Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Q5St4o5PnLG71RuFA0FuChJ4Osw.roa
File: Q5St4o5PnLG71RuFA0FuChJ4Osw.roa (raw, json)
Hash identifier: HXynWQRecp6LxWnPk5zkpfVVgcKnabtZZoWjMww0h6U=
Subject key identifier: 43:94:AD:E2:8E:4F:9C:B1:BB:D5:1B:85:03:41:6E:0A:12:78:3A:CC
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019CBDE54C63070350E62E937C67D502A7B6
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Q5St4o5PnLG71RuFA0FuChJ4Osw.roa
Signing time: Thu 05 Mar 2026 12:07:26 +0000
ROA not before: Thu 05 Mar 2026 12:07:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 2.59.219.0/24 maxlen: 24
45.93.8.0/24 maxlen: 24
45.93.9.0/24 maxlen: 24
45.148.244.0/24 maxlen: 24
78.40.116.0/24 maxlen: 24
78.40.117.0/24 maxlen: 24
81.177.213.0/24 maxlen: 24
93.157.106.0/24 maxlen: 24
93.185.167.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
94.231.223.0/24 maxlen: 24
171.22.181.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
176.125.240.0/24 maxlen: 24
176.125.241.0/24 maxlen: 24
176.125.242.0/24 maxlen: 24
176.125.243.0/24 maxlen: 24
185.139.215.0/24 maxlen: 24
185.234.9.0/24 maxlen: 24
193.27.90.0/24 maxlen: 24
213.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 19:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:e5:4c:63:07:03:50:e6:2e:93:7c:67:d5:02:a7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Mar 5 12:07:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4394ade28e4f9cb1bbd51b8503416e0a12783acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:03:3a:d7:d5:4a:06:19:94:01:eb:05:cd:
f5:2b:e0:d6:93:01:8c:3e:7a:c6:f7:aa:ce:4b:74:
a0:00:02:37:46:2b:c4:60:93:18:47:f7:e6:a5:21:
14:3f:6c:6d:d4:dd:c8:eb:04:fa:53:c6:5f:b1:17:
1b:5f:d9:73:07:20:49:96:73:2f:47:46:c6:b4:d4:
93:c6:2b:db:11:aa:1d:6e:5e:b3:30:73:31:39:c4:
a6:d3:c7:aa:ed:5a:96:e3:54:49:07:9d:eb:96:c4:
64:88:c0:a9:af:15:df:31:ef:9a:98:2a:fd:f9:1d:
c3:93:55:c1:d3:f4:8f:4c:11:59:2a:f6:60:a0:e4:
51:06:25:a3:e9:02:73:ec:78:9b:5a:98:4d:f2:ca:
f0:2f:39:ea:53:ff:a3:a1:9d:5a:76:ce:03:7f:55:
37:e8:d1:8b:83:6f:3c:64:18:df:ca:1e:25:d9:19:
d3:5f:2e:40:7e:07:39:f6:8b:b7:0e:10:be:94:71:
d9:7f:b2:ad:06:4d:3c:e7:b3:83:35:3f:46:66:36:
a5:8b:43:b0:ed:90:15:95:d6:31:f6:03:17:70:c4:
99:77:30:bd:05:34:c8:0d:42:ae:c1:a4:6f:b4:d4:
3d:cf:6f:fc:c2:ec:b9:e1:ea:a2:28:07:63:bf:4e:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:94:AD:E2:8E:4F:9C:B1:BB:D5:1B:85:03:41:6E:0A:12:78:3A:CC
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Q5St4o5PnLG71RuFA0FuChJ4Osw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.219.0/24
45.93.8.0/23
45.148.244.0/24
78.40.116.0/23
81.177.213.0/24
93.157.106.0/24
93.185.167.0/24
94.103.188.0/24
94.231.223.0/24
171.22.181.0/24
176.116.0.0/24
176.125.240.0/22
185.139.215.0/24
185.234.9.0/24
193.27.90.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
66:92:cc:0a:67:ef:c0:19:c9:da:39:88:a0:57:19:47:ea:63:
3d:dd:4d:1a:46:2f:68:a9:8a:6f:df:2f:31:45:be:4c:08:81:
6d:e2:a5:e6:f9:13:21:4a:59:be:b8:63:86:ad:87:ac:28:4f:
8b:36:19:70:f9:22:69:1a:a6:1e:20:ec:eb:1a:d7:52:9f:4d:
6e:79:f2:f4:c1:9d:4d:66:b2:2d:30:d4:e8:23:a9:6c:58:f8:
b1:d4:b7:0b:a1:30:12:a4:9a:51:c1:55:92:6e:04:9e:d5:94:
da:1b:0f:bb:ea:82:f3:2a:4b:96:1e:8e:61:8c:8b:fb:27:f2:
b3:87:26:08:c4:89:c6:56:6f:7a:08:2d:5a:48:92:69:fb:f4:
21:00:9f:46:75:52:25:f1:a8:32:0f:8f:4e:61:e6:f8:1f:e8:
61:ea:9e:de:37:06:d5:e6:30:35:72:15:92:47:71:b1:ef:44:
d4:72:73:39:c8:99:a0:a8:a8:50:68:a8:96:cd:f3:96:e6:11:
6b:80:50:68:98:ea:7c:a5:23:75:2b:cb:11:1e:22:52:04:a1:
75:eb:83:4a:eb:70:26:2b:5e:e7:cf:e6:b1:3b:6f:3b:a5:11:
30:f9:df:74:46:e7:58:97:dc:c9:6a:77:45:dc:7e:5a:38:b2:
70:b6:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:25:07 2026 by rpki-client