Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/qD-udMWogv1RWmmNx555UrdPqVk.roa
File: qD-udMWogv1RWmmNx555UrdPqVk.roa (raw, json)
Hash identifier: tt02ErUs19MVdE/pg4jrYCoKExmW/kUQzgxB8MltUrQ=
Subject key identifier: A8:3F:AE:74:C5:A8:82:FD:51:5A:69:8D:C7:9E:79:52:B7:4F:A9:59
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 01A13C992A9C00D24FC5B0521ECECAD7F2AA
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/qD-udMWogv1RWmmNx555UrdPqVk.roa
Signing time: Wed 14 Oct 2026 22:47:13 +0000
ROA not before: Wed 14 Oct 2026 22:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39232
IP address blocks: 5.134.48.0/22 maxlen: 22
5.134.48.0/23 maxlen: 23
5.134.50.0/23 maxlen: 23
5.134.52.0/22 maxlen: 22
5.134.52.0/23 maxlen: 23
5.134.54.0/23 maxlen: 23
5.134.56.0/22 maxlen: 22
5.134.56.0/23 maxlen: 23
5.134.58.0/23 maxlen: 23
5.134.60.0/22 maxlen: 22
5.134.60.0/23 maxlen: 23
5.134.62.0/23 maxlen: 23
37.26.0.0/18 maxlen: 18
37.26.0.0/19 maxlen: 19
37.26.32.0/19 maxlen: 19
78.109.48.0/21 maxlen: 21
78.109.48.0/22 maxlen: 22
78.109.52.0/22 maxlen: 22
78.111.48.0/20 maxlen: 20
78.111.48.0/21 maxlen: 21
78.111.56.0/21 maxlen: 21
109.239.16.0/20 maxlen: 20
109.239.16.0/21 maxlen: 21
109.239.24.0/21 maxlen: 21
178.237.64.0/20 maxlen: 20
178.237.64.0/21 maxlen: 21
178.237.72.0/21 maxlen: 21
185.18.244.0/22 maxlen: 22
185.18.244.0/23 maxlen: 23
185.18.246.0/23 maxlen: 23
185.40.156.0/22 maxlen: 22
185.40.156.0/23 maxlen: 23
185.40.158.0/23 maxlen: 23
185.80.172.0/22 maxlen: 22
185.80.172.0/23 maxlen: 23
185.80.174.0/23 maxlen: 23
185.81.80.0/22 maxlen: 22
185.81.80.0/23 maxlen: 23
185.81.82.0/23 maxlen: 23
185.81.84.0/22 maxlen: 22
185.81.84.0/23 maxlen: 23
185.81.86.0/23 maxlen: 23
188.227.208.0/20 maxlen: 20
188.227.208.0/21 maxlen: 21
188.227.216.0/21 maxlen: 21
217.25.16.0/20 maxlen: 20
217.25.16.0/21 maxlen: 21
217.25.24.0/21 maxlen: 21
2a03:7740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:99:2a:9c:00:d2:4f:c5:b0:52:1e:ce:ca:d7:f2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Oct 14 22:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a83fae74c5a882fd515a698dc79e7952b74fa959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:8c:05:63:6d:dd:a0:fb:7a:87:69:e7:12:
da:6b:51:b8:f8:14:c4:8c:49:08:5b:5e:4c:b3:09:
7e:ba:7a:67:7c:69:ba:39:0c:23:82:03:77:de:d8:
98:b7:a4:38:3a:45:d7:b4:9b:62:62:68:ae:53:a6:
91:c1:02:08:81:9a:89:33:86:20:26:1c:65:64:db:
b4:d3:5d:3f:51:53:c3:39:e7:4e:81:c9:f2:20:db:
93:bf:dc:01:77:f5:ee:f5:fe:81:a0:bb:30:2c:ec:
44:e5:fc:e1:5c:cc:71:77:fb:69:86:24:65:ed:21:
a6:b2:ba:bc:b8:0c:06:2a:4f:1e:12:97:01:68:b9:
70:a7:2b:19:58:4a:70:4c:96:15:17:5c:37:47:6e:
4d:3d:6d:99:b8:74:be:f8:d0:17:22:68:a1:fb:ee:
9c:8e:a5:17:5f:03:27:0e:4f:36:31:ed:96:9c:17:
92:c9:0c:93:93:c5:df:c7:75:38:21:89:b5:8b:7f:
f0:7f:b7:0e:7d:21:09:f0:6a:d9:d0:55:6c:ef:7c:
2e:b9:83:06:8c:d0:44:79:38:b9:d7:38:7c:5a:1b:
4b:cd:c7:4f:bd:1c:6b:af:15:07:ca:b8:f9:6a:68:
3e:1d:1a:2c:67:65:62:1c:11:59:4d:17:05:c1:6b:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:AE:74:C5:A8:82:FD:51:5A:69:8D:C7:9E:79:52:B7:4F:A9:59
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/qD-udMWogv1RWmmNx555UrdPqVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.48.0/20
37.26.0.0/18
78.109.48.0/21
78.111.48.0/20
109.239.16.0/20
178.237.64.0/20
185.18.244.0/22
185.40.156.0/22
185.80.172.0/22
185.81.80.0/21
188.227.208.0/20
217.25.16.0/20
IPv6:
2a03:7740::/32
Signature Algorithm: sha256WithRSAEncryption
32:c1:07:33:42:e5:06:d9:3b:00:32:66:d8:de:0f:d6:ea:05:
89:f1:db:fc:02:1a:9f:45:fa:b1:ad:64:30:c5:01:cb:98:44:
ad:ca:ec:36:c1:21:56:0b:0a:e5:ce:9d:98:38:87:1e:0a:99:
50:29:20:a5:07:3a:d2:67:9a:0c:49:14:c2:66:7a:2c:ed:c3:
b4:44:b0:a2:96:19:6a:f5:77:dc:79:fd:5c:22:32:58:9d:b5:
81:62:a0:5b:2a:37:c8:9f:c3:3d:d1:d8:d8:fe:16:b2:55:f8:
3b:ec:b8:b0:b7:08:b0:b5:32:2d:09:35:94:47:c5:46:ff:af:
66:8e:eb:e4:8a:8e:20:05:af:82:e4:a2:b5:f1:2a:1e:08:5f:
40:c8:6b:13:4a:64:b9:8b:38:64:d6:ce:d3:3d:b0:80:af:50:
c7:3b:28:15:47:76:e0:4d:b2:52:b1:db:56:e5:e5:5c:9a:57:
d3:a9:5b:6f:33:86:91:e1:aa:f9:b5:86:a0:23:c9:a2:7b:fb:
12:96:08:26:1f:ef:ae:dc:9e:44:02:4a:93:60:14:7b:d7:03:
56:14:91:c4:4b:e1:79:9c:36:e4:08:dd:8f:21:9e:94:33:38:
4f:e7:0a:f6:fb:8c:67:29:62:2c:ef:a8:1c:9f:05:f1:bd:77:
62:ef:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:01:19 2026 by rpki-client