Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/q1d9qphsr7BBftyeovhVZGIYZQ4.roa
File: q1d9qphsr7BBftyeovhVZGIYZQ4.roa (raw, json)
Hash identifier: +tfCetbCMafL/EBqBv20w2hEhDvthJhTv88fbIYf72A=
Subject key identifier: AB:57:7D:AA:98:6C:AF:B0:41:7E:DC:9E:A2:F8:55:64:62:18:65:0E
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 019DFB329FCB4B6B3BE75F36F9F468661916
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/q1d9qphsr7BBftyeovhVZGIYZQ4.roa
Signing time: Wed 06 May 2026 02:51:32 +0000
ROA not before: Wed 06 May 2026 02:51:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205945
IP address blocks: 91.203.116.0/22 maxlen: 25
185.201.92.0/22 maxlen: 25
185.201.92.0/24 maxlen: 24
185.201.92.0/25 maxlen: 25
185.201.92.128/25 maxlen: 25
185.201.93.0/24 maxlen: 24
195.5.174.0/24 maxlen: 25
195.5.174.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:32:9f:cb:4b:6b:3b:e7:5f:36:f9:f4:68:66:19:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: May 6 02:51:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab577daa986cafb0417edc9ea2f855646218650e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:a8:35:c5:be:2c:ce:90:5c:43:2e:17:18:
ee:88:a3:5f:d3:59:2b:85:75:57:1f:44:22:ce:17:
9d:3b:39:dc:68:8c:ae:e3:96:e3:14:d6:33:d4:65:
67:d9:ec:f6:55:c2:a5:8c:d9:c1:09:6f:7b:c7:7a:
f5:cc:ee:20:bd:c8:61:96:26:23:02:d1:90:8b:8e:
50:1a:04:69:a8:87:6f:40:df:2b:6c:5d:93:96:41:
e1:0d:91:dc:18:66:6d:27:b4:4c:85:f8:12:cf:da:
84:67:23:a2:ea:dd:c5:9d:8e:c5:2f:8c:50:65:47:
4d:c0:23:a8:fa:d4:89:9d:fc:76:80:14:1b:52:2c:
3d:41:fb:6a:23:65:9e:69:d8:8a:65:bc:f6:1d:7f:
a8:86:72:f0:19:0e:0c:c7:04:32:7e:8d:c6:00:22:
cf:27:80:2b:8d:fe:4f:36:99:35:9b:b7:31:93:51:
37:c5:4e:7c:3a:6e:15:2d:36:3e:22:83:bd:6d:2e:
06:58:a5:09:7b:65:eb:96:cf:b0:44:58:d2:5d:ca:
7b:91:e0:6d:d0:33:7d:90:9e:ad:f1:a1:f1:63:5d:
b4:44:d5:2c:03:66:15:f1:83:d7:8c:08:cf:16:46:
ee:4f:05:91:51:08:2c:dd:a7:91:74:bb:d6:63:12:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:57:7D:AA:98:6C:AF:B0:41:7E:DC:9E:A2:F8:55:64:62:18:65:0E
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/q1d9qphsr7BBftyeovhVZGIYZQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.116.0/22
185.201.92.0/22
195.5.174.0/24
Signature Algorithm: sha256WithRSAEncryption
98:21:8a:fb:64:bb:bc:55:42:df:68:0f:e0:af:4b:8f:54:31:
02:2a:84:cc:53:15:f1:94:ba:0a:6e:f1:81:ff:43:d3:7c:b1:
5b:bc:0a:e2:29:e1:83:df:cd:1b:4f:2b:16:fa:e4:75:3a:fa:
b4:e1:d6:67:45:79:13:97:8e:53:c1:7b:70:8f:9a:6d:f1:ea:
a8:74:a8:14:31:54:db:31:ee:d9:ab:ce:56:8e:9d:6b:9b:7c:
ef:ec:c5:17:6e:57:17:e0:10:e5:6e:cd:69:fd:ac:af:e6:b2:
2c:71:40:58:52:10:94:2e:5a:ce:78:a9:f8:a9:41:25:25:f9:
12:f6:4a:04:ba:a9:76:d5:cf:ec:17:c8:6f:e7:19:62:f9:6a:
42:61:49:81:74:bd:c5:23:83:6a:c9:27:05:29:ed:52:76:e9:
5c:aa:cc:0f:d8:1f:b6:2c:d0:37:6f:a0:f2:ad:43:0e:10:f9:
bb:a8:9c:f7:08:3a:8b:cc:4e:07:42:17:d4:13:45:d5:10:36:
a6:d9:e6:a5:3a:03:ab:6d:3b:6e:19:86:0f:58:ed:4a:17:28:
ec:62:41:5a:9e:7b:09:f1:64:14:7a:b6:a4:44:8b:8b:82:65:
65:90:12:fe:ab:d1:a7:85:3a:0a:41:8c:63:2a:7a:1b:76:7c:
05:75:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:52 2026 by rpki-client