Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Zqcb5O8rFX9zl4QnpgFxwAPkSnw.roa
File: Zqcb5O8rFX9zl4QnpgFxwAPkSnw.roa (raw, json)
Hash identifier: PxO9Gffmo66KLSDjItc0OadV8hhOTt+St3p6W/DJEgM=
Subject key identifier: 66:A7:1B:E4:EF:2B:15:7F:73:97:84:27:A6:01:71:C0:03:E4:4A:7C
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01A11880A58800F88FAFD22DF9F427C8AF44
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Zqcb5O8rFX9zl4QnpgFxwAPkSnw.roa
Signing time: Wed 07 Oct 2026 22:34:06 +0000
ROA not before: Wed 07 Oct 2026 22:34:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24961
IP address blocks: 5.104.104.0/21 maxlen: 24
5.199.128.0/20 maxlen: 24
37.157.248.0/21 maxlen: 24
46.20.32.0/20 maxlen: 24
46.228.192.0/20 maxlen: 24
62.141.32.0/20 maxlen: 24
78.31.64.0/21 maxlen: 24
80.82.208.0/20 maxlen: 24
81.30.144.0/20 maxlen: 24
83.136.80.0/21 maxlen: 24
85.14.192.0/18 maxlen: 24
85.114.128.0/19 maxlen: 24
89.163.128.0/17 maxlen: 24
91.194.84.0/24 maxlen: 24
91.212.153.0/24 maxlen: 24
91.212.159.0/24 maxlen: 24
91.212.163.0/24 maxlen: 24
93.186.192.0/20 maxlen: 24
146.0.32.0/20 maxlen: 24
152.89.92.0/22 maxlen: 24
185.15.244.0/22 maxlen: 24
185.145.196.0/22 maxlen: 24
185.219.208.0/22 maxlen: 24
193.111.198.0/23 maxlen: 24
194.107.129.0/24 maxlen: 24
195.93.242.0/23 maxlen: 24
213.202.192.0/18 maxlen: 24
217.79.176.0/20 maxlen: 24
2001:4ba0::/32 maxlen: 32
2001:4ba1::/32 maxlen: 32
2001:4ba3::/32 maxlen: 32
2001:4ba4::/32 maxlen: 32
2001:4ba6::/32 maxlen: 32
2a00:c320::/32 maxlen: 48
2a01:480::/32 maxlen: 32
2a0a:db80:1000::/36 maxlen: 36
2a0a:db80:2000::/36 maxlen: 36
2a0a:db80:2000::/40 maxlen: 40
2a0a:db80:3000::/36 maxlen: 36
2a0a:db80:4000::/36 maxlen: 36
2a0a:db80:5000::/36 maxlen: 36
2a0a:db80:8000::/36 maxlen: 36
2a0a:db80:8000::/40 maxlen: 40
2a0a:db80:c000::/36 maxlen: 36
2a0c:6b00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:80:a5:88:00:f8:8f:af:d2:2d:f9:f4:27:c8:af:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Oct 7 22:34:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66a71be4ef2b157f73978427a60171c003e44a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:7f:c3:c2:71:15:b5:c1:11:1e:65:63:ce:
f1:d7:8b:6b:9d:9c:27:9e:f6:9a:38:c9:a0:20:42:
3a:b3:d5:dc:9a:93:95:02:e8:30:aa:b7:96:4b:95:
7c:b7:3d:62:62:d8:46:a6:bf:87:6a:f6:d3:5a:1c:
0c:3f:b6:94:97:cf:06:06:f7:0e:19:46:f0:c0:1b:
89:fb:54:2a:d0:82:ab:d8:57:4d:3c:c5:93:c0:51:
5c:c8:f9:dd:1d:d4:bb:5e:eb:0b:ef:5f:23:bd:59:
e9:96:bb:f1:b2:a4:c5:50:0e:3c:a6:8e:f2:eb:84:
91:5d:f0:6f:b1:aa:65:bb:e4:d3:16:54:c1:3f:4c:
47:da:95:27:fd:02:8e:0e:db:c4:05:d6:0f:c5:af:
85:96:57:14:fe:1f:9a:4a:01:98:83:c2:b2:98:df:
32:45:5e:89:d1:23:b9:73:e0:3b:b3:0b:62:4d:dc:
fd:18:f1:65:dc:cb:fa:2a:89:fa:32:b2:4b:2b:8c:
a8:12:4f:7c:6f:8e:92:1c:b1:25:cc:aa:6c:b1:3f:
63:06:e5:0c:d4:64:41:3f:e2:b4:05:00:a7:f9:1d:
19:9b:63:2d:6f:96:df:33:c8:53:5b:08:7a:c9:fe:
23:a0:7f:5d:ec:17:d6:6a:9e:39:5f:0f:ed:74:2b:
de:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A7:1B:E4:EF:2B:15:7F:73:97:84:27:A6:01:71:C0:03:E4:4A:7C
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Zqcb5O8rFX9zl4QnpgFxwAPkSnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.104.0/21
5.199.128.0/20
37.157.248.0/21
46.20.32.0/20
46.228.192.0/20
62.141.32.0/20
78.31.64.0/21
80.82.208.0/20
81.30.144.0/20
83.136.80.0/21
85.14.192.0/18
85.114.128.0/19
89.163.128.0/17
91.194.84.0/24
91.212.153.0/24
91.212.159.0/24
91.212.163.0/24
93.186.192.0/20
146.0.32.0/20
152.89.92.0/22
185.15.244.0/22
185.145.196.0/22
185.219.208.0/22
193.111.198.0/23
194.107.129.0/24
195.93.242.0/23
213.202.192.0/18
217.79.176.0/20
IPv6:
2001:4ba0::/31
2001:4ba3::-2001:4ba4:ffff:ffff:ffff:ffff:ffff:ffff
2001:4ba6::/32
2a00:c320::/32
2a01:480::/32
2a0a:db80:1000::-2a0a:db80:5fff:ffff:ffff:ffff:ffff:ffff
2a0a:db80:8000::/36
2a0a:db80:c000::/36
2a0c:6b00::/32
Signature Algorithm: sha256WithRSAEncryption
d2:1d:f6:39:82:6d:a0:44:ba:60:11:9e:82:d6:b0:6c:28:ec:
69:15:15:bf:d3:28:ba:df:c6:01:87:16:ae:7a:cc:e7:6d:e3:
1a:60:13:b0:ba:d8:ba:8c:f9:1c:0b:01:f2:48:e8:97:a6:a2:
ee:10:7e:c0:e6:89:66:4a:28:7e:01:6e:f6:ff:8d:95:76:de:
5c:ac:a3:e8:3e:15:63:0a:be:94:ca:16:22:3c:e6:87:5b:d2:
cd:29:f0:d4:82:d9:8f:92:85:83:64:22:e1:f8:17:9f:07:b6:
86:13:96:da:86:bc:66:67:ed:3f:eb:6a:8b:a2:cf:1b:75:11:
eb:ad:c4:a9:0f:9b:67:f9:ac:56:30:92:80:c9:d0:4f:b2:43:
4b:8b:52:2f:bb:eb:00:46:59:06:41:3c:54:8a:35:b6:c2:46:
d6:d6:50:e6:e3:b5:97:d7:0e:a7:22:4b:6c:5e:28:81:70:b7:
0e:a3:5d:61:13:7d:ba:f5:01:94:f0:50:5e:56:30:0b:c8:3c:
29:46:70:1c:ed:2e:d3:74:24:f4:c7:d2:06:45:56:cb:3d:88:
35:72:ea:ba:38:e0:d9:b8:b8:3c:58:e1:26:96:f8:a5:d8:9c:
1a:29:2b:6b:4e:0c:57:5b:eb:6a:d1:ee:a5:e5:d7:95:c8:71:
99:6e:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:23 2026 by rpki-client