC7cy2BWp-9aeHp4PinTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.196.0/22
Signature Algorithm: sha256WithRSAEncryption
02:e1:43:38:25:1c:9a:c7:35:8f:6c:d5:dd:8f:d0:c2:4e:3b:
12:91:6c:6f:d0:01:f2:6d:fc:36:00:e7:cc:8c:52:01:d3:ca:
6b:95:a1:0f:fd:bb:8f:1b:24:5a:fd:51:89:2c:a7:40:1e:06:
6b:af:9d:3f:98:17:28:da:3f:4b:4a:1f:d4:5e:bc:30:29:f5:
42:1c:ed:9d:0b:8a:f7:6e:63:32:ce:cf:36:3c:ed:ad:52:57:
43:85:38:b8:68:77:01:d7:19:2a:30:74:0a:17:a9:18:40:f8:
75:14:50:6e:f4:0c:a1:7c:54:2f:f0:3e:c2:47:2d:db:22:90:
68:68:cc:5b:bd:fe:9a:bc:66:6f:c4:d5:61:23:77:6d:6b:f4:
2a:92:a8:de:02:20:93:aa:09:c2:91:ad:5b:ee:cd:0f:84:53:
95:34:e6:9e:c1:5c:e5:f1:3b:04:a6:a6:8b:85:16:51:d6:ab:
5e:d2:c4:9e:14:1f:1c:32:fb:c8:fb:a1:36:d2:0d:a4:6b:41:
0d:37:4a:47:fd:23:d1:31:aa:d3:2b:b0:b7:8a:45:a1:5f:30:
e5:2c:ae:c3:f8:52:d1:80:59:3b:c2:be:a2:22:58:a3:f6:f2:
c6:13:a3:85:69:9d:c6:1a:77:e8:49:f4:61:aa:17:ed:2a:50:
3b:03:39:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9mK2CtAmMMuLxikg9bU8WtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNiMzMzOTEzY2Y0MTNiYmFmZDkyNzc5MzdiMzA2MWE2
MTgxN2MwHhcNMjYwNzE1MTQyNTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTMxNzIzOTUzNDJlZGNjYjYwNTZhN2VmNWE3ODdhNzgzZTI5ZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJT9jr56U2ehxd/Lavaan5rz+/mO
wnDPO3TFt4lyEDvBAB+SlQ+yHjidA0rrf4WWGbjvX4BAAPRcmXYsclzwJcvwXt84
Xrr18ROw+j4UVPDuN8DG0C59E/N2eBuYxI5NR7TTbuPxg1tcw2dwl10Kpcg+nxRL
RLocZmGeZcEg/aDPLLCgVQmFU+ZosDdpYXPtCsAfZ0ObaIe3uRRWI7ThK8Xg4poj
LdFXec+kXpxAr1Aqf1KeysLAvQvVWzj/hJ/5DLgr73ShmqBlencszeqzG1RZbCh2
8RXWHjBqJY0XIZlfpTeZXXPpBlmPIkVlkSqJPGLRsvECPfLYvVSCz0vMvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKoxcjlTQu3MtgVqfvWnh6eD4p08MB8GA1UdIwQY
MBaAFAgcszORPPQTu6/ZJ3k3swYaYYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMt
MzI0NzFjNTkwOGEyLzEvcWpGeU9WTkM3Y3kyQldwLTlhZUhwNFBpblR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMtMzI0NzFjNTkwOGEy
LzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwY7EMA0G
CSqGSIb3DQEBCwUAA4IBAQAC4UM4JRyaxzWPbNXdj9DCTjsSkWxv0AHybfw2AOfM
jFIB08prlaEP/buPGyRa/VGJLKdAHgZrr50/mBco2j9LSh/UXrwwKfVCHO2dC4r3
bmMyzs82PO2tUldDhTi4aHcB1xkqMHQKF6kYQPh1FFBu9AyhfFQv8D7CRy3bIpBo
aMxbvf6avGZvxNVhI3dta/QqkqjeAiCTqgnCka1b7s0PhFOVNOaewVzl8TsEpqaL
hRZR1qte0sSeFB8cMvvI+6E20g2ka0ENN0pH/SPRMarTK7C3ikWhXzDlLK7D+FLR
gFk7wr6iIlij9vLGE6OFaZ3GGnfoSfRhqhftKlA7AzmU
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:25 2026 by rpki-client