Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gqZpQUrsX-NQAsyh68b5O58yKfk.roa
File: gqZpQUrsX-NQAsyh68b5O58yKfk.roa (raw, json)
Hash identifier: ouP0U8iWcUgnM/x9+WZ4Nyeryohxh+AeM+Wcjl3JVFQ=
Subject key identifier: 82:A6:69:41:4A:EC:5F:E3:50:02:CC:A1:EB:C6:F9:3B:9F:32:29:F9
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236941868421926D7D8E96B7DF77D8DC
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gqZpQUrsX-NQAsyh68b5O58yKfk.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 64.43.104.0/22 maxlen: 22
64.43.112.0/22 maxlen: 22
64.43.124.0/22 maxlen: 22
77.36.120.0/22 maxlen: 22
176.102.124.0/22 maxlen: 22
185.55.4.0/22 maxlen: 22
185.55.4.0/23 maxlen: 23
185.55.6.0/23 maxlen: 23
185.55.140.0/22 maxlen: 22
185.55.140.0/23 maxlen: 23
185.55.142.0/23 maxlen: 23
193.36.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:41:86:84:21:92:6d:7d:8e:96:b7:df:77:d8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82a669414aec5fe35002cca1ebc6f93b9f3229f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:62:ce:dc:e7:9c:2b:26:68:b7:8f:0b:29:
96:65:45:5d:3d:2f:4b:fa:8d:ca:eb:6a:76:c9:98:
a3:42:05:b6:fb:03:6c:a8:1d:2b:ff:65:58:ba:d1:
d5:f9:ee:fb:dd:30:ab:50:08:2c:bd:f0:b0:1a:84:
d6:85:7f:0d:b7:40:29:07:84:a4:8f:3b:d5:c6:bd:
7a:25:1f:ba:d0:64:f4:fb:da:47:90:a1:28:9b:5a:
33:27:79:ba:3f:2f:c8:1b:fd:8e:a3:97:76:e9:ea:
8d:67:c4:2e:43:30:7c:2a:f7:a1:d2:e8:14:8b:f9:
4d:1d:f7:10:f3:96:59:e7:8a:83:00:22:24:bf:1c:
87:44:73:37:30:2c:4b:97:94:8b:93:65:ef:12:0d:
e7:8e:6a:74:91:96:d9:cc:f8:f1:f0:26:53:2d:57:
c2:a0:8b:9d:60:be:f8:f6:21:87:f9:82:2b:46:31:
7f:10:d2:e4:5b:db:b5:fc:d1:31:32:33:1a:39:31:
cb:d2:14:3c:e1:a0:de:5a:5c:26:18:e2:f0:42:02:
5e:6e:76:48:4a:f2:be:65:1b:30:30:61:11:07:b1:
a6:c7:2c:3a:ae:da:ca:42:be:98:8e:e8:c9:04:24:
79:11:6a:3a:c4:e5:56:85:a2:43:e7:b9:dd:3e:f4:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:69:41:4A:EC:5F:E3:50:02:CC:A1:EB:C6:F9:3B:9F:32:29:F9
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gqZpQUrsX-NQAsyh68b5O58yKfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.104.0/22
64.43.112.0/22
64.43.124.0/22
77.36.120.0/22
176.102.124.0/22
185.55.4.0/22
185.55.140.0/22
193.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:5b:47:c9:e2:0c:66:de:b4:4c:40:93:30:5d:e7:bc:83:4a:
92:fc:eb:f7:a5:82:5a:ab:2a:68:71:c7:f2:6a:5f:f7:a3:06:
87:04:52:78:59:a5:00:b7:ef:f9:91:ce:11:d1:74:fc:35:0b:
c6:3c:1f:62:11:e9:a7:44:44:89:ac:6e:ea:9f:1c:d1:68:10:
db:dc:13:70:18:2b:90:b4:17:73:fa:7c:e0:b6:47:26:32:77:
09:cb:bc:75:ad:37:da:10:d0:ab:9a:1b:2f:2d:be:f4:24:11:
91:cb:e0:d8:47:0b:24:f8:eb:f5:4e:51:4a:24:67:5f:9d:7a:
b9:52:99:87:52:c8:a4:ea:d3:4a:51:e6:5b:2c:38:a0:9c:27:
55:15:7e:d8:64:98:b0:92:fb:86:1e:6e:be:c9:e0:88:b3:8a:
14:dc:c0:44:f1:39:6c:d9:06:cd:5e:13:89:d6:35:11:93:32:
e9:f1:a3:00:7d:df:70:2a:1b:73:04:c9:a5:6a:f9:21:73:9b:
68:d3:e5:7a:4f:1e:f3:9c:9c:7d:b7:20:48:4a:3f:82:00:15:
2b:78:e4:19:94:b5:22:27:cc:96:22:e4:27:5f:b3:8a:bd:35:
71:68:15:2a:b1:92:67:66:39:8e:88:ef:8d:46:c3:13:d5:d7:
71:b8:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:02 2026 by rpki-client