Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/qWtbbMCk5LGMcw424X-_LWASovo.roa
File: qWtbbMCk5LGMcw424X-_LWASovo.roa (raw, json)
Hash identifier: 3y9aT8FyDHUytNmZPUNaxxu5OwhxcFGGDKVIc9JWoyU=
Subject key identifier: A9:6B:5B:6C:C0:A4:E4:B1:8C:73:0E:36:E1:7F:BF:2D:60:12:A2:FA
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019F7629219832AE5732DB3FAA3CB2E56B92
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/qWtbbMCk5LGMcw424X-_LWASovo.roa
Signing time: Sat 18 Jul 2026 16:57:14 +0000
ROA not before: Sat 18 Jul 2026 16:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 85.204.125.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
188.215.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:29:21:98:32:ae:57:32:db:3f:aa:3c:b2:e5:6b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 18 16:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a96b5b6cc0a4e4b18c730e36e17fbf2d6012a2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:c5:e2:c6:9c:2b:1e:f8:2f:d7:bd:4a:53:
76:f7:c2:31:9a:6b:df:99:09:ae:46:2b:43:39:b4:
ed:87:59:3a:6c:b0:b1:46:78:4a:4e:74:da:fd:5c:
8c:a6:33:8d:05:f1:43:56:69:39:f2:2c:b5:e7:3d:
97:3a:14:69:34:fe:ed:7e:51:f8:10:83:c5:bb:7b:
6b:e6:63:f2:e1:e9:10:53:c5:f4:c5:80:fb:54:4b:
25:88:a3:96:1e:b7:9a:44:53:21:ed:2b:dd:7f:9a:
73:15:31:b2:d2:1c:83:80:be:68:50:95:41:fe:23:
bd:d5:41:38:9d:be:6d:c8:b4:70:22:ef:d7:9a:c4:
d7:02:6a:d4:a9:29:d3:14:12:51:a6:8c:f7:15:fc:
54:57:f9:c2:0d:53:67:11:8d:43:93:35:96:14:b8:
bd:f4:ed:b9:ca:d8:64:96:2a:42:e4:57:f3:4d:df:
bf:ff:b5:d4:12:c1:d0:33:25:29:8e:cf:29:ef:1a:
cc:73:6a:0b:da:c8:d9:21:39:62:bb:33:0e:bf:67:
1c:45:cb:c2:04:37:3f:eb:15:ab:38:26:4c:ca:eb:
1e:26:02:a6:72:ee:98:ea:f0:d8:89:53:4b:36:16:
a7:94:4e:36:e2:47:26:4c:86:6a:14:81:38:2e:53:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6B:5B:6C:C0:A4:E4:B1:8C:73:0E:36:E1:7F:BF:2D:60:12:A2:FA
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/qWtbbMCk5LGMcw424X-_LWASovo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
188.215.72.0/23
Signature Algorithm: sha256WithRSAEncryption
68:13:ac:63:b9:9d:89:db:ef:68:86:4e:8b:04:94:fd:5a:4a:
90:1f:f7:37:da:32:33:41:07:43:ae:b1:f9:21:49:b3:8d:0e:
ef:24:7e:b5:87:b6:06:cb:19:49:b3:b2:93:21:1b:6f:6b:14:
77:d7:9f:7e:12:eb:ab:44:ac:e7:23:cd:b3:e9:2f:35:90:b3:
ff:9f:b8:28:38:5b:82:95:00:8e:95:a0:96:6b:1a:f5:d9:5a:
d9:d3:28:35:db:9f:20:a8:9e:80:4b:c1:fa:5c:9a:7e:5e:9f:
12:a7:af:0d:48:ca:c5:a6:15:81:05:cd:d0:ed:f3:f8:d0:da:
1b:41:73:ab:87:ea:32:2f:da:f6:80:6b:2a:f7:3f:15:fa:4d:
3b:76:05:3c:56:c6:0b:a9:e1:72:48:dd:af:eb:19:72:b1:f7:
41:ea:84:ed:55:89:89:a9:c6:dd:50:56:9c:cf:95:4a:a7:33:
1e:d0:91:66:69:7b:16:c1:21:28:bc:26:1b:67:b7:1a:82:e6:
73:f5:86:b1:57:f0:0c:20:0f:35:5d:f0:c6:a0:cc:e7:e5:92:
c5:74:b0:aa:68:8e:47:7f:48:63:83:f3:5f:2b:19:70:5e:8c:
24:52:72:a2:4a:2b:21:16:45:43:9b:6d:7b:06:23:af:e9:5e:
ef:a0:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:13:01 2026 by rpki-client