Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Qpq2i8QQe-hpdWa8-mCiT84iiOs.roa
File: Qpq2i8QQe-hpdWa8-mCiT84iiOs.roa (raw, json)
Hash identifier: +5MUOaZzIe1VzHSVRTVwblP5mePcZuEKD29LwLCdvi4=
Subject key identifier: 42:9A:B6:8B:C4:10:7B:E8:69:75:66:BC:FA:60:A2:4F:CE:22:88:EB
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 019E87AF35AB3FB82E035E9FA07DD34619B6
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Qpq2i8QQe-hpdWa8-mCiT84iiOs.roa
Signing time: Tue 02 Jun 2026 09:34:27 +0000
ROA not before: Tue 02 Jun 2026 09:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 84.246.64.0/21 maxlen: 21
129.26.0.0/16 maxlen: 16
129.233.128.0/18 maxlen: 18
129.233.202.0/24 maxlen: 24
129.233.210.0/24 maxlen: 24
129.233.224.0/20 maxlen: 20
153.96.0.0/16 maxlen: 16
153.97.0.0/16 maxlen: 16
192.35.149.0/24 maxlen: 24
192.35.150.0/24 maxlen: 24
192.35.151.0/24 maxlen: 24
192.35.152.0/24 maxlen: 24
192.35.153.0/24 maxlen: 24
192.44.5.0/24 maxlen: 24
192.44.6.0/24 maxlen: 24
192.44.8.0/24 maxlen: 24
192.44.12.0/24 maxlen: 24
192.44.15.0/24 maxlen: 24
192.44.18.0/24 maxlen: 24
192.44.20.0/23 maxlen: 23
192.44.23.0/24 maxlen: 24
192.44.25.0/24 maxlen: 24
192.44.26.0/24 maxlen: 24
192.44.28.0/24 maxlen: 24
192.44.29.0/24 maxlen: 24
192.44.30.0/23 maxlen: 23
192.44.36.0/24 maxlen: 24
192.44.37.0/24 maxlen: 24
192.44.38.0/24 maxlen: 24
192.44.39.0/24 maxlen: 24
192.44.40.0/24 maxlen: 24
192.54.34.0/23 maxlen: 23
192.76.148.0/24 maxlen: 24
192.76.241.0/24 maxlen: 24
192.76.245.0/24 maxlen: 24
192.76.246.0/23 maxlen: 23
192.76.248.0/24 maxlen: 24
192.88.108.0/24 maxlen: 24
192.102.150.0/23 maxlen: 23
192.102.152.0/23 maxlen: 23
192.102.156.0/24 maxlen: 24
192.102.158.0/23 maxlen: 23
192.102.160.0/24 maxlen: 24
192.102.161.0/24 maxlen: 24
192.102.162.0/23 maxlen: 23
192.102.164.0/24 maxlen: 24
192.102.167.0/24 maxlen: 24
192.102.168.0/24 maxlen: 24
192.102.169.0/24 maxlen: 24
192.102.170.0/24 maxlen: 24
192.102.172.0/24 maxlen: 24
192.102.174.0/24 maxlen: 24
192.102.175.0/24 maxlen: 24
192.102.176.0/23 maxlen: 23
192.109.177.0/24 maxlen: 24
212.44.192.0/19 maxlen: 19
2a03:db80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:af:35:ab:3f:b8:2e:03:5e:9f:a0:7d:d3:46:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jun 2 09:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=429ab68bc4107be8697566bcfa60a24fce2288eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:d4:02:dd:a7:2b:0d:80:f3:0d:82:88:7b:
6c:8f:b6:84:4b:8c:fc:f2:2b:1a:b4:97:98:29:a1:
de:91:63:7b:dd:8b:7e:9c:a3:09:27:c4:82:8c:21:
4e:95:37:12:2e:13:57:61:c4:86:8d:7e:92:97:ba:
76:dc:c0:f8:af:2f:9b:64:b3:1d:81:79:96:d8:c3:
fd:83:43:de:98:7d:77:3c:a0:67:70:9a:12:db:e5:
64:e5:6d:e9:35:d0:9e:60:96:f7:28:60:b9:8a:e9:
9d:76:e6:fc:0e:cb:a3:78:95:35:86:29:e9:78:13:
21:15:6b:b0:75:0c:91:87:d8:ed:d5:4b:3d:fc:cf:
7e:6a:99:f5:36:ce:62:5b:f8:05:7c:05:c1:cd:63:
d6:09:59:00:f8:48:a3:15:23:3c:53:31:7b:a1:fc:
99:a6:45:00:d5:8c:4f:ea:99:c4:aa:c5:aa:fd:64:
99:44:67:fb:f2:82:50:b5:52:82:cf:f5:64:c0:9c:
4c:51:7f:51:ff:14:c0:81:bc:95:d7:40:47:63:7a:
b2:d6:02:48:bd:21:1c:fb:52:74:77:07:15:e5:8a:
d3:69:5c:3d:c6:e7:0f:18:a0:f0:16:5a:e2:c0:64:
02:c6:5b:e5:e1:cc:52:91:39:29:f5:f3:e3:09:3f:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9A:B6:8B:C4:10:7B:E8:69:75:66:BC:FA:60:A2:4F:CE:22:88:EB
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Qpq2i8QQe-hpdWa8-mCiT84iiOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.64.0/21
129.26.0.0/16
129.233.128.0/18
129.233.202.0/24
129.233.210.0/24
129.233.224.0/20
153.96.0.0/15
192.35.149.0-192.35.153.255
192.44.5.0-192.44.6.255
192.44.8.0/24
192.44.12.0/24
192.44.15.0/24
192.44.18.0/24
192.44.20.0/23
192.44.23.0/24
192.44.25.0-192.44.26.255
192.44.28.0/22
192.44.36.0-192.44.40.255
192.54.34.0/23
192.76.148.0/24
192.76.241.0/24
192.76.245.0-192.76.248.255
192.88.108.0/24
192.102.150.0-192.102.153.255
192.102.156.0/24
192.102.158.0-192.102.164.255
192.102.167.0-192.102.170.255
192.102.172.0/24
192.102.174.0-192.102.177.255
192.109.177.0/24
212.44.192.0/19
IPv6:
2a03:db80::/32
Signature Algorithm: sha256WithRSAEncryption
3f:b9:42:17:5c:78:30:be:ca:76:0f:05:e0:6a:34:f7:6f:d7:
a0:63:66:e4:7d:9c:82:25:bb:f1:2b:d9:da:42:f8:b8:cc:33:
62:58:c3:4d:95:a8:ca:aa:b1:42:1a:09:88:30:fb:7b:6d:92:
10:cb:80:7f:76:16:4b:52:21:21:16:2d:ed:ca:c5:70:65:57:
62:16:4d:d9:93:68:9a:6a:e1:23:23:d3:ed:3a:6e:84:37:7e:
7f:5f:9a:d9:5c:20:89:73:7d:0b:2b:e2:2d:84:33:5f:f8:65:
27:dd:3c:49:3f:4c:ed:c6:e5:06:63:42:b6:ed:be:14:a5:9a:
e6:79:10:c6:31:96:9d:a6:54:7a:cb:8f:41:1c:d3:ad:0c:f4:
a8:4e:de:fa:6a:f5:73:da:65:57:b6:4b:50:6c:e8:9f:52:d0:
62:b4:c4:97:ee:ec:96:40:7b:9a:d7:db:db:fa:c5:2d:cd:79:
80:aa:94:27:24:a5:b4:fd:22:16:de:7c:19:cb:31:c7:61:93:
bf:fa:9c:0d:64:1b:f2:95:f4:70:87:ad:e8:38:c1:f7:bf:74:
5d:5d:5e:ee:b9:75:8b:6d:d2:6a:3e:74:0a:4b:a2:0e:5f:a9:
46:70:69:33:45:76:71:3f:20:7c:ce:fb:a9:76:5a:c3:67:89:
2c:2b:53:fe
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgISAZ6HrzWrP7guA16foH3TRhm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2
NDIwZGYwHhcNMjYwNjAyMDkzNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjlhYjY4YmM0MTA3YmU4Njk3NTY2YmNmYTYwYTI0ZmNlMjI4OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSjUAt2nKw2A8w2CiHtsj7aES4z8
8isatJeYKaHekWN73Yt+nKMJJ8SCjCFOlTcSLhNXYcSGjX6Sl7p23MD4ry+bZLMd
gXmW2MP9g0PemH13PKBncJoS2+Vk5W3pNdCeYJb3KGC5iumddub8DsujeJU1hinp
eBMhFWuwdQyRh9jt1Us9/M9+apn1Ns5iW/gFfAXBzWPWCVkA+EijFSM8UzF7ofyZ
pkUA1YxP6pnEqsWq/WSZRGf78oJQtVKCz/VkwJxMUX9R/xTAgbyV10BHY3qy1gJI
vSEc+1J0dwcV5YrTaVw9xucPGKDwFlriwGQCxlvl4cxSkTkp9fPjCT9ydwIDAQAB
o4IDHDCCAxgwHQYDVR0OBBYEFEKatovEEHvoaXVmvPpgok/OIojrMB8GA1UdIwQY
MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct
YWQ4ZmJlYWE4ZGQ5LzEvUXBxMmk4UVFlLWhwZFdhOC1tQ2lUODRpaU9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5
LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMAYIKwYBBQUHAQcBAf8EggEfMIIBGzCCAQgEAgABMIIB
AAMEA1T2QAMDAIEaAwQGgemAAwQAgenKAwQAgenSAwQEgengAwMBmWAwDAMEAMAj
lQMEAcAjmDAMAwQAwCwFAwQAwCwGAwQAwCwIAwQAwCwMAwQAwCwPAwQAwCwSAwQB
wCwUAwQAwCwXMAwDBADALBkDBADALBoDBALALBwwDAMEAsAsJAMEAMAsKAMEAcA2
IgMEAMBMlAMEAMBM8TAMAwQAwEz1AwQAwEz4AwQAwFhsMAwDBAHAZpYDBAHAZpgD
BADAZpwwDAMEAcBmngMEAMBmpDAMAwQAwGanAwQAwGaqAwQAwGasMAwDBAHAZq4D
BAHAZrADBADAbbEDBAXULMAwDQQCAAIwBwMFACoD24AwDQYJKoZIhvcNAQELBQAD
ggEBAD+5QhdceDC+ynYPBeBqNPdv16BjZuR9nIIlu/Er2dpC+LjMM2JYw02VqMqq
sUIaCYgw+3ttkhDLgH92FktSISEWLe3KxXBlV2IWTdmTaJpq4SMj0+06boQ3fn9f
mtlcIIlzfQsr4i2EM1/4ZSfdPEk/TO3G5QZjQrbtvhSlmuZ5EMYxlp2mVHrLj0Ec
060M9KhO3vpq9XPaZVe2S1Bs6J9S0GK0xJfu7JZAe5rX29v6xS3NeYCqlCckpbT9
IhbefBnLMcdhk7/6nA1kG/KV9HCHreg4wfe/dF1dXu65dYtt0mo+dApLog5fqUZw
aTNFdnE/IHzO+6l2WsNniSwrU/4=
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:05 2026 by rpki-client