Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/QlpFZfLz1Y4DlrHdUhzjCaGVsGA.roa
File: QlpFZfLz1Y4DlrHdUhzjCaGVsGA.roa (raw, json)
Hash identifier: gUEpTIDwhLoGCia5nrrt2yolqAa+IzFI1lHWvsOT9xI=
Subject key identifier: 42:5A:45:65:F2:F3:D5:8E:03:96:B1:DD:52:1C:E3:09:A1:95:B0:60
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 019E4A9BFAB29A8EFE3F48D51A72171D417A
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/QlpFZfLz1Y4DlrHdUhzjCaGVsGA.roa
Signing time: Thu 21 May 2026 12:56:36 +0000
ROA not before: Thu 21 May 2026 12:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47654
IP address blocks: 91.204.240.0/24 maxlen: 24
91.204.241.0/24 maxlen: 24
91.204.242.0/24 maxlen: 24
91.204.243.0/24 maxlen: 24
176.115.160.0/24 maxlen: 24
176.115.161.0/24 maxlen: 24
176.115.162.0/24 maxlen: 24
176.115.163.0/24 maxlen: 24
176.115.164.0/24 maxlen: 24
176.115.165.0/24 maxlen: 24
176.115.166.0/24 maxlen: 24
176.115.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:9b:fa:b2:9a:8e:fe:3f:48:d5:1a:72:17:1d:41:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: May 21 12:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=425a4565f2f3d58e0396b1dd521ce309a195b060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:dc:e5:33:5d:ac:76:0a:14:55:7d:66:50:
e7:22:a5:7a:f5:c5:88:03:77:79:78:1b:0d:b6:e5:
58:75:18:ea:8d:04:fd:65:c3:b6:60:32:08:45:dc:
ea:2a:47:a0:8b:37:9b:d0:01:a4:18:50:2a:8f:a0:
4d:99:b5:45:79:c9:3f:85:14:95:16:9c:3f:7f:11:
34:c2:e7:b8:2e:73:15:23:94:e7:dd:c3:a7:ad:4f:
45:e2:9a:41:9e:d8:1a:56:eb:25:b5:eb:5a:37:09:
08:19:87:96:2c:8f:29:8c:dd:43:26:83:7a:f0:7f:
bd:ca:4d:a3:98:d5:be:50:6b:16:bd:a5:aa:8f:5e:
2d:66:02:4a:fd:60:34:ca:65:2a:3e:2e:87:c7:f1:
9a:83:a7:73:c8:2d:ed:1e:54:eb:e6:47:a1:54:cf:
b1:75:c5:b5:4f:51:ee:00:65:f6:7e:ec:ff:b5:f1:
51:ab:a1:0a:7e:8e:cc:ba:16:12:ba:c8:45:e0:58:
18:20:55:91:7c:87:39:ff:2a:a3:79:13:d1:f1:7a:
f9:bb:0c:f1:00:9b:a2:a8:35:cc:7d:b0:89:97:3d:
ba:3c:44:30:d2:9a:a1:94:0f:0c:1f:dd:c1:48:2b:
13:41:b1:a0:33:97:41:6b:c4:b3:c3:0e:1e:98:52:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5A:45:65:F2:F3:D5:8E:03:96:B1:DD:52:1C:E3:09:A1:95:B0:60
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/QlpFZfLz1Y4DlrHdUhzjCaGVsGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.240.0/22
176.115.160.0/21
Signature Algorithm: sha256WithRSAEncryption
42:61:75:47:b4:39:de:85:32:70:3f:5f:cf:3e:43:63:18:2e:
11:50:b5:e9:bd:07:d3:0e:05:66:8b:b7:4a:0b:71:cc:e8:32:
4b:58:61:35:6e:c6:f5:44:62:19:04:b8:75:b7:49:39:19:d1:
c8:ae:d3:d7:37:19:1a:5c:20:c7:d9:f3:7e:67:ba:7e:f0:54:
e6:11:e1:3f:98:3d:dd:45:8e:ab:33:6b:a9:3b:9f:ea:0c:3c:
cd:e3:6e:53:ae:b6:a8:62:a0:dc:95:6d:8a:57:a8:e0:2c:ee:
7f:e1:ec:6f:83:e0:1e:b4:ff:df:f1:ca:16:8a:3a:47:65:2a:
c9:bd:68:07:75:58:34:aa:2d:4a:83:04:ce:49:9b:7c:35:41:
b4:a3:8d:68:2d:4f:eb:ed:df:72:fe:a7:c2:af:19:40:64:0c:
26:95:cd:2f:a3:e1:64:2b:b2:c2:01:66:aa:d0:b3:ca:68:b7:
04:bb:70:14:93:58:36:8d:0c:de:b6:5d:29:b4:f4:af:11:4c:
60:4e:dc:01:54:93:c0:4d:8b:54:3a:51:25:96:9a:87:43:5e:
e7:5e:c7:ac:4f:57:bd:91:82:92:a8:b4:c3:30:54:7e:6d:5b:
93:d3:90:1d:7c:57:39:98:ba:eb:cb:36:98:2d:e9:3b:16:09:
be:41:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:26:54 2026 by rpki-client