Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/qYsdG1A7fmPdhO8twE7B-LQ5UNk.roa
File: qYsdG1A7fmPdhO8twE7B-LQ5UNk.roa (raw, json)
Hash identifier: ZX9Zz9a13UW873OfdQEytOvNLK3BERmHrrcS2gwbQqk=
Subject key identifier: A9:8B:1D:1B:50:3B:7E:63:DD:84:EF:2D:C0:4E:C1:F8:B4:39:50:D9
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019FBF949D25D8264E5C945C2D10D34681FF
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/qYsdG1A7fmPdhO8twE7B-LQ5UNk.roa
Signing time: Sat 01 Aug 2026 23:06:55 +0000
ROA not before: Sat 01 Aug 2026 23:06:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
45.74.144.0/24 maxlen: 24
45.74.145.0/24 maxlen: 24
45.74.146.0/24 maxlen: 24
45.74.147.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
62.101.165.0/24 maxlen: 24
103.124.165.0/24 maxlen: 24
103.124.167.0/24 maxlen: 24
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
136.148.192.0/24 maxlen: 24
136.148.193.0/24 maxlen: 24
136.148.194.0/24 maxlen: 24
136.148.195.0/24 maxlen: 24
136.148.200.0/24 maxlen: 24
136.148.201.0/24 maxlen: 24
136.148.202.0/24 maxlen: 24
136.148.203.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/24 maxlen: 24
185.53.101.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
195.146.16.0/24 maxlen: 24
195.146.18.0/24 maxlen: 24
195.146.20.0/24 maxlen: 24
195.146.22.0/24 maxlen: 24
195.146.24.0/24 maxlen: 24
195.146.26.0/24 maxlen: 24
195.146.28.0/24 maxlen: 24
195.146.30.0/24 maxlen: 24
209.23.44.0/24 maxlen: 24
209.23.45.0/24 maxlen: 24
209.23.46.0/24 maxlen: 24
209.23.47.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a04:27c0:fffd::/48 maxlen: 48
2a04:27c0:fffe::/48 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:27c4::/32 maxlen: 32
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0d:4a46::/32 maxlen: 32
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:4f05::/32 maxlen: 32
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bf:94:9d:25:d8:26:4e:5c:94:5c:2d:10:d3:46:81:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Aug 1 23:06:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a98b1d1b503b7e63dd84ef2dc04ec1f8b43950d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:98:7d:2e:4b:ea:a8:8c:81:1d:7a:5c:0d:
99:56:03:c0:9b:61:f2:f5:3a:26:d4:7d:c9:1b:ab:
f9:e5:3d:ea:e5:cc:36:97:89:aa:74:04:0c:02:02:
9d:a6:ee:a9:c1:ea:07:a5:6e:d6:c4:4a:b7:8d:3e:
03:5f:df:0d:0f:e5:fb:7a:34:1a:a3:90:ba:e0:81:
34:20:7c:4c:0b:fc:23:50:53:8d:95:49:d9:86:8d:
3d:1d:3c:06:eb:f3:3e:14:a9:5e:dd:f4:10:ee:da:
ad:56:75:be:8a:00:c1:e1:c2:c3:ce:fb:6f:35:39:
a2:e2:db:74:ac:02:12:44:bd:1b:a8:0e:81:be:3b:
5c:1a:75:fe:b8:fe:85:cb:20:ec:99:11:a8:17:85:
84:d8:38:a5:11:6a:34:e3:7b:8d:6c:76:23:b4:06:
dd:18:7c:ec:5c:04:b6:3d:72:c6:9d:28:6d:a8:f3:
2d:53:a1:53:f0:3f:a1:d7:2e:2d:b6:96:c1:bf:85:
2a:15:c2:33:ec:04:41:57:4f:0e:e2:25:ac:b7:8a:
95:48:f9:f1:51:a9:d2:4a:fd:42:2e:85:82:7a:4d:
41:7b:f4:ce:cd:d9:90:cc:1c:ed:ef:30:1c:0a:7c:
18:24:a5:28:67:2e:26:7e:fc:bd:45:e8:fe:e3:42:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:1D:1B:50:3B:7E:63:DD:84:EF:2D:C0:4E:C1:F8:B4:39:50:D9
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/qYsdG1A7fmPdhO8twE7B-LQ5UNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/22
45.74.144.0/22
45.142.26.0/24
62.101.165.0/24
103.124.165.0/24
103.124.167.0/24
109.104.140.0/23
136.148.192.0/22
136.148.200.0/22
144.48.54.0/23
185.53.100.0/23
185.153.125.0-185.153.127.255
195.146.16.0/24
195.146.18.0/24
195.146.20.0/24
195.146.22.0/24
195.146.24.0/24
195.146.26.0/24
195.146.28.0/24
195.146.30.0/24
209.23.44.0/22
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
1c:2c:da:70:87:04:c6:43:30:2b:fa:22:ec:21:c2:06:dc:ba:
ed:20:4d:c3:4a:8d:f5:bc:b6:b2:df:5c:7f:44:2b:81:bd:c4:
f0:eb:68:07:87:16:5e:d5:68:7e:71:0c:d8:88:8d:89:ce:d8:
fe:ee:aa:77:a6:d1:78:73:68:39:18:00:ba:35:6c:02:59:04:
ef:52:13:c8:8e:0e:0b:eb:c5:5c:aa:bc:46:7d:b8:61:3b:c5:
78:a7:a1:35:84:71:10:6c:e1:28:b5:20:2a:2f:ba:5d:51:b0:
fa:87:58:a6:bf:10:cf:2f:7c:6f:cb:b2:cf:d5:f3:4b:13:3e:
f2:59:5c:03:98:e1:4a:67:c0:54:3d:a0:fd:bc:ac:18:bc:3b:
a3:34:33:a7:e6:3c:de:8a:b5:27:97:24:be:21:11:57:c2:36:
1d:a9:3a:01:f3:f7:10:cc:08:5a:c0:c1:8f:72:1f:b3:82:bc:
dc:84:f7:7d:91:a1:98:9d:5f:7d:b7:89:65:c7:c8:6b:90:63:
54:70:de:29:4c:c9:dd:1d:03:56:d1:47:0c:d5:d6:6c:bf:05:
6b:fa:43:5a:62:69:61:8c:ae:d1:4a:fa:a2:7c:cb:9e:f0:ad:
a8:00:d0:b4:4d:53:ce:29:34:27:fe:92:54:6b:a4:e9:41:b3:
46:cf:f2:2c
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgISAZ+/lJ0l2CZOXJRcLRDTRoH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh
ZmU0NGUwHhcNMjYwODAxMjMwNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOThiMWQxYjUwM2I3ZTYzZGQ4NGVmMmRjMDRlYzFmOGI0Mzk1MGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+eYfS5L6qiMgR16XA2ZVgPAm2Hy
9Tom1H3JG6v55T3q5cw2l4mqdAQMAgKdpu6pweoHpW7WxEq3jT4DX98ND+X7ejQa
o5C64IE0IHxMC/wjUFONlUnZho09HTwG6/M+FKle3fQQ7tqtVnW+igDB4cLDzvtv
NTmi4tt0rAISRL0bqA6BvjtcGnX+uP6FyyDsmRGoF4WE2DilEWo043uNbHYjtAbd
GHzsXAS2PXLGnShtqPMtU6FT8D+h1y4ttpbBv4UqFcIz7ARBV08O4iWst4qVSPnx
UanSSv1CLoWCek1Be/TOzdmQzBzt7zAcCnwYJKUoZy4mfvy9Rej+40Lp+QIDAQAB
o4IC4zCCAt8wHQYDVR0OBBYEFKmLHRtQO35j3YTvLcBOwfi0OVDZMB8GA1UdIwQY
MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct
ZmI1OTQ5ODA4ZGRjLzEvcVlzZEcxQTdmbVBkaE84dHdFN0ItTFE1VU5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj
LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH4BggrBgEFBQcBBwEB/wSB6DCB5TCBjQQCAAEwgYYDBAIf
q5gDBAItSpADBAAtjhoDBAA+ZaUDBABnfKUDBABnfKcDBAFtaIwDBAKIlMADBAKI
lMgDBAGQMDYDBAG5NWQwDAMEALmZfQMEB7mZAAMEAMOSEAMEAMOSEgMEAMOSFAME
AMOSFgMEAMOSGAMEAMOSGgMEAMOSHAMEAMOSHgMEAtEXLDBTBAIAAjBNAwUDKgQn
wAMFAyoJbkADBQMqCW7AAwUDKg0nwAMFAyoNQsADBQMqDUpAAwUDKg4/AAMFAyoO
TwADBQMqDtTAAwUDKg9CwAMFAyoPqIAwDQYJKoZIhvcNAQELBQADggEBABws2nCH
BMZDMCv6Iuwhwgbcuu0gTcNKjfW8trLfXH9EK4G9xPDraAeHFl7VaH5xDNiIjYnO
2P7uqnem0XhzaDkYALo1bAJZBO9SE8iODgvrxVyqvEZ9uGE7xXinoTWEcRBs4Si1
ICovul1RsPqHWKa/EM8vfG/Lss/V80sTPvJZXAOY4UpnwFQ9oP28rBi8O6M0M6fm
PN6KtSeXJL4hEVfCNh2pOgHz9xDMCFrAwY9yH7OCvNyE932RoZidX323iWXHyGuQ
Y1Rw3ilMyd0dA1bRRwzV1my/BWv6Q1piaWGMrtFK+qJ8y57wragA0LRNU84pNCf+
klRrpOlBs0bP8iw=
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:03:52 2026 by rpki-client