Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q_ZnkAG2Sql3HKjA2Vz2BGOJtIs.roa
File: q_ZnkAG2Sql3HKjA2Vz2BGOJtIs.roa (raw, json)
Hash identifier: RbqbZQSVcPgEHxNaaUu8oRT2gMfcc0XnYNG/6dcMmTg=
Subject key identifier: AB:F6:67:90:01:B6:4A:A9:77:1C:A8:C0:D9:5C:F6:04:63:89:B4:8B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A13E9080B8B5A0091637D56F198CB815BF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q_ZnkAG2Sql3HKjA2Vz2BGOJtIs.roa
Signing time: Thu 15 Oct 2026 07:56:59 +0000
ROA not before: Thu 15 Oct 2026 07:56:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 82.108.90.0/24 maxlen: 24
82.109.185.0/24 maxlen: 24
85.189.2.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.83.15.0/24 maxlen: 24
87.83.46.0/24 maxlen: 24
87.84.203.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.85.226.0/24 maxlen: 24
87.85.230.0/24 maxlen: 24
194.242.159.0/24 maxlen: 24
217.79.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:90:80:b8:b5:a0:09:16:37:d5:6f:19:8c:b8:15:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 15 07:56:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abf6679001b64aa9771ca8c0d95cf6046389b48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:ad:69:b5:9b:f1:59:40:3c:23:40:bd:82:
18:25:2d:39:bf:51:5c:48:60:c9:5b:c2:96:81:cd:
49:ad:a3:82:ba:06:b1:8c:e8:3e:b2:f7:4d:25:04:
7d:43:ef:7e:bb:4f:f1:17:07:62:87:09:fd:5f:4b:
69:25:76:bb:f6:98:29:4e:5d:1c:a1:41:89:83:5e:
90:d3:47:97:ea:38:a3:46:d6:b3:72:6e:7d:2b:f3:
f6:67:d9:b1:f0:e4:d6:9d:0b:75:56:6e:9d:22:51:
8e:74:8b:a0:cc:a8:b6:30:c2:11:57:e6:97:44:a0:
ef:8b:6c:d5:4b:82:a9:16:55:35:a9:19:3a:01:bd:
9d:5a:24:15:6e:12:f4:5b:83:78:8a:2b:7d:23:4c:
1d:07:4f:6e:2c:31:23:81:6f:3a:df:af:4e:fd:96:
cf:73:2d:d8:0f:d0:f9:45:bd:b8:ee:d6:83:19:38:
db:20:fe:67:df:0d:17:d1:f6:c6:04:aa:1a:15:f4:
62:e7:06:a4:09:13:fb:23:9a:93:36:6b:7c:04:06:
a1:48:b1:07:bf:77:dc:45:43:8d:20:a3:3a:ba:5b:
e3:f6:05:01:0f:8a:77:33:6e:0a:53:9f:06:22:91:
5e:07:cf:9c:9b:4f:19:d8:64:55:b3:b8:a1:fb:50:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F6:67:90:01:B6:4A:A9:77:1C:A8:C0:D9:5C:F6:04:63:89:B4:8B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q_ZnkAG2Sql3HKjA2Vz2BGOJtIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
82.109.185.0/24
85.189.2.0/24
87.82.213.0/24
87.83.15.0/24
87.83.46.0/24
87.84.203.0/24
87.84.218.0/24
87.85.226.0/24
87.85.230.0/24
194.242.159.0/24
217.79.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b8:f5:75:95:22:7e:e7:84:87:e7:64:f1:71:4f:7a:56:fd:
d7:78:a2:82:0d:42:85:d8:e7:76:e1:79:87:a3:19:61:a3:a4:
de:b5:ec:fc:b4:c0:6f:75:fa:17:89:38:0b:94:a7:6f:37:6e:
79:a7:7a:77:69:24:67:e0:e5:fd:8c:e9:29:7b:b6:0a:f6:3f:
e3:1e:f8:cb:8f:e3:7d:76:a8:8f:1b:15:d7:0c:81:1b:26:19:
37:96:90:16:2f:7e:26:b7:33:fa:28:e9:48:ec:02:cf:5b:93:
ab:15:3c:fa:2b:b6:6e:41:0b:2a:1f:a5:aa:1d:cd:10:c6:c5:
f0:49:55:1c:d4:f3:aa:99:81:b1:69:60:e0:29:af:da:92:15:
9f:c0:59:ad:99:a3:d2:aa:b3:27:3e:1f:96:11:f2:5d:c7:bf:
fd:d2:23:43:40:1f:65:2c:42:70:bf:57:0e:a7:4d:2c:6f:86:
15:f7:a0:50:84:cc:25:41:b9:40:5f:3c:16:08:7e:0d:6e:84:
4a:bd:67:38:9d:44:20:a0:a8:6f:b9:d0:2b:ad:1e:19:2d:af:
3a:e9:f7:6b:a1:53:42:e9:82:39:d3:92:37:08:c5:d0:06:f1:
37:a4:63:ea:1d:87:27:17:fa:cf:a2:88:b7:94:ee:ed:41:ef:
d6:34:cb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:34 2026 by rpki-client