Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/qoEL7wNReBLuDKc4jYOaN4M9oBw.roa
File: qoEL7wNReBLuDKc4jYOaN4M9oBw.roa (raw, json)
Hash identifier: qFJEnOgfFFYB+MoLzXEG2pB0vqzM3XWcILWtmrtL3/Q=
Subject key identifier: AA:81:0B:EF:03:51:78:12:EE:0C:A7:38:8D:83:9A:37:83:3D:A0:1C
Certificate issuer: /CN=5379208330b98f400b8d8345a02b591c1a172f0a
Certificate serial: 019F2368AD89747B2BC0BFEDC91C51D3B557
Authority key identifier: 53:79:20:83:30:B9:8F:40:0B:8D:83:45:A0:2B:59:1C:1A:17:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3kggzC5j0ALjYNFoCtZHBoXLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/qoEL7wNReBLuDKc4jYOaN4M9oBw.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209231
IP address blocks: 2.56.140.0/22 maxlen: 24
86.110.204.0/22 maxlen: 24
89.232.174.0/23 maxlen: 24
185.161.236.0/22 maxlen: 24
185.251.36.0/24 maxlen: 24
2a09:c540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3kggzC5j0ALjYNFoCtZHBoXLwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ad:89:74:7b:2b:c0:bf:ed:c9:1c:51:d3:b5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5379208330b98f400b8d8345a02b591c1a172f0a
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa810bef03517812ee0ca7388d839a37833da01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:98:34:5b:f7:4a:87:44:77:d4:56:0b:88:
43:61:8a:37:28:ae:15:f2:d7:30:57:2a:e5:2a:a8:
b2:a0:94:62:8b:27:34:80:12:ea:ac:de:dd:09:b7:
b9:5c:b6:d5:c2:4a:a6:38:34:ee:bf:40:b9:86:30:
d8:f8:2c:df:49:bd:c4:ee:e0:a5:25:7b:d7:c2:c3:
a5:29:e3:7d:28:d6:b4:49:40:e6:c8:a3:91:b3:fe:
d4:8f:03:2c:55:dd:11:17:a5:24:32:7f:b5:2d:35:
65:02:01:71:d3:d7:89:2b:3b:fd:91:55:72:50:2e:
d3:a1:35:25:3b:dc:2a:6b:b8:ee:07:a0:a4:e5:c2:
48:2a:12:73:24:da:31:c6:fe:c2:c3:5b:94:a9:ac:
40:7e:92:e1:89:85:c7:2c:7d:7b:64:49:07:51:43:
90:f8:39:e0:bc:8e:df:d6:e9:57:82:53:98:98:53:
c1:8d:ae:11:07:ec:6a:9e:b6:cc:9e:2a:5c:0f:a6:
c9:81:c7:4a:43:cf:66:0c:0e:17:0f:18:d9:28:49:
dc:2c:4e:c6:09:ee:97:a9:b2:21:e6:91:f3:be:3a:
62:39:07:b0:ce:b4:70:38:eb:b6:12:2e:f7:01:7e:
f9:92:56:6d:c2:f9:c8:fe:1f:8f:50:70:65:8c:6f:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:0B:EF:03:51:78:12:EE:0C:A7:38:8D:83:9A:37:83:3D:A0:1C
X509v3 Authority Key Identifier:
keyid:53:79:20:83:30:B9:8F:40:0B:8D:83:45:A0:2B:59:1C:1A:17:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3kggzC5j0ALjYNFoCtZHBoXLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/qoEL7wNReBLuDKc4jYOaN4M9oBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.140.0/22
86.110.204.0/22
89.232.174.0/23
185.161.236.0/22
185.251.36.0/24
IPv6:
2a09:c540::/32
Signature Algorithm: sha256WithRSAEncryption
44:99:13:02:a6:fe:ac:10:f5:39:5c:4f:27:0e:44:b9:86:39:
4e:b9:bd:7f:0c:ab:55:64:61:43:59:02:06:27:01:76:91:c9:
32:3b:8f:8d:93:84:fe:f7:f9:52:66:e2:dc:e3:4d:0f:de:34:
70:14:43:9d:12:a7:1f:e7:75:76:82:3e:e7:ac:24:3c:23:ec:
7b:e5:eb:8f:d3:c9:c8:15:9e:63:39:d5:1a:98:40:c2:fb:70:
1e:c0:ff:76:81:c4:7d:6d:e5:a6:d7:05:93:14:3e:c0:8d:28:
70:d5:03:cb:6f:bb:2c:87:bd:b4:52:fe:30:c5:3c:f4:6f:32:
57:10:15:a3:94:95:b4:fe:fa:5b:b0:dc:f6:d7:67:65:be:ba:
e6:95:74:d4:63:50:cf:b1:16:c8:90:a5:01:1e:75:71:2c:4a:
82:0d:78:21:ce:49:ee:cf:f1:7e:6a:f5:7f:05:aa:6d:00:eb:
e7:3e:92:9b:e1:01:c3:6b:b9:c3:32:f3:b0:0a:c0:b4:7f:1a:
8f:5a:25:36:0f:00:b8:04:71:a2:a9:91:28:fa:c1:2b:89:86:
9d:bb:71:59:3a:f4:64:e9:21:2d:33:87:f1:70:92:19:6e:b6:
90:57:6f:c1:4d:5d:38:50:33:dc:2b:34:7f:c5:aa:79:2e:11:
86:4b:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:12:01 2026 by rpki-client