Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Qs1qgnHur3QZEo-Baomm42nEtOY.roa
File: Qs1qgnHur3QZEo-Baomm42nEtOY.roa (raw, json)
Hash identifier: 8LAsgPJyzNQwemaQkNcaORFFqrbaLAUtLvZqYIzPGIE=
Subject key identifier: 42:CD:6A:82:71:EE:AF:74:19:12:8F:81:6A:89:A6:E3:69:C4:B4:E6
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019FD5EF8EB8816C3D36960F399555BE9E25
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Qs1qgnHur3QZEo-Baomm42nEtOY.roa
Signing time: Thu 06 Aug 2026 07:17:54 +0000
ROA not before: Thu 06 Aug 2026 07:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 83.223.148.0/24 maxlen: 24
85.254.117.0/24 maxlen: 24
85.254.118.0/23 maxlen: 23
91.190.47.0/24 maxlen: 24
94.101.226.0/24 maxlen: 24
188.64.182.0/24 maxlen: 24
188.64.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:ef:8e:b8:81:6c:3d:36:96:0f:39:95:55:be:9e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 6 07:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42cd6a8271eeaf7419128f816a89a6e369c4b4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:15:23:04:17:f0:ae:e8:d5:f2:20:c0:c7:
54:13:f4:2d:d5:cc:0f:80:e6:a6:56:56:6b:fc:e7:
70:f3:1e:dd:a9:33:65:5a:54:fa:01:05:6d:9c:36:
f3:7e:b3:55:be:01:0f:c2:c7:f6:77:01:cc:ac:2a:
ed:90:32:5d:5b:9f:6d:bd:8b:b4:70:1b:3c:aa:80:
6f:71:52:9f:87:68:d8:4f:58:21:76:29:3e:f9:e9:
85:6f:05:3a:53:a6:43:76:a5:7e:a2:22:e5:78:c0:
a1:af:d3:ac:89:dd:68:78:74:93:46:54:36:ee:9b:
ef:8e:a1:7e:87:65:fe:96:09:9f:38:28:fe:f0:14:
96:59:d6:72:a4:7f:5d:89:5f:32:f0:80:de:1a:82:
ce:2b:d3:2e:65:3b:65:e4:5f:f4:c8:89:cb:60:91:
8c:c0:81:1e:92:6e:cd:b9:52:c0:e4:01:a2:12:52:
8e:64:88:05:3e:6a:bd:21:08:12:01:7d:36:c3:74:
fa:73:b3:84:0b:78:dd:93:a0:31:77:2a:79:45:42:
d4:7f:3b:e7:6a:41:24:eb:7c:fb:8d:bf:28:68:8e:
2a:e9:1d:5f:89:f1:6e:1d:bf:7a:75:70:a1:86:19:
91:61:a7:26:19:57:ba:16:79:26:28:3d:81:63:c1:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:6A:82:71:EE:AF:74:19:12:8F:81:6A:89:A6:E3:69:C4:B4:E6
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Qs1qgnHur3QZEo-Baomm42nEtOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.148.0/24
85.254.117.0-85.254.119.255
91.190.47.0/24
94.101.226.0/24
188.64.182.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:bb:f3:58:a4:c6:d9:e4:4c:87:50:40:cb:18:e1:9a:d6:a0:
ac:6d:89:54:03:57:0d:85:66:9f:ca:fe:53:48:82:54:6a:3c:
cf:0e:79:9f:ae:7d:90:65:28:e1:76:76:51:ba:51:fc:e1:17:
60:7b:86:29:14:21:1e:f1:e5:19:03:6d:ac:45:fc:1d:af:eb:
7e:74:04:ba:b1:4d:8b:14:15:15:59:1c:65:27:05:c5:7c:47:
9a:6c:04:1b:48:e7:dc:7a:9c:ce:a8:93:d8:ee:24:70:ca:8c:
a2:7e:15:1e:86:4d:27:d9:66:5b:08:ae:6e:01:5d:45:3b:1f:
37:a5:5b:6b:d4:3d:4b:f0:f5:31:99:1a:0a:19:bb:35:dd:0a:
25:8c:19:14:7d:91:e9:a2:1a:db:4e:6b:4f:0c:de:f8:fe:59:
fa:c2:33:e7:59:5e:da:a7:a8:07:dc:82:a1:f8:7b:f1:b6:98:
d2:f3:eb:5c:12:e3:6c:af:f5:f3:f6:93:59:ee:80:87:69:32:
26:2d:af:d1:24:ea:72:6b:16:b6:de:13:84:df:7d:84:88:8d:
97:85:7c:db:e7:5c:20:c7:7c:43:8b:46:36:10:8d:b0:22:e6:
ff:2c:14:4c:05:38:28:b5:60:05:40:a6:a5:9f:a6:cc:38:9f:
3d:48:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:42 2026 by rpki-client