Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1QXq3wptEXYKtJfpBdoG30Uixzc.roa
File: 1QXq3wptEXYKtJfpBdoG30Uixzc.roa (raw, json)
Hash identifier: 4uj/qKTgS2pFCBawbM8js8rOHSvMxuNObufut2vFACo=
Subject key identifier: D5:05:EA:DF:0A:6D:11:76:0A:B4:97:E9:05:DA:06:DF:45:22:C7:37
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019E736BD4D9A3AC37CA5D19424A722E9A40
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1QXq3wptEXYKtJfpBdoG30Uixzc.roa
Signing time: Fri 29 May 2026 11:08:27 +0000
ROA not before: Fri 29 May 2026 11:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.84.216.0/24 maxlen: 24
45.85.90.0/24 maxlen: 24
45.91.23.0/24 maxlen: 24
45.92.230.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
45.130.143.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
45.157.98.0/24 maxlen: 24
45.157.99.0/24 maxlen: 24
89.251.2.0/24 maxlen: 24
93.185.160.0/24 maxlen: 24
93.185.161.0/24 maxlen: 24
136.144.26.0/24 maxlen: 24
136.144.27.0/24 maxlen: 24
185.227.33.0/24 maxlen: 24
194.5.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:6b:d4:d9:a3:ac:37:ca:5d:19:42:4a:72:2e:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 29 11:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d505eadf0a6d11760ab497e905da06df4522c737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:7b:9f:24:46:e1:e9:85:02:2d:4e:0a:cf:
5d:81:00:37:3c:34:56:23:f9:2a:a9:c4:32:c0:f4:
ad:66:4d:40:7c:c4:50:f7:cd:07:9b:7b:dd:5d:e4:
ec:52:05:f3:79:97:07:fb:92:90:9e:1a:f5:50:a6:
fa:15:56:14:38:29:dd:a4:8a:99:b6:72:81:25:8b:
dd:cd:4d:79:a1:f2:77:51:a4:cd:6f:42:22:9e:8b:
ed:b6:c8:31:29:ea:1a:45:e1:04:2a:4c:08:0c:c6:
03:48:29:e8:ae:44:44:77:1e:31:a7:d7:ed:73:40:
ce:6a:00:61:18:d1:7c:33:8c:5e:de:f9:fe:84:eb:
82:90:a3:c4:21:74:ee:4b:67:61:6b:fa:e2:80:c0:
c0:57:83:f2:a2:52:f4:18:da:66:cc:12:6b:c5:81:
ad:f8:01:f9:8b:57:f3:cf:f3:15:dd:9f:b6:4b:47:
a5:79:c4:55:52:77:8d:98:c4:08:18:e3:5e:3f:32:
61:db:13:29:a4:05:62:50:47:29:ae:ae:f4:02:2e:
03:6c:ed:d4:68:85:b8:9c:19:3c:16:c5:d9:2c:ec:
f1:16:8a:ba:d2:03:04:2a:0d:94:dd:c4:71:53:79:
f1:8a:97:35:e4:41:20:fc:0f:81:0e:a4:d9:88:51:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:05:EA:DF:0A:6D:11:76:0A:B4:97:E9:05:DA:06:DF:45:22:C7:37
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1QXq3wptEXYKtJfpBdoG30Uixzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.85.90.0/24
45.91.23.0/24
45.92.230.0/24
45.95.243.0/24
45.130.143.0/24
45.146.53.0/24
45.148.25.0/24
45.157.98.0/23
89.251.2.0/24
93.185.160.0/23
136.144.26.0/23
185.227.33.0/24
194.5.49.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d4:aa:f5:40:4f:ba:16:ee:36:ae:b4:f9:99:44:d8:11:ce:
21:84:91:7a:0c:e6:ed:36:68:a0:64:86:41:e1:cb:8c:d3:4d:
a1:86:76:e8:d7:18:2e:89:ec:81:31:6c:7b:16:5c:8e:7f:39:
4d:49:c6:46:51:8c:64:11:ec:dc:34:7e:02:d4:5e:54:76:9a:
eb:c5:62:d3:1c:b1:51:89:d7:3e:e5:90:c5:06:15:58:3a:3b:
f5:e2:91:6f:dc:ae:e3:2a:0f:64:a4:77:4f:48:f0:e5:dc:6e:
a7:77:ef:3f:8e:9a:9a:37:eb:68:da:8d:d7:cd:61:41:ae:54:
7a:08:47:d3:6d:5f:fd:52:2e:f4:94:ca:6c:c1:45:f9:af:e1:
fe:5d:83:ee:eb:1a:b3:06:63:a2:a6:d1:48:22:4f:4d:a1:21:
95:79:f9:5c:5f:8e:2b:09:f1:a0:c3:80:da:37:24:ef:32:73:
09:4e:0c:ed:76:12:3c:4b:70:6c:ee:7d:80:6c:93:b0:32:84:
3b:24:90:c3:dd:37:6d:d8:0e:d4:f5:2a:18:30:cd:8d:7c:08:
13:44:8b:79:81:a7:45:65:0d:10:e2:15:60:e4:09:ac:78:23:
f3:f2:13:e5:5e:17:81:b4:24:4d:58:0f:ed:51:4b:02:22:5f:
a7:9c:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:08 2026 by rpki-client