Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Q-1Hc_Dz87Cak9dst2Qtdloqh0c.roa
File: Q-1Hc_Dz87Cak9dst2Qtdloqh0c.roa (raw, json)
Hash identifier: Qw8u47y/tUOrmypqecpr9n4FVP8h6S8lOKH3An2ww5A=
Subject key identifier: 43:ED:47:73:F0:F3:F3:B0:9A:93:D7:6C:B7:64:2D:76:5A:2A:87:47
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F276D92BA293A61E4AA25CC4955E36359
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Q-1Hc_Dz87Cak9dst2Qtdloqh0c.roa
Signing time: Fri 03 Jul 2026 10:02:00 +0000
ROA not before: Fri 03 Jul 2026 10:02:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 79.121.200.0/21 maxlen: 21
82.110.32.0/20 maxlen: 20
85.189.72.0/21 maxlen: 24
86.53.152.0/21 maxlen: 24
86.53.160.0/22 maxlen: 24
86.53.180.0/22 maxlen: 24
86.53.184.0/21 maxlen: 24
87.85.65.0/24 maxlen: 24
87.85.132.0/24 maxlen: 24
87.85.135.0/24 maxlen: 24
87.85.251.0/24 maxlen: 24
87.86.48.0/20 maxlen: 24
87.86.190.0/24 maxlen: 24
95.177.63.0/24 maxlen: 24
95.177.67.0/24 maxlen: 24
95.177.74.0/24 maxlen: 24
95.177.85.0/24 maxlen: 24
194.6.104.0/21 maxlen: 24
195.40.22.0/23 maxlen: 23
195.40.24.0/23 maxlen: 23
195.72.176.0/21 maxlen: 24
212.134.20.0/24 maxlen: 24
212.134.27.0/24 maxlen: 24
212.135.6.0/23 maxlen: 23
213.177.226.0/23 maxlen: 24
213.177.230.0/23 maxlen: 24
213.177.234.0/23 maxlen: 24
213.177.238.0/23 maxlen: 24
213.177.242.0/23 maxlen: 24
213.177.246.0/23 maxlen: 24
213.177.250.0/23 maxlen: 24
213.177.252.0/24 maxlen: 24
213.177.253.0/24 maxlen: 24
213.177.254.0/24 maxlen: 24
213.177.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 17:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:6d:92:ba:29:3a:61:e4:aa:25:cc:49:55:e3:63:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 3 10:02:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43ed4773f0f3f3b09a93d76cb7642d765a2a8747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:cd:f7:1d:95:53:1c:33:3d:3e:35:29:79:
b7:90:d5:33:44:f3:b3:76:00:88:b5:8a:f2:42:7a:
e9:b7:06:95:2d:4a:66:d7:af:eb:99:49:af:6c:ea:
f0:e2:75:d4:0a:4a:59:80:46:a4:0a:24:2a:ed:e6:
6f:5b:56:15:43:7b:ff:bc:a3:d4:1d:f8:73:57:b0:
46:b9:00:64:d4:45:d6:d9:4d:93:57:26:e1:eb:07:
8e:c4:28:91:d8:74:b8:1a:ae:cf:6e:0b:18:0a:c5:
b6:79:1c:8a:0b:78:e0:a5:50:48:67:08:6c:75:f0:
ea:4e:96:8b:d8:d9:99:60:a2:ed:35:83:cb:c8:47:
32:0c:ae:dd:4c:3b:f2:da:6f:a1:06:f5:f8:8f:0c:
7f:58:2c:e6:73:4a:9f:f1:3f:95:47:44:49:9b:cb:
f6:14:1f:44:04:16:d3:26:06:2d:8f:34:68:da:d3:
26:d2:30:d8:3c:96:3f:e5:2b:de:d4:dc:02:a5:26:
fe:ce:ca:3b:4c:23:be:33:7d:62:15:2b:12:46:22:
6e:78:33:11:7f:e6:22:55:7b:a8:77:4d:71:48:64:
52:57:10:6c:16:63:6a:16:e2:07:0d:f1:ea:f8:a2:
ab:3f:80:bf:03:93:12:00:b3:69:8f:d2:d5:f3:c1:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:ED:47:73:F0:F3:F3:B0:9A:93:D7:6C:B7:64:2D:76:5A:2A:87:47
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Q-1Hc_Dz87Cak9dst2Qtdloqh0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.200.0/21
82.110.32.0/20
85.189.72.0/21
86.53.152.0-86.53.163.255
86.53.180.0-86.53.191.255
87.85.65.0/24
87.85.132.0/24
87.85.135.0/24
87.85.251.0/24
87.86.48.0/20
87.86.190.0/24
95.177.63.0/24
95.177.67.0/24
95.177.74.0/24
95.177.85.0/24
194.6.104.0/21
195.40.22.0-195.40.25.255
195.72.176.0/21
212.134.20.0/24
212.134.27.0/24
212.135.6.0/23
213.177.226.0/23
213.177.230.0/23
213.177.234.0/23
213.177.238.0/23
213.177.242.0/23
213.177.246.0/23
213.177.250.0-213.177.255.255
Signature Algorithm: sha256WithRSAEncryption
a9:2b:8d:d0:b6:15:67:17:43:7b:31:5b:8f:89:58:86:31:db:
f5:e0:76:9d:1b:7f:b9:20:de:f7:dd:d7:ae:ec:81:fe:8f:9b:
84:02:dd:72:ff:f4:28:0f:06:e9:bb:d2:6a:8b:b8:3e:bb:2f:
87:e7:7c:21:44:87:a0:72:20:02:7d:76:31:c5:21:ea:45:da:
57:13:b4:1e:06:98:1d:f6:d6:62:75:cf:ec:55:8b:69:00:86:
4c:63:72:66:d8:41:81:3e:0e:97:3a:ba:1e:95:27:de:fa:b6:
04:4f:59:71:b5:a9:af:81:b1:a9:64:76:42:fa:eb:b5:68:a9:
61:32:17:0f:4a:76:6b:18:f0:05:c6:ec:12:82:bc:29:fa:e1:
9c:84:6c:75:c1:57:1f:88:c1:e7:0c:f4:1e:be:5d:05:47:00:
42:d9:dc:0d:d6:8f:7c:4d:cb:d0:ad:19:fa:c9:81:a6:e1:b4:
ab:66:1b:ee:c5:d0:62:ee:9c:88:2a:bf:c9:0e:f0:68:a4:08:
24:36:ba:64:8d:f0:c0:85:b3:52:0c:8a:d5:f9:f3:e8:f6:04:
f5:b8:60:85:cb:71:95:de:67:aa:54:f3:de:71:a2:4a:ae:30:
dc:d7:30:6d:68:fe:85:2d:83:19:02:31:79:b9:5b:ce:59:9e:
90:55:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 02:41:37 2026 by rpki-client