Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/QHhsa1aJiBWPcDLMOhJpN8sy2Gc.roa
File: QHhsa1aJiBWPcDLMOhJpN8sy2Gc.roa (raw, json)
Hash identifier: rLlk5fjHEpzOnR0hjya7tduTEQ56VPKA/wcUDIifdhg=
Subject key identifier: 40:78:6C:6B:56:89:88:15:8F:70:32:CC:3A:12:69:37:CB:32:D8:67
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019E630E86A2CF56FC26FFD9532F1750F418
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/QHhsa1aJiBWPcDLMOhJpN8sy2Gc.roa
Signing time: Tue 26 May 2026 06:52:36 +0000
ROA not before: Tue 26 May 2026 06:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34450
IP address blocks: 86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.73.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:0e:86:a2:cf:56:fc:26:ff:d9:53:2f:17:50:f4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: May 26 06:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40786c6b568988158f7032cc3a126937cb32d867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:36:b5:7d:d0:ed:c6:37:2d:a0:58:b1:4a:d5:
df:bc:46:27:d5:69:c1:21:af:be:f6:9a:9a:67:fb:
21:d3:82:65:ae:14:4a:63:d1:d4:3d:d4:40:00:6d:
8a:85:2a:7f:22:45:a6:39:92:bc:78:b7:35:e1:5c:
b6:32:6c:f4:0d:ce:bc:db:9e:33:d5:39:fb:c2:39:
c4:6e:64:93:62:7c:d4:00:e0:40:26:9d:02:ee:7b:
26:2d:d7:07:14:a5:bf:bb:a6:dd:40:81:1f:f0:46:
94:c4:dc:7e:62:3b:5d:80:76:88:46:40:05:45:9a:
95:7c:25:91:cd:2e:ef:45:81:72:bb:a0:40:83:31:
d1:24:45:ed:3a:fb:d9:65:de:fe:05:36:c2:bd:00:
93:1d:5b:4c:73:b0:72:d1:95:90:b2:44:5a:68:b1:
d1:b6:94:a7:d2:1c:54:ad:6d:2a:4a:84:57:b9:d4:
be:96:de:68:5a:ed:8d:54:d0:7d:89:7b:0f:96:0c:
e7:a8:43:f8:b8:eb:92:6c:c2:75:47:2f:c9:d5:55:
0c:ca:b8:e6:44:c7:a4:7d:7b:1f:6e:dc:28:61:35:
02:f1:21:14:bf:e1:39:97:05:a8:93:4d:67:0a:05:
c4:8c:b5:69:d1:4a:f7:f0:b7:47:53:6b:cf:76:a2:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:6C:6B:56:89:88:15:8F:70:32:CC:3A:12:69:37:CB:32:D8:67
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/QHhsa1aJiBWPcDLMOhJpN8sy2Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.46.0/24
89.45.34.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.73.0/24
188.215.95.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
2a:99:e9:bb:75:37:8b:f0:2f:e5:77:71:35:fb:ca:3b:6b:90:
22:82:ff:7b:84:68:03:4e:ac:a9:76:0d:cb:a8:12:c1:c0:8a:
4a:d4:f9:e2:12:6d:25:75:af:cb:c5:d0:27:ea:c9:f9:e1:06:
03:9c:89:70:31:11:39:88:f9:78:49:02:d8:c2:0e:62:02:16:
fa:1d:9c:97:cf:a4:61:12:ad:27:7f:85:26:b0:b6:55:65:80:
9c:bb:9f:3b:11:33:26:ac:6a:98:b0:48:52:c5:f2:1c:0e:74:
34:d6:da:a5:92:bf:ee:19:4c:67:25:95:2e:2a:2c:94:5b:dc:
af:29:5a:e4:59:7d:b8:34:a0:7a:6e:b2:82:62:6d:40:c7:15:
ae:87:a5:06:9d:0e:40:00:f2:11:60:9f:a7:05:bc:f9:34:11:
53:71:de:87:e7:96:b9:6f:82:ee:0c:78:09:10:5a:61:13:3c:
ec:b9:27:d4:37:ed:65:12:76:3f:6d:ef:35:a2:92:ad:76:8e:
06:cf:ae:ed:de:34:ef:7b:7d:1b:ac:ee:89:69:6a:75:39:88:
fb:d9:fa:c7:a4:a0:2e:69:0e:ec:1c:7c:0c:47:04:79:d0:e1:
01:80:68:d5:55:9c:eb:33:0c:9e:e3:02:1f:64:ce:d7:af:fd:
8f:e8:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:04 2026 by rpki-client