Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/q79kDLEMMWqv_brxIueNxGe6OSw.roa
File: q79kDLEMMWqv_brxIueNxGe6OSw.roa (raw, json)
Hash identifier: XvCcpCk95F9YFsjU81EtVNExYuoi9P/fJHr1Ccts1jM=
Subject key identifier: AB:BF:64:0C:B1:0C:31:6A:AF:FD:BA:F1:22:E7:8D:C4:67:BA:39:2C
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 01A17754C055FC07B778EBA4E70E0F864DB9
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/q79kDLEMMWqv_brxIueNxGe6OSw.roa
Signing time: Mon 26 Oct 2026 08:30:05 +0000
ROA not before: Mon 26 Oct 2026 08:30:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15694
IP address blocks: 46.229.144.0/20 maxlen: 20
77.79.192.0/18 maxlen: 18
77.79.200.0/24 maxlen: 24
77.79.206.0/24 maxlen: 24
77.79.210.0/24 maxlen: 24
77.79.215.0/24 maxlen: 24
77.79.221.0/24 maxlen: 24
85.232.224.0/19 maxlen: 19
85.232.254.0/24 maxlen: 24
194.145.228.0/24 maxlen: 24
195.167.144.0/20 maxlen: 20
195.167.150.0/24 maxlen: 24
195.167.155.0/24 maxlen: 24
195.167.158.0/24 maxlen: 24
206.252.224.0/19 maxlen: 19
206.252.250.0/24 maxlen: 24
212.91.4.0/22 maxlen: 22
212.91.6.0/24 maxlen: 24
212.91.10.0/24 maxlen: 24
212.91.11.0/24 maxlen: 24
212.91.12.0/24 maxlen: 24
212.91.13.0/24 maxlen: 24
212.91.14.0/24 maxlen: 24
212.91.16.0/20 maxlen: 20
212.91.28.0/24 maxlen: 24
213.189.32.0/19 maxlen: 19
213.189.32.0/24 maxlen: 24
213.189.42.0/24 maxlen: 24
213.189.50.0/24 maxlen: 24
217.17.32.0/20 maxlen: 20
217.149.240.0/20 maxlen: 20
2001:1a68::/32 maxlen: 32
2001:1a68:0:13::/64 maxlen: 64
2001:1a68:0:1d::/64 maxlen: 64
2001:1a68:0:21::/64 maxlen: 64
2001:1a68:e::/48 maxlen: 48
2001:1a68:18::/48 maxlen: 48
2001:1a68:2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:54:c0:55:fc:07:b7:78:eb:a4:e7:0e:0f:86:4d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Oct 26 08:30:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abbf640cb10c316aaffdbaf122e78dc467ba392c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:16:f7:11:24:2a:fa:50:ad:24:09:bc:75:
eb:3d:f1:79:54:9e:7b:5b:d5:8c:da:af:5c:b4:2b:
c4:4d:37:5f:f6:06:ec:46:a8:0b:dc:a0:f2:f1:2d:
80:a9:a8:4a:16:04:d8:00:dd:39:b5:19:6c:e6:f5:
bd:12:c0:45:8f:ca:13:ca:5f:8c:a4:85:14:e4:e8:
bd:86:99:8e:99:0d:35:e6:7d:b5:b9:bf:db:54:1e:
ed:95:59:30:75:d9:f6:0b:cc:c1:35:ef:49:63:43:
e6:98:01:e4:e9:52:fd:1e:71:78:4b:0a:8b:73:25:
7d:19:e5:db:3e:0e:70:d0:3b:a8:65:88:c9:0b:48:
5c:0a:ca:bf:ec:dc:76:a0:e2:c7:fa:21:82:36:b4:
7c:bd:23:f1:7a:2d:13:57:1d:3f:3b:ba:86:35:21:
d3:ab:1c:9d:09:29:ad:ae:f1:c6:3e:0c:7c:5b:b6:
cb:e4:1d:3b:96:30:a0:f6:55:b6:08:dc:d0:b5:e4:
69:7a:09:20:3e:f3:7e:4a:89:6f:4e:c6:94:2c:e3:
f2:d6:ae:6b:10:66:1d:c2:7a:d8:62:0a:a5:0b:e5:
45:93:bf:25:a8:0d:60:10:94:2d:5f:a5:6f:a0:89:
0c:11:f8:31:6d:e3:d9:40:1c:81:fe:11:2b:58:03:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:64:0C:B1:0C:31:6A:AF:FD:BA:F1:22:E7:8D:C4:67:BA:39:2C
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/q79kDLEMMWqv_brxIueNxGe6OSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.144.0/20
77.79.192.0/18
85.232.224.0/19
194.145.228.0/24
195.167.144.0/20
206.252.224.0/19
212.91.4.0/22
212.91.10.0-212.91.14.255
212.91.16.0/20
213.189.32.0/19
217.17.32.0/20
217.149.240.0/20
IPv6:
2001:1a68::/32
Signature Algorithm: sha256WithRSAEncryption
4a:93:25:42:e1:3f:92:8f:ae:00:e1:e4:75:44:d8:09:37:a0:
54:04:29:c5:ba:d1:a1:89:74:13:24:67:ec:d8:28:d1:b7:7e:
6e:61:bf:eb:b4:7f:f6:c4:7c:49:18:01:ad:d1:a1:76:4b:c8:
f8:2b:ea:fe:c3:09:4e:b5:e8:1a:5d:96:39:39:a3:ff:26:aa:
58:b1:09:57:90:c2:ca:eb:fc:f6:dd:eb:fb:7c:48:b3:66:5f:
de:93:45:54:b3:6e:fa:42:70:8d:5b:2b:34:b4:6e:09:94:0c:
64:0e:5a:a7:62:6f:ac:cf:b5:7b:f6:01:3f:05:50:9f:e6:31:
b4:8b:56:1d:1d:ee:27:90:cd:bb:48:ea:02:d6:88:94:78:fb:
65:fa:d0:b6:2b:9b:b9:dc:b7:ea:c9:0f:1d:34:89:92:ee:66:
93:18:ca:d8:49:a9:f2:0b:52:35:67:e9:de:61:6f:15:a6:48:
55:ca:5f:89:83:69:5c:a1:06:84:ab:e2:40:e9:78:0d:f5:95:
76:f0:1b:ee:3e:ae:f0:da:cb:fd:03:07:03:d0:40:0b:86:dd:
3e:42:4a:55:1c:d7:b6:e2:5f:f9:6e:f9:60:70:07:24:cd:c1:
5e:57:82:60:03:56:a4:e8:04:ec:c6:0b:43:18:cb:ab:40:3d:
b0:82:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:18 2026 by rpki-client