Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa
File: qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa (raw, json)
Hash identifier: Ts2ye0fisSWfvRXQ8xO3p21sDayxpAX1ycZX2DBkKX8=
Subject key identifier: AB:1A:37:78:F6:73:55:E9:B3:61:3A:EC:C6:66:DD:F9:A0:C6:D3:14
Certificate issuer: /CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Certificate serial: 019F23687842031CAF84C5476E178BEB5E74
Authority key identifier: 66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199541
IP address blocks: 147.196.0.0/16 maxlen: 16
153.98.1.0/24 maxlen: 24
153.98.5.0/24 maxlen: 24
153.98.9.0/24 maxlen: 24
153.98.13.0/24 maxlen: 24
153.98.36.0/24 maxlen: 24
153.98.37.0/24 maxlen: 24
153.98.68.0/24 maxlen: 24
153.98.70.0/24 maxlen: 24
153.98.71.0/24 maxlen: 24
153.98.83.0/24 maxlen: 24
153.98.100.0/24 maxlen: 24
153.98.105.0/24 maxlen: 24
153.98.106.0/24 maxlen: 24
153.98.107.0/24 maxlen: 24
153.98.108.0/24 maxlen: 24
153.98.109.0/24 maxlen: 24
153.98.110.0/24 maxlen: 24
153.98.111.0/24 maxlen: 24
153.98.112.0/24 maxlen: 24
153.98.113.0/24 maxlen: 24
153.98.114.0/24 maxlen: 24
153.98.115.0/24 maxlen: 24
153.98.116.0/24 maxlen: 24
153.98.117.0/24 maxlen: 24
153.98.118.0/24 maxlen: 24
153.98.119.0/24 maxlen: 24
153.98.120.0/24 maxlen: 24
153.98.121.0/24 maxlen: 24
153.98.122.0/24 maxlen: 24
153.98.123.0/24 maxlen: 24
192.70.89.0/24 maxlen: 24
192.70.90.0/24 maxlen: 24
192.93.20.0/22 maxlen: 22
193.58.19.0/24 maxlen: 24
193.58.21.0/24 maxlen: 24
193.58.31.0/24 maxlen: 24
193.221.2.0/24 maxlen: 24
193.221.14.0/24 maxlen: 24
193.221.170.0/24 maxlen: 24
193.221.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:78:42:03:1c:af:84:c5:47:6e:17:8b:eb:5e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab1a3778f67355e9b3613aecc666ddf9a0c6d314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:30:80:7e:0d:18:48:7c:e2:97:6a:ba:36:
19:a8:ae:8c:3e:4e:ba:c2:57:63:08:4a:b8:2c:37:
93:73:1e:ad:ab:9b:8e:a7:85:49:4f:03:f5:72:2c:
a3:2b:41:44:39:2e:e3:e0:98:09:5c:f3:95:bd:0d:
cc:49:6f:aa:fa:93:f7:b9:14:cb:ac:f0:70:5a:ee:
29:61:9b:90:a4:f5:14:97:39:ad:ec:f0:0d:4c:e3:
6b:8f:fa:c3:2f:80:b5:1d:6a:1b:d8:22:1f:2a:7a:
8c:4b:ef:5c:56:9f:54:21:a1:f8:eb:e0:23:08:7b:
46:ff:70:53:7b:c7:25:db:e6:b0:48:98:66:8c:ff:
c5:5c:b9:cc:8f:c0:15:a1:ef:e9:e7:d8:98:2b:0f:
af:90:64:af:89:eb:3a:50:93:f9:1b:60:01:f1:5a:
b5:01:b8:53:ea:24:a8:46:12:d8:aa:f5:5e:a6:4f:
b7:45:f2:91:f1:ee:82:77:fb:b7:67:f4:61:c7:af:
a7:53:e4:e3:05:e2:96:40:c4:8a:a2:37:bb:22:54:
2e:a7:d1:51:9b:20:83:09:c8:c1:8d:61:9d:98:4b:
0f:b2:7c:46:d9:36:a1:b0:e9:b3:57:ee:8d:a9:a2:
39:20:1b:3c:4a:dd:7c:6c:5c:b1:0c:55:f6:56:21:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:37:78:F6:73:55:E9:B3:61:3A:EC:C6:66:DD:F9:A0:C6:D3:14
X509v3 Authority Key Identifier:
keyid:66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.196.0.0/16
153.98.1.0/24
153.98.5.0/24
153.98.9.0/24
153.98.13.0/24
153.98.36.0/23
153.98.68.0/24
153.98.70.0/23
153.98.83.0/24
153.98.100.0/24
153.98.105.0-153.98.123.255
192.70.89.0-192.70.90.255
192.93.20.0/22
193.58.19.0/24
193.58.21.0/24
193.58.31.0/24
193.221.2.0/24
193.221.14.0/24
193.221.170.0/24
193.221.181.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3b:31:3f:63:ba:48:44:66:8a:39:16:67:6a:1f:c4:23:c9:
89:90:60:49:ea:e4:23:3c:50:22:a0:e5:db:b3:48:ac:73:89:
7b:e4:f7:ac:da:b4:fb:b8:39:a2:ce:a2:ff:5b:b9:35:aa:04:
1a:82:4d:87:fa:c7:e6:0e:13:94:35:88:06:a4:7f:f6:81:e9:
1b:0d:80:74:ae:23:3c:35:42:42:0f:06:7e:55:0f:24:54:98:
62:cd:c9:14:e9:3d:82:33:ec:20:0d:a0:7b:8a:5a:11:d8:10:
be:72:52:91:df:36:f3:08:4b:ce:08:9f:a1:50:b1:39:2a:cf:
3d:41:9d:b3:27:4e:de:57:b2:eb:16:b3:ea:54:5a:18:e1:f4:
b0:f6:b6:e7:3b:09:aa:52:7a:76:16:a8:f0:77:bb:0e:38:f0:
e9:66:9c:e9:3b:80:7f:76:19:be:04:53:86:de:5b:ee:d1:81:
09:0e:8c:40:90:ce:af:58:0b:49:64:32:e6:b5:50:68:cb:44:
cd:9e:a1:7d:e8:37:41:9b:d5:5b:ce:09:e5:2d:3d:98:6a:15:
dc:a4:78:4c:d4:be:2b:c7:d9:68:22:94:ad:49:a9:ae:c9:42:
de:eb:52:34:05:fc:f6:d7:6d:a4:62:11:3c:3d:92:f3:0d:c4:
d1:6a:86:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:28 2026 by rpki-client