Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/aQNWBjr79UQ0ubOPKyXrB3Gw3Hg.roa
File: aQNWBjr79UQ0ubOPKyXrB3Gw3Hg.roa (raw, json)
Hash identifier: UeXafIrFX15Osl1B1Dx2yAhgUUQN6Ixy5OyhGDJhWsE=
Subject key identifier: 69:03:56:06:3A:FB:F5:44:34:B9:B3:8F:2B:25:EB:07:71:B0:DC:78
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A19C274F298CFD569B8AF8D64C864BE955
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/aQNWBjr79UQ0ubOPKyXrB3Gw3Hg.roa
Signing time: Mon 02 Nov 2026 12:06:24 +0000
ROA not before: Mon 02 Nov 2026 12:06:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 81.188.14.0/23 maxlen: 23
81.188.16.0/20 maxlen: 24
81.188.80.0/21 maxlen: 21
81.188.90.0/23 maxlen: 23
81.188.94.0/23 maxlen: 23
81.188.114.0/23 maxlen: 23
81.188.116.0/22 maxlen: 22
81.188.124.0/23 maxlen: 23
81.188.162.0/23 maxlen: 23
81.188.164.0/23 maxlen: 23
81.188.174.0/23 maxlen: 23
81.188.192.0/18 maxlen: 24
212.100.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:27:4f:29:8c:fd:56:9b:8a:f8:d6:4c:86:4b:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Nov 2 12:06:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=690356063afbf54434b9b38f2b25eb0771b0dc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:34:63:2d:e5:e6:48:7b:99:d5:3a:5f:a7:14:
c9:a6:d5:a0:5b:07:66:94:da:d2:ae:79:b2:b6:e0:
91:a5:b5:9e:5c:88:f2:71:c8:80:58:65:fa:89:50:
da:8a:8b:42:32:4b:f8:53:c4:a1:27:d1:91:2f:e3:
57:dc:a4:44:f6:68:74:52:d0:02:50:24:fb:60:1d:
2d:9e:b6:6e:7d:82:00:53:5e:17:b8:24:4d:72:24:
6b:6f:36:2f:53:5c:88:d1:3e:32:69:e8:97:6d:76:
2f:3d:b4:fe:ea:74:c7:2d:98:89:31:cf:a5:2a:8e:
35:b8:c4:98:c1:89:49:67:5a:59:eb:bd:36:cf:e8:
ca:92:cd:43:c8:d2:f7:70:30:57:de:30:f5:70:c7:
f3:ae:28:e1:9f:8a:62:ad:f7:38:16:bf:2a:f6:c8:
5c:6d:f2:cf:6b:39:70:d8:e6:61:87:5b:c5:80:de:
df:7e:a1:e9:7f:3c:89:57:4b:45:e7:20:25:78:70:
86:cf:7a:6c:fc:11:2c:33:50:5a:f8:62:97:3c:af:
71:54:21:0a:3d:a9:4b:57:2f:33:62:d8:6f:6d:aa:
04:5b:99:4e:19:16:2c:12:3a:3c:69:1b:dd:c0:e5:
cc:43:66:f3:99:a8:07:91:58:5e:62:4b:9b:60:21:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:56:06:3A:FB:F5:44:34:B9:B3:8F:2B:25:EB:07:71:B0:DC:78
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/aQNWBjr79UQ0ubOPKyXrB3Gw3Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.188.14.0-81.188.31.255
81.188.80.0/21
81.188.90.0/23
81.188.94.0/23
81.188.114.0-81.188.119.255
81.188.124.0/23
81.188.162.0-81.188.165.255
81.188.174.0/23
81.188.192.0/18
212.100.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fa:74:2a:bd:a6:5b:d6:c7:01:af:ce:6e:23:bf:c8:b6:09:
da:c4:16:12:e8:87:96:ac:a9:b1:58:bc:8c:cb:0d:53:19:2e:
88:05:fa:e5:82:43:2f:b4:76:c7:ce:fe:8b:c1:61:ee:d2:8f:
45:04:e1:b5:b6:99:06:14:75:68:ca:f9:66:ef:f4:7c:74:d0:
65:ff:2e:7c:cc:d4:00:65:78:2e:f5:5b:7d:db:fe:31:85:b8:
25:dd:c8:68:5b:74:f0:96:e0:d9:71:ed:51:f4:f9:8d:a2:eb:
f1:de:66:22:e3:d7:f8:b5:c6:71:e4:48:3f:7c:39:cf:ef:49:
00:90:40:43:7d:db:d7:8d:d7:9e:7a:b0:5e:ce:9c:a9:1c:85:
ad:03:0b:b2:9a:8a:83:54:26:29:26:33:88:ff:18:18:a7:73:
59:13:55:41:7f:e7:cb:c3:67:fd:b8:cb:8f:a2:f9:0f:1f:be:
67:b5:73:c3:2d:3b:a5:25:8e:d9:29:68:c3:f8:bd:9f:f2:70:
1c:9d:20:50:61:ac:18:51:d9:af:e1:e0:38:4c:7e:51:08:a6:
0f:20:a2:ba:be:4e:49:8f:28:1b:7c:4f:40:d9:97:17:a1:58:
f4:1d:de:24:60:1c:19:a0:81:44:a0:03:82:14:d5:b9:5f:05:
0c:34:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:24:53 2026 by rpki-client