Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QVPt_Uz4OOsvMVVXXR2yckcALa8.roa
File: QVPt_Uz4OOsvMVVXXR2yckcALa8.roa (raw, json)
Hash identifier: gzTwsuzhGNAsFBkLBK77+M2x5weVaVwMxRO3ccLFAm4=
Subject key identifier: 41:53:ED:FD:4C:F8:38:EB:2F:31:55:57:5D:1D:B2:72:47:00:2D:AF
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DD92627096EE7093C92EC2664E0E51B8B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QVPt_Uz4OOsvMVVXXR2yckcALa8.roa
Signing time: Wed 29 Apr 2026 12:10:49 +0000
ROA not before: Wed 29 Apr 2026 12:10:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.155.65.0/24 maxlen: 24
160.19.94.0/24 maxlen: 24
160.19.95.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
2a14:6a40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 12:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:26:27:09:6e:e7:09:3c:92:ec:26:64:e0:e5:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 29 12:10:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4153edfd4cf838eb2f3155575d1db27247002daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:35:df:3a:81:d9:d5:8a:20:6f:5a:e5:e8:e9:
39:56:1c:34:3a:d0:27:82:39:37:ae:61:dd:61:57:
f2:f2:6b:fb:c5:41:0c:90:5b:1b:e5:68:61:3d:0f:
29:d4:49:8f:24:8b:7a:07:d1:a4:c7:18:84:97:ba:
92:32:a3:0e:40:c7:0d:81:af:69:ae:64:dd:89:0c:
ba:a5:4e:9b:44:18:63:bc:a4:36:47:d2:c4:69:aa:
c0:2d:b3:a0:c4:d7:0c:95:73:6f:2f:69:ba:7e:bb:
c7:15:aa:d5:24:ad:27:e5:af:d8:e7:9c:8a:96:36:
37:f4:54:f4:b1:f5:db:e4:dc:d8:25:6a:66:0f:c1:
1f:72:46:17:3e:7a:c3:57:77:59:e5:b2:6f:48:e5:
1b:db:da:d7:eb:8d:2e:64:13:cc:ce:bb:4d:41:ff:
4d:a3:1b:a4:e4:51:5a:ee:8e:84:f0:23:58:f9:58:
cc:83:c9:5f:9d:76:92:ac:a8:e7:35:ff:f0:a9:eb:
34:40:0b:78:52:58:e3:44:e1:62:a7:df:58:7c:e0:
49:65:f9:23:e1:86:5d:04:17:b0:f5:2d:e9:30:8b:
03:b9:d1:be:c6:7c:51:45:0f:d2:c3:eb:4e:65:2e:
a1:83:8e:f5:4b:e5:cd:c8:ae:44:a1:9d:c8:3c:98:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:53:ED:FD:4C:F8:38:EB:2F:31:55:57:5D:1D:B2:72:47:00:2D:AF
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QVPt_Uz4OOsvMVVXXR2yckcALa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
160.19.94.0/23
193.200.78.0/24
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:b40::/29
2a10:3c81::/32
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a13:c440::/29
2a13:e040::/29
2a14:42c0::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
c0:e4:72:65:8f:39:b9:34:83:56:71:07:2a:37:57:55:e9:95:
58:26:84:d7:1e:45:b3:cd:35:7f:e5:a0:a2:19:4f:dd:04:97:
32:4e:20:7e:0e:84:60:8c:d7:8c:71:03:31:54:68:0b:fd:17:
db:6e:0a:41:d0:4c:c7:fe:ed:62:36:af:06:8e:ea:dc:76:a6:
84:c7:5d:4c:a1:6f:9f:e4:66:7c:9a:a5:be:9e:06:21:ea:37:
a9:88:3e:ab:e5:ed:81:2f:c1:b9:4f:5d:66:be:1d:f3:aa:09:
18:4a:72:e2:99:93:32:aa:1e:26:20:3b:96:3f:d2:4e:60:5e:
a8:fb:44:c4:f1:12:14:80:be:47:9b:d9:1b:f7:d9:e5:2d:6b:
73:a6:f6:bf:8e:b6:b8:ad:65:8d:54:75:3a:3a:4c:77:b1:6e:
16:18:6c:e5:36:d1:41:95:d3:40:a2:05:9f:60:ea:4b:0c:21:
f8:45:da:82:a5:43:59:82:a1:ac:52:74:7e:99:55:6a:4f:fd:
e6:06:cb:8a:c1:ef:e3:97:82:c6:27:8b:95:d7:02:f2:5f:98:
b6:77:03:e4:58:4c:a7:67:00:23:ba:6b:0e:a5:e9:11:fa:57:
ab:2c:c4:ed:b0:5b:74:0c:66:85:b9:92:d5:c9:2c:24:d0:4d:
8b:11:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 17:48:12 2026 by rpki-client