Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa
File: qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa (raw, json)
Hash identifier: /8G6T8+RIvDyAMYfFzoKNpDCtHywa0CfF5MXcl8AVF4=
Subject key identifier: A9:C0:4B:69:FE:87:E4:7B:F7:D1:E5:CC:6B:B2:1B:B0:8E:CA:D8:4A
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019EB031264527EE665436FEB344B8A4DC7F
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa
Signing time: Wed 10 Jun 2026 06:21:11 +0000
ROA not before: Wed 10 Jun 2026 06:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31586
IP address blocks: 80.84.224.0/19 maxlen: 24
81.4.64.0/20 maxlen: 24
81.4.80.0/22 maxlen: 24
81.4.88.0/21 maxlen: 24
81.4.96.0/22 maxlen: 24
81.4.112.0/21 maxlen: 24
81.21.136.0/24 maxlen: 24
83.96.128.0/18 maxlen: 24
83.96.192.0/21 maxlen: 24
83.96.208.0/22 maxlen: 24
83.96.224.0/21 maxlen: 24
83.96.232.0/22 maxlen: 24
83.96.248.0/22 maxlen: 24
85.158.248.0/22 maxlen: 24
85.158.252.0/23 maxlen: 24
91.142.252.0/23 maxlen: 24
91.205.32.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.95.68.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
217.21.241.0/24 maxlen: 24
2001:828::/32 maxlen: 48
2a05:2500::/32 maxlen: 48
2a05:a282::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:31:26:45:27:ee:66:54:36:fe:b3:44:b8:a4:dc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jun 10 06:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9c04b69fe87e47bf7d1e5cc6bb21bb08ecad84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:a8:f9:87:a5:7d:8e:90:12:9e:b4:40:03:
0d:31:02:08:83:53:73:8b:a4:28:44:9a:38:01:84:
c2:3f:be:ef:4a:3a:14:70:53:2c:6c:ad:7f:da:5e:
c1:50:78:d0:d2:ec:bd:91:13:25:9c:d4:b6:bc:ec:
ac:ef:cf:32:fb:ae:7f:27:de:b3:82:78:24:bc:9c:
ce:5d:a2:18:9a:0e:92:fa:07:64:40:26:5f:70:a4:
11:a9:02:3f:24:1b:10:37:8c:0e:d8:75:6d:01:f5:
e2:c9:ec:7f:85:7e:f4:fb:97:79:fc:0f:bb:a8:a7:
d0:ac:60:1c:29:88:21:32:98:a8:25:23:d6:69:a0:
d9:2e:18:e3:95:18:ca:e0:91:1a:dd:4a:9b:15:7d:
b8:c8:bc:27:9b:bf:e1:64:08:57:9e:9a:ce:11:76:
ea:a8:7f:22:30:29:79:7f:e1:cf:cc:d5:4f:8e:68:
22:53:85:2c:52:2c:b5:fe:c2:d3:ed:dc:27:af:1f:
4f:a6:08:81:6d:05:80:01:8b:02:f2:a6:dc:73:a4:
86:98:dc:c6:10:ed:0e:4b:39:da:0e:d4:2f:05:2d:
92:3a:f2:3b:85:e5:ad:1c:1a:ff:ae:1d:e8:2a:f7:
f9:a2:16:0b:d5:48:3a:50:1d:8e:60:b7:53:8f:9f:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C0:4B:69:FE:87:E4:7B:F7:D1:E5:CC:6B:B2:1B:B0:8E:CA:D8:4A
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.224.0/19
81.4.64.0-81.4.83.255
81.4.88.0-81.4.99.255
81.4.112.0/21
81.21.136.0/24
83.96.128.0-83.96.199.255
83.96.208.0/22
83.96.224.0-83.96.235.255
83.96.248.0/22
85.158.248.0-85.158.253.255
91.142.252.0/23
91.205.32.0/22
141.255.180.0/22
185.69.232.0/22
185.84.72.0/22
185.95.68.0/22
185.105.204.0/22
185.105.216.0/22
193.93.172.0/22
217.21.241.0/24
IPv6:
2001:828::/32
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
00:2e:2b:b6:0f:be:9c:68:5f:b8:79:9a:45:43:a5:d5:c5:a0:
54:84:03:f5:6c:22:7d:c2:a2:56:31:4c:8c:72:a2:1f:e5:48:
69:2c:49:14:70:9d:27:61:79:56:a6:c8:6e:11:50:0b:32:54:
07:12:7c:a7:15:76:31:d9:48:88:f8:92:a5:84:45:dc:59:ea:
91:6e:1c:a8:50:57:22:e3:13:44:9e:5b:7e:38:6b:94:83:3c:
41:30:69:75:5d:f8:0e:51:61:b6:2f:8e:9e:c9:15:c1:28:ae:
38:c8:e5:f5:d2:e2:bb:1b:25:07:46:ee:04:26:90:b8:2f:0f:
30:01:72:67:59:9e:95:17:ea:21:9c:81:ca:a1:2b:a2:93:3f:
05:9b:3e:aa:b4:c2:3c:c9:58:76:4b:3f:a4:03:24:9c:cc:56:
01:93:1b:3e:ef:93:8d:c6:a7:0a:0d:fa:4d:17:2b:94:35:cd:
be:78:11:cd:80:0d:34:4a:6c:70:d9:21:9d:12:8e:db:c3:c8:
e3:d0:2d:0d:6f:c9:0c:48:7a:9e:26:ba:e6:e0:20:ee:d2:9d:
63:6f:4b:ea:f9:e0:de:ae:b7:41:a6:99:1c:90:2f:8f:69:c0:
0d:60:1b:23:c2:4d:68:c0:37:bb:df:49:94:0f:81:34:55:93:
bc:ee:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:23:32 2026 by rpki-client