Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/QxYB96hW7JeiMlNYWI5YVU3Mlfk.roa
File: QxYB96hW7JeiMlNYWI5YVU3Mlfk.roa (raw, json)
Hash identifier: J9Ep8+ZcHZRXqSI+5YN748t653NofsfWjYhAWlrp/eQ=
Subject key identifier: 43:16:01:F7:A8:56:EC:97:A2:32:53:58:58:8E:58:55:4D:CC:95:F9
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 01A062894CE5950B55ADFFC1050796CD29F2
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/QxYB96hW7JeiMlNYWI5YVU3Mlfk.roa
Signing time: Wed 02 Sep 2026 14:32:40 +0000
ROA not before: Wed 02 Sep 2026 14:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 2.152.78.0/24 maxlen: 24
45.85.120.0/24 maxlen: 24
45.85.122.0/24 maxlen: 24
45.85.123.0/24 maxlen: 24
87.192.81.0/24 maxlen: 24
109.205.189.0/24 maxlen: 24
146.19.131.0/24 maxlen: 24
178.17.247.0/24 maxlen: 24
178.212.137.0/24 maxlen: 24
193.246.161.0/24 maxlen: 24
194.63.144.0/24 maxlen: 24
194.147.218.0/24 maxlen: 24
194.238.77.0/24 maxlen: 24
213.218.163.0/24 maxlen: 24
213.239.152.0/24 maxlen: 24
213.239.153.0/24 maxlen: 24
217.180.23.0/24 maxlen: 24
2a11:6a00::/48 maxlen: 48
2a12:2780::/48 maxlen: 48
2a12:8200::/48 maxlen: 48
2a12:ab00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:89:4c:e5:95:0b:55:ad:ff:c1:05:07:96:cd:29:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Sep 2 14:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=431601f7a856ec97a2325358588e58554dcc95f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:33:e6:9e:17:aa:92:d3:e0:76:2a:b5:e2:
c4:05:35:36:b5:4c:b6:2d:1c:2c:93:61:fa:eb:bc:
f8:01:7c:dc:43:3c:a2:e2:43:f1:1c:2c:18:cc:fc:
cb:d9:2b:62:d5:34:bb:28:3a:27:e2:ff:8c:55:b9:
9f:89:74:d7:5b:fb:75:f8:9c:af:44:b8:4e:eb:91:
58:82:42:60:33:b2:68:d6:e3:b0:de:44:72:38:c9:
3e:1d:12:ba:13:8d:fb:bf:9e:98:be:fb:68:e0:a8:
36:91:86:f9:02:c7:d7:e7:62:39:2f:f5:3e:af:25:
8b:b5:62:19:e0:a5:9d:35:d6:39:13:82:0f:15:7b:
a5:9c:6f:0d:fe:1b:59:a1:3a:34:29:70:3b:11:67:
26:4f:5e:e0:bf:c1:fb:0a:4d:6a:ff:b4:3d:db:f4:
28:2c:78:1b:0f:a4:fc:31:99:6a:20:23:77:cb:1b:
8d:86:c2:97:7c:82:a1:a3:fb:8e:06:73:22:99:09:
63:32:6f:ec:ce:35:52:14:49:f8:7c:d9:ae:3a:d0:
e5:92:a4:3f:88:5c:04:c1:c1:1c:2e:b7:c9:3d:4c:
cd:5c:ef:26:3a:03:8a:24:bb:e3:de:97:68:39:9a:
77:46:11:44:0d:96:6c:ee:4b:14:67:52:ed:30:87:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:16:01:F7:A8:56:EC:97:A2:32:53:58:58:8E:58:55:4D:CC:95:F9
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/QxYB96hW7JeiMlNYWI5YVU3Mlfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.78.0/24
45.85.120.0/24
45.85.122.0/23
87.192.81.0/24
109.205.189.0/24
146.19.131.0/24
178.17.247.0/24
178.212.137.0/24
193.246.161.0/24
194.63.144.0/24
194.147.218.0/24
194.238.77.0/24
213.218.163.0/24
213.239.152.0/23
217.180.23.0/24
IPv6:
2a11:6a00::/48
2a12:2780::/48
2a12:8200::/48
2a12:ab00::/48
Signature Algorithm: sha256WithRSAEncryption
60:6e:fa:1b:16:d3:93:b3:48:ea:30:e3:25:4a:40:60:66:3e:
a7:10:36:6e:d3:a0:72:ce:3b:41:61:45:33:82:00:d4:bf:4b:
e9:3a:7e:be:c2:2b:4b:22:e5:65:9b:78:1d:d6:43:7d:9f:dc:
b4:e3:64:2d:29:11:eb:37:9f:a5:13:44:8f:1a:92:d5:3d:64:
73:0f:7b:ff:1d:8e:18:ae:16:59:1e:62:1f:10:46:35:3a:cb:
f8:91:42:c9:19:b3:71:e0:09:a2:12:20:68:e4:4b:93:61:e4:
36:a3:f1:31:21:c9:6c:fc:fa:5b:41:20:ab:35:0f:38:04:d4:
c9:be:9e:6c:6b:03:37:28:8a:30:d5:8d:9b:0a:b3:28:13:27:
b7:1f:18:d6:5f:12:15:25:43:56:63:e8:17:37:01:29:41:34:
87:38:5f:14:b3:af:1d:a5:0c:82:b8:d7:26:69:73:10:8a:97:
ad:2b:bb:9b:72:b6:13:45:16:11:02:60:7d:a5:4b:5b:d8:a0:
1a:4b:f4:c8:13:4c:c7:a7:c7:38:71:46:d8:40:f8:6f:88:c7:
a4:b2:38:17:66:b5:c7:0c:63:95:4e:f6:d9:b1:2a:35:cd:54:
27:63:ba:53:94:6e:ce:c9:39:5f:22:65:85:f6:53:98:fc:32:
0f:21:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:03:16 2026 by rpki-client