Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/QudZTXzMDPshkvlFYaGeF8f0SGU.roa
File: QudZTXzMDPshkvlFYaGeF8f0SGU.roa (raw, json)
Hash identifier: hgNdl2p15HyLssue1EvagioejmXU3vyWQ2ko2LE3fZA=
Subject key identifier: 42:E7:59:4D:7C:CC:0C:FB:21:92:F9:45:61:A1:9E:17:C7:F4:48:65
Certificate issuer: /CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Certificate serial: 019FFA654F122B7DBAD7D6EA8D8A9850AFEC
Authority key identifier: 55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/QudZTXzMDPshkvlFYaGeF8f0SGU.roa
Signing time: Thu 13 Aug 2026 09:12:51 +0000
ROA not before: Thu 13 Aug 2026 09:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31529
IP address blocks: 81.91.164.0/24 maxlen: 24
95.133.168.0/24 maxlen: 24
185.151.140.0/24 maxlen: 24
185.151.141.0/24 maxlen: 24
185.151.142.0/24 maxlen: 24
185.151.143.0/24 maxlen: 24
194.0.0.0/24 maxlen: 24
194.0.11.0/24 maxlen: 24
194.246.96.0/24 maxlen: 24
2001:678:2::/48 maxlen: 48
2001:678:e::/48 maxlen: 48
2a02:568::/48 maxlen: 48
2a02:568:fe00::/48 maxlen: 48
2a02:568:fe01::/48 maxlen: 48
2a02:568:fe02::/48 maxlen: 48
2a02:56f::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:65:4f:12:2b:7d:ba:d7:d6:ea:8d:8a:98:50:af:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Validity
Not Before: Aug 13 09:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42e7594d7ccc0cfb2192f94561a19e17c7f44865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:ad:10:f8:5d:19:33:4d:eb:3d:45:ba:46:
64:af:02:e4:a4:f5:43:ac:95:82:cf:d1:59:10:79:
91:a5:64:df:01:98:2d:f0:2d:1d:31:7c:08:4d:04:
c9:cb:f1:3f:1b:92:1b:f1:bb:fd:d1:eb:1a:24:f5:
22:b5:3f:cd:05:0c:af:a6:f2:e9:75:45:45:f6:53:
45:8e:8c:8d:8d:2c:1a:64:8b:be:1e:89:5d:a9:7b:
4b:2a:d6:47:f0:b0:d3:84:b1:84:4e:ae:04:8c:38:
dc:77:63:86:63:0c:a0:d0:d8:ab:88:4a:d5:dd:07:
40:d5:46:55:9b:11:31:4e:16:c0:6b:3c:20:72:13:
3a:4c:07:e1:c6:fc:86:cd:a9:14:34:9c:a0:b4:98:
64:1a:88:0c:6b:a3:72:c8:b6:b0:33:64:3b:bb:06:
b6:77:fd:a1:1a:45:0b:d6:72:95:7b:9d:13:55:0b:
e4:a8:4e:0e:a6:2a:c2:65:d9:86:37:27:5a:0a:9f:
14:38:3f:10:1c:23:8b:52:08:c3:7d:28:65:2d:5e:
26:9f:66:a9:8f:4d:44:5c:4f:22:8e:a5:8b:f8:95:
c8:1c:6c:06:52:07:4a:df:fd:a9:a5:70:2f:dc:db:
71:7c:f2:b5:b7:e2:6b:16:02:1c:f4:25:fc:bd:50:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:59:4D:7C:CC:0C:FB:21:92:F9:45:61:A1:9E:17:C7:F4:48:65
X509v3 Authority Key Identifier:
keyid:55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/QudZTXzMDPshkvlFYaGeF8f0SGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.164.0/24
95.133.168.0/24
185.151.140.0/22
194.0.0.0/24
194.0.11.0/24
194.246.96.0/24
IPv6:
2001:678:2::/48
2001:678:e::/48
2a02:568::/48
2a02:568:fe00::-2a02:568:fe02:ffff:ffff:ffff:ffff:ffff
2a02:56f::/32
Signature Algorithm: sha256WithRSAEncryption
04:ab:d9:3c:d7:ae:19:be:3a:f7:f8:0f:77:35:b8:77:df:72:
d3:79:33:a2:47:78:18:75:b4:48:f1:29:79:3e:af:f6:09:82:
40:2e:68:f6:70:c8:26:62:38:83:81:0a:bb:e1:b8:9f:5e:26:
0b:6d:b9:bd:7b:56:36:9e:75:df:e4:fc:db:37:a4:4e:25:1c:
c3:30:15:b5:be:ba:90:4a:f3:08:b7:ec:fb:09:da:a3:3f:7f:
ea:9b:24:d3:2a:44:f7:cc:4c:0a:5f:76:a3:50:ed:5c:1d:ba:
a1:9e:88:fb:d8:9c:35:b3:4e:5e:11:45:9b:ba:09:19:fb:63:
6f:7a:18:2b:d2:bc:f2:3d:d2:20:65:0c:62:6e:dd:bc:cd:6b:
94:d2:17:18:ed:ab:0b:b9:08:17:ea:48:1d:c8:98:a4:8b:b5:
c7:13:81:3f:7d:29:df:1d:1c:4e:6b:1e:fe:24:62:8b:e0:ba:
ca:da:65:ef:6c:7a:e8:3a:04:a1:bd:3b:ab:a8:65:2f:9b:b2:
0e:ff:ee:f2:74:a9:48:55:d0:86:ef:7e:fd:9e:85:95:e8:c6:
cb:e6:55:e3:a1:09:e2:31:38:9e:d3:91:47:72:a4:92:31:60:
72:43:ed:38:aa:04:73:89:19:7d:9a:e5:f0:eb:72:b5:80:e6:
c8:b0:59:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:46 2026 by rpki-client