Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/qVLPC3PstDZEvZgqkakUEtqAsHA.roa
File: qVLPC3PstDZEvZgqkakUEtqAsHA.roa (raw, json)
Hash identifier: +hLPHlm3Ny7xnLxmPd298Nt9V3oY8W+76O9qrGlYi0s=
Subject key identifier: A9:52:CF:0B:73:EC:B4:36:44:BD:98:2A:91:A9:14:12:DA:80:B0:70
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 019F26DE7F82AD18449A5CA899A3AE05A282
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/qVLPC3PstDZEvZgqkakUEtqAsHA.roa
Signing time: Fri 03 Jul 2026 07:25:43 +0000
ROA not before: Fri 03 Jul 2026 07:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200851
IP address blocks: 45.11.160.0/22 maxlen: 22
45.11.163.0/24 maxlen: 24
45.66.244.0/22 maxlen: 24
45.66.247.0/24 maxlen: 24
84.38.255.0/24 maxlen: 24
185.93.244.0/22 maxlen: 24
2a04:23c0::/29 maxlen: 48
2a04:23c0::/32 maxlen: 32
2a04:23c1::/32 maxlen: 32
2a04:23c2::/32 maxlen: 32
2a04:23c3::/32 maxlen: 32
2a04:23c4::/32 maxlen: 32
2a04:23c5::/32 maxlen: 32
2a04:23c6::/32 maxlen: 32
2a04:23c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:de:7f:82:ad:18:44:9a:5c:a8:99:a3:ae:05:a2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Jul 3 07:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a952cf0b73ecb43644bd982a91a91412da80b070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:3a:23:a6:06:88:08:72:bb:6f:39:44:15:
e4:c0:70:2e:cf:76:07:1e:dd:44:24:98:28:dc:19:
4f:0d:ad:0f:5d:bc:7a:51:08:4b:67:05:ca:d2:06:
e2:0e:b5:d5:e9:c3:7a:cd:c6:87:c2:f4:f4:77:6d:
6a:43:f2:bf:3d:a9:e7:80:97:58:1a:c0:5d:53:c0:
ec:e3:ad:7e:a2:32:8d:8e:48:8d:00:98:fe:ca:1a:
71:02:8d:ae:54:54:7d:f2:ea:d6:57:c5:e6:65:48:
7b:3c:ba:64:05:b0:0c:5e:39:cc:29:6d:b5:83:9f:
5d:07:40:2c:da:67:c9:94:76:d5:45:a9:69:d4:1e:
68:a1:eb:6d:eb:2a:91:d2:1c:56:cb:f9:e2:41:a1:
d7:f3:57:f8:4f:3c:c8:15:81:0d:1d:11:f0:09:18:
77:0d:88:a7:7c:9f:94:13:4c:28:32:07:de:5b:9a:
51:a7:b3:1a:8b:2e:1f:c4:af:93:a8:7d:13:26:90:
2e:7b:ff:5e:06:bd:82:4a:74:86:62:ab:27:92:31:
e0:0e:53:91:34:2b:cb:48:b7:af:60:5b:5d:72:5e:
b7:7e:5a:91:4f:e5:f2:26:91:0d:0e:ed:a2:d2:1a:
0c:8d:d5:63:34:e7:be:e9:6d:19:6f:89:59:1a:8d:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:52:CF:0B:73:EC:B4:36:44:BD:98:2A:91:A9:14:12:DA:80:B0:70
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/qVLPC3PstDZEvZgqkakUEtqAsHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.160.0/22
45.66.244.0/22
84.38.255.0/24
185.93.244.0/22
IPv6:
2a04:23c0::/29
Signature Algorithm: sha256WithRSAEncryption
22:f6:14:79:ec:6f:30:e1:67:75:e3:b1:d5:34:27:05:3a:3e:
71:91:b8:a9:dc:50:6e:31:c6:8c:03:bc:28:49:10:fe:87:e9:
c5:23:80:a2:01:ac:d8:74:17:b4:8b:b5:fa:03:5c:4c:fe:32:
6b:9b:83:76:bb:48:f4:8f:81:c7:55:e8:d7:38:bc:04:f8:70:
31:7a:72:f5:73:2f:2f:93:99:24:c9:c1:0a:a5:fc:88:21:1a:
59:62:99:e4:8d:b3:87:b6:bf:c4:3f:f9:cc:f9:bd:e1:c1:36:
e1:66:7e:23:fa:ae:b4:26:b7:3e:f4:8b:de:8e:36:61:0c:fd:
a7:c8:bd:10:ec:0f:05:35:21:c0:90:fd:db:eb:65:57:f2:bd:
39:3b:2c:69:7f:5c:f4:3c:ca:a3:66:07:cd:9b:12:19:4e:24:
25:1f:70:03:aa:a8:7a:29:9c:57:87:79:77:b0:2b:fa:d7:f4:
e3:b8:b9:30:e7:76:ff:95:6a:69:48:0f:af:b5:be:ef:bc:a9:
7b:45:13:c9:e3:8e:83:79:f9:8e:47:66:5b:f7:a8:13:35:f6:
f5:4f:69:24:5e:da:66:fc:19:e1:57:b4:99:a0:1e:67:fa:55:
f0:f5:3c:3b:47:2c:e9:09:65:e3:a2:d5:5f:40:7e:92:3b:f2:
53:e1:9b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:59:58 2026 by rpki-client