Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cqHAU4AvVZa2z0JXTBPvf9uYAC4.roa
File: cqHAU4AvVZa2z0JXTBPvf9uYAC4.roa (raw, json)
Hash identifier: OkmKV40osmkH8Y6i4GMt8eYnaXz8qXqZvwDTj2TazNA=
Subject key identifier: 72:A1:C0:53:80:2F:55:96:B6:CF:42:57:4C:13:EF:7F:DB:98:00:2E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1517799AFD85C3E36E4422DE8EE57C21A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cqHAU4AvVZa2z0JXTBPvf9uYAC4.roa
Signing time: Mon 19 Oct 2026 00:02:34 +0000
ROA not before: Mon 19 Oct 2026 00:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 82.108.10.0/23 maxlen: 23
82.108.48.0/23 maxlen: 23
82.108.62.0/23 maxlen: 23
82.108.64.0/22 maxlen: 22
82.108.96.0/23 maxlen: 23
82.108.136.0/23 maxlen: 23
82.108.192.0/23 maxlen: 23
85.189.17.0/24 maxlen: 24
86.53.5.0/24 maxlen: 24
86.53.22.0/24 maxlen: 24
86.53.25.0/24 maxlen: 24
86.53.26.0/24 maxlen: 24
86.53.166.0/24 maxlen: 24
87.82.200.0/22 maxlen: 22
87.82.204.0/23 maxlen: 23
87.82.208.0/23 maxlen: 23
87.82.211.0/24 maxlen: 24
87.83.37.0/24 maxlen: 24
87.83.38.0/24 maxlen: 24
87.83.40.0/24 maxlen: 24
87.83.42.0/23 maxlen: 23
87.83.76.0/22 maxlen: 22
87.84.50.0/23 maxlen: 23
87.84.72.0/24 maxlen: 24
87.84.74.0/23 maxlen: 23
87.84.136.0/24 maxlen: 24
87.84.138.0/24 maxlen: 24
87.84.148.0/23 maxlen: 23
87.84.155.0/24 maxlen: 24
87.84.181.0/24 maxlen: 24
87.84.184.0/23 maxlen: 23
87.86.6.0/23 maxlen: 23
87.86.15.0/24 maxlen: 24
87.86.26.0/24 maxlen: 24
195.40.3.0/24 maxlen: 24
195.40.14.0/23 maxlen: 23
195.40.64.0/23 maxlen: 23
195.40.66.0/23 maxlen: 23
195.40.68.0/23 maxlen: 23
195.40.79.0/24 maxlen: 24
195.40.81.0/24 maxlen: 24
195.40.84.0/24 maxlen: 24
195.40.90.0/24 maxlen: 24
195.40.93.0/24 maxlen: 24
195.40.98.0/23 maxlen: 23
195.40.102.0/23 maxlen: 23
195.40.124.0/23 maxlen: 23
195.40.126.0/23 maxlen: 23
195.40.164.0/23 maxlen: 23
195.40.168.0/23 maxlen: 23
195.40.170.0/23 maxlen: 23
195.40.172.0/23 maxlen: 23
195.40.174.0/23 maxlen: 23
195.40.190.0/23 maxlen: 23
195.172.126.0/23 maxlen: 23
195.172.132.0/23 maxlen: 23
195.172.146.0/23 maxlen: 23
195.172.148.0/23 maxlen: 23
195.172.208.0/23 maxlen: 23
212.135.14.0/23 maxlen: 23
212.135.176.0/23 maxlen: 24
212.135.182.0/23 maxlen: 23
212.135.184.0/23 maxlen: 23
212.135.186.0/23 maxlen: 23
212.135.188.0/24 maxlen: 24
212.135.216.0/23 maxlen: 23
212.135.224.0/23 maxlen: 23
212.135.226.0/23 maxlen: 23
212.135.229.0/24 maxlen: 24
212.135.230.0/23 maxlen: 23
212.135.232.0/23 maxlen: 23
212.135.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:77:99:af:d8:5c:3e:36:e4:42:2d:e8:ee:57:c2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 19 00:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72a1c053802f5596b6cf42574c13ef7fdb98002e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:81:5a:7c:49:54:08:5a:0e:78:70:d7:c1:
1e:05:f8:9d:04:e8:12:87:f4:1f:4f:ee:00:83:7f:
33:a3:87:9b:00:da:0a:5c:e8:2e:0b:e4:8f:35:12:
3e:7f:4d:07:81:07:ec:ed:3c:12:c7:0a:fb:08:ee:
6d:0e:b5:57:05:b3:86:da:b6:a7:6e:6b:38:a4:23:
40:14:f3:0a:99:2b:02:01:90:ed:ba:ce:e0:37:b9:
ab:18:f6:e1:4f:aa:e4:2b:01:c0:8a:1d:63:18:21:
c4:77:be:66:8d:2a:eb:bb:c6:40:cd:a1:c4:f9:53:
d3:1f:d0:0a:0c:23:62:d5:9d:35:ae:14:e5:d3:12:
17:39:99:41:d9:59:ef:23:10:e1:f6:59:8b:ec:7d:
a0:b3:0b:a2:b7:c7:46:ef:bd:f1:b3:76:d0:5f:5e:
e6:cc:c5:41:9e:cd:5f:f3:49:08:a7:db:de:0e:43:
ad:88:bc:43:37:15:2b:45:e5:f1:b7:b2:74:68:73:
ec:20:e5:d6:7e:32:29:34:7c:02:66:1c:fa:9e:1b:
a3:ce:02:71:13:68:35:01:ce:d4:a2:7c:cd:fe:6a:
67:66:8b:df:ef:cb:37:89:28:14:a3:81:02:ea:fd:
92:fe:44:f9:e3:39:d2:91:06:70:78:fa:5e:df:88:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:C0:53:80:2F:55:96:B6:CF:42:57:4C:13:EF:7F:DB:98:00:2E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cqHAU4AvVZa2z0JXTBPvf9uYAC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.10.0/23
82.108.48.0/23
82.108.62.0-82.108.67.255
82.108.96.0/23
82.108.136.0/23
82.108.192.0/23
85.189.17.0/24
86.53.5.0/24
86.53.22.0/24
86.53.25.0-86.53.26.255
86.53.166.0/24
87.82.200.0-87.82.205.255
87.82.208.0/23
87.82.211.0/24
87.83.37.0-87.83.38.255
87.83.40.0/24
87.83.42.0/23
87.83.76.0/22
87.84.50.0/23
87.84.72.0/24
87.84.74.0/23
87.84.136.0/24
87.84.138.0/24
87.84.148.0/23
87.84.155.0/24
87.84.181.0/24
87.84.184.0/23
87.86.6.0/23
87.86.15.0/24
87.86.26.0/24
195.40.3.0/24
195.40.14.0/23
195.40.64.0-195.40.69.255
195.40.79.0/24
195.40.81.0/24
195.40.84.0/24
195.40.90.0/24
195.40.93.0/24
195.40.98.0/23
195.40.102.0/23
195.40.124.0/22
195.40.164.0/23
195.40.168.0/21
195.40.190.0/23
195.172.126.0/23
195.172.132.0/23
195.172.146.0-195.172.149.255
195.172.208.0/23
212.135.14.0/23
212.135.176.0/23
212.135.182.0-212.135.188.255
212.135.216.0/23
212.135.224.0/22
212.135.229.0-212.135.233.255
212.135.238.0/23
Signature Algorithm: sha256WithRSAEncryption
78:43:dd:4b:52:6f:ea:95:10:3b:83:2a:57:f1:f4:71:89:d5:
05:d1:fe:50:fa:09:c3:cd:35:f8:fd:88:6d:9e:7e:3a:57:52:
8a:81:62:c3:b8:1c:4f:7b:fd:c5:94:0f:f6:4f:5b:7e:1b:cc:
21:fa:74:e5:d5:eb:07:25:3e:5b:09:1c:f7:df:c8:4a:5b:ef:
1e:87:57:5f:43:14:9a:90:e4:3f:c1:ba:d4:4c:ed:9d:48:00:
e1:45:6b:52:29:db:f5:0c:9e:43:f9:f8:1c:f7:3f:31:45:46:
ba:07:70:4e:19:33:d6:dc:cb:9b:6f:86:39:9a:70:23:23:4d:
c3:0f:9c:b7:89:52:78:b4:c5:bf:13:63:47:44:2b:99:a8:16:
f1:14:90:9b:4d:bd:8a:0e:d2:fb:9e:4f:d7:82:f9:18:c9:38:
73:d1:63:0e:57:d3:ca:2d:a2:2c:63:31:4e:76:23:b2:20:e2:
85:fe:a4:fe:ac:62:27:a3:42:89:51:02:42:ac:06:22:53:8f:
c7:84:76:a2:25:17:b1:47:1c:f5:18:1a:d2:18:98:7b:40:e7:
2c:b0:22:61:43:fb:30:a5:5c:34:6d:ce:78:b9:ee:a8:0b:f7:
47:5c:a0:66:43:b4:34:97:e5:bf:3a:6f:7f:1d:e0:6f:18:3a:
26:e7:75:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:39 2026 by rpki-client