Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZQsv5zeIWt_mko2jByJfhPNZULo.roa
File: ZQsv5zeIWt_mko2jByJfhPNZULo.roa (raw, json)
Hash identifier: LqNrmTf+Q3g2/YUx/B+ZrmzEsEWl0E8q2dYnGch26mw=
Subject key identifier: 65:0B:2F:E7:37:88:5A:DF:E6:92:8D:A3:07:22:5F:84:F3:59:50:BA
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A02465D2FE8EADAB5A81CF372B45DBFF26
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZQsv5zeIWt_mko2jByJfhPNZULo.roa
Signing time: Fri 21 Aug 2026 12:57:27 +0000
ROA not before: Fri 21 Aug 2026 12:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13194
IP address blocks: 80.81.61.0/24 maxlen: 24
85.254.69.0/24 maxlen: 24
85.254.71.0/24 maxlen: 24
85.254.73.0/24 maxlen: 24
85.254.74.0/23 maxlen: 23
85.254.74.0/24 maxlen: 24
85.254.75.0/24 maxlen: 24
85.254.76.0/22 maxlen: 22
85.254.76.0/24 maxlen: 24
85.254.80.0/22 maxlen: 22
85.254.84.0/23 maxlen: 23
85.254.92.0/22 maxlen: 22
85.254.92.0/23 maxlen: 23
85.254.92.0/24 maxlen: 24
85.254.93.0/24 maxlen: 24
85.254.94.0/24 maxlen: 24
85.254.95.0/24 maxlen: 24
85.254.96.0/22 maxlen: 22
85.254.96.0/23 maxlen: 23
85.254.98.0/23 maxlen: 23
85.254.100.0/24 maxlen: 24
85.254.101.0/24 maxlen: 24
85.254.102.0/24 maxlen: 24
85.254.123.0/24 maxlen: 24
85.254.124.0/23 maxlen: 23
85.254.141.0/24 maxlen: 24
85.254.149.0/24 maxlen: 24
85.254.151.0/24 maxlen: 24
85.254.152.0/22 maxlen: 22
85.254.159.0/24 maxlen: 24
85.254.161.0/24 maxlen: 24
85.254.168.0/24 maxlen: 24
85.254.169.0/24 maxlen: 24
85.254.170.0/24 maxlen: 24
85.254.176.0/23 maxlen: 23
91.190.45.0/24 maxlen: 24
91.190.48.0/24 maxlen: 24
91.190.49.0/24 maxlen: 24
159.148.73.0/24 maxlen: 24
159.148.114.0/24 maxlen: 24
159.148.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:65:d2:fe:8e:ad:ab:5a:81:cf:37:2b:45:db:ff:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 21 12:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=650b2fe737885adfe6928da307225f84f35950ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:8e:42:cd:77:1e:6f:a9:0a:f8:d0:0c:1d:
61:28:85:0b:10:7f:89:be:13:fc:c2:2d:4d:fc:59:
5b:b1:d1:79:92:15:14:36:20:a4:06:fb:00:92:f0:
d9:3b:25:f7:8d:d9:f7:de:f3:0d:1f:d0:3d:1c:1a:
62:73:f8:be:c3:16:74:73:1a:3f:be:30:14:d5:93:
66:3e:d5:db:07:23:e0:ac:42:c4:4c:dd:1d:be:dc:
1e:78:61:91:e7:9d:96:6d:39:e6:d6:a4:5c:ab:cc:
73:3a:13:bf:08:6c:dd:a2:78:43:c1:fc:ea:ae:22:
69:01:08:45:9e:6a:4a:01:fd:ee:d7:26:1d:d0:8c:
e9:ca:ae:de:b3:cb:54:bf:13:df:4b:53:27:c6:91:
fc:24:4d:49:2a:70:87:20:31:39:f3:61:5e:e0:bb:
47:2b:08:88:b7:95:22:fe:30:1e:89:92:eb:7b:a1:
1c:98:3e:6a:b7:4c:85:4c:cd:f1:42:92:cf:d0:cf:
8b:52:4e:9c:65:c2:8b:0b:1a:89:e3:67:0d:58:6b:
aa:8e:d1:71:66:8b:26:91:73:bc:3e:e8:de:6f:b3:
70:a1:77:0c:f1:d9:4e:86:cc:f7:38:79:29:06:6b:
61:48:e0:5e:e9:d6:36:cc:43:77:71:e2:fa:f3:c6:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0B:2F:E7:37:88:5A:DF:E6:92:8D:A3:07:22:5F:84:F3:59:50:BA
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZQsv5zeIWt_mko2jByJfhPNZULo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.61.0/24
85.254.69.0/24
85.254.71.0/24
85.254.73.0-85.254.85.255
85.254.92.0-85.254.102.255
85.254.123.0-85.254.125.255
85.254.141.0/24
85.254.149.0/24
85.254.151.0-85.254.155.255
85.254.159.0/24
85.254.161.0/24
85.254.168.0-85.254.170.255
85.254.176.0/23
91.190.45.0/24
91.190.48.0/23
159.148.73.0/24
159.148.114.0/24
159.148.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:03:5f:6c:c6:4e:84:1e:81:ff:a7:a5:7f:81:59:6c:31:f8:
20:37:f9:5c:8d:dc:98:8d:ce:9b:f3:f7:48:6e:50:a4:f4:ac:
c3:a2:59:f3:bc:2d:be:32:c3:68:bf:65:4f:41:3f:8c:f1:a6:
80:19:2a:24:05:2e:d4:04:01:e2:c7:d2:f9:bc:89:44:d5:ef:
ad:91:a0:21:b6:57:f5:03:ec:c5:f4:4e:2c:6c:86:93:9c:61:
0e:e5:04:09:06:db:12:4a:57:ac:01:eb:cf:ca:8b:8f:da:4d:
18:33:33:03:34:63:d0:b5:0e:46:d5:72:0a:2b:ce:c7:59:14:
cd:f3:61:ca:67:09:e6:6d:e7:e8:2d:c0:c8:04:ed:0e:a4:25:
f8:3a:1c:c5:fb:c0:c3:3f:db:15:b8:cf:4f:20:44:20:11:cc:
66:3b:0e:81:dc:8f:f7:ee:b6:64:a2:65:ec:33:b2:92:9d:c2:
6b:e1:d2:5e:bd:b8:19:fc:e1:58:f6:03:43:49:e2:2c:03:98:
ad:30:cc:ff:58:09:30:1a:4f:b5:79:9a:e9:c3:b0:e8:cd:ca:
f0:ee:e9:22:c8:ed:68:d1:0a:22:35:07:13:ba:42:63:d8:9e:
f0:dd:bb:22:a3:05:de:cf:46:c9:37:74:26:e7:e5:9b:26:ee:
94:8d:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:26 2026 by rpki-client