Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/qhoiEzUcdaZeHfMnFdw9HsYdahQ.roa
File: qhoiEzUcdaZeHfMnFdw9HsYdahQ.roa (raw, json)
Hash identifier: Amk/f4V1XB3k7IbYBiz5rStxLVOKTf6Hg+sFlYshO9I=
Subject key identifier: AA:1A:22:13:35:1C:75:A6:5E:1D:F3:27:15:DC:3D:1E:C6:1D:6A:14
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 01A01E22A1956194DE40C721DE78A78421D6
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/qhoiEzUcdaZeHfMnFdw9HsYdahQ.roa
Signing time: Thu 20 Aug 2026 07:46:21 +0000
ROA not before: Thu 20 Aug 2026 07:46:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25441
IP address blocks: 62.231.32.0/19 maxlen: 19
78.135.128.0/17 maxlen: 17
78.135.208.0/21 maxlen: 21
78.135.216.0/21 maxlen: 21
78.135.224.0/21 maxlen: 21
78.135.232.0/21 maxlen: 21
78.135.240.0/21 maxlen: 21
78.135.248.0/21 maxlen: 21
83.141.64.0/18 maxlen: 18
85.134.128.0/17 maxlen: 17
85.134.128.0/21 maxlen: 21
85.134.136.0/21 maxlen: 21
85.134.144.0/21 maxlen: 21
85.134.152.0/21 maxlen: 21
85.134.160.0/21 maxlen: 21
85.134.168.0/21 maxlen: 21
85.134.176.0/21 maxlen: 21
85.134.184.0/21 maxlen: 21
85.134.192.0/21 maxlen: 21
85.134.200.0/21 maxlen: 21
85.134.208.0/21 maxlen: 21
85.134.216.0/21 maxlen: 21
85.134.224.0/21 maxlen: 21
85.134.232.0/21 maxlen: 21
85.134.240.0/21 maxlen: 21
85.134.248.0/21 maxlen: 21
87.192.64.0/20 maxlen: 20
87.192.82.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.232.0.0/19 maxlen: 19
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.225.0/24 maxlen: 24
87.232.228.0/22 maxlen: 22
89.124.0.0/24 maxlen: 24
89.124.245.0/24 maxlen: 24
89.127.0.0/17 maxlen: 17
89.127.248.0/22 maxlen: 22
89.127.254.0/23 maxlen: 23
185.247.52.0/22 maxlen: 22
2001:4d68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:22:a1:95:61:94:de:40:c7:21:de:78:a7:84:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Aug 20 07:46:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa1a2213351c75a65e1df32715dc3d1ec61d6a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:58:fe:a3:dd:01:37:6a:e7:1f:40:c2:28:
48:2e:0d:66:70:79:da:f9:1f:64:20:03:90:66:24:
e2:1d:92:7e:c3:be:fa:18:6a:56:81:f3:6f:59:e6:
5b:54:12:ee:c8:3e:d6:c9:d1:85:8b:b7:c3:73:57:
ed:ce:b4:0f:cf:41:a2:0b:f7:52:4c:6d:be:32:9b:
46:82:37:cf:c0:e0:6d:6c:07:c9:ea:14:6d:b8:b8:
89:0b:ed:23:65:69:ef:8c:2f:4c:84:a6:b0:8a:75:
20:6e:3a:38:f8:0f:80:a4:ca:f3:4a:67:36:8d:53:
43:98:23:18:9b:3c:ca:00:bd:18:35:bd:31:18:bc:
b1:b1:6a:b8:5f:a6:41:b9:dc:d8:9b:06:55:c6:d2:
07:78:2f:7f:10:33:bc:67:8b:aa:52:72:16:a4:b4:
f1:c1:d8:7a:85:20:24:fd:39:40:2d:b4:3d:26:5e:
2d:b1:b9:d1:29:ec:f7:e1:1f:ba:93:4f:d9:1c:ad:
bd:62:6c:b5:47:16:30:86:16:c4:9c:e4:10:73:89:
12:35:a7:ac:72:02:a4:65:b6:bc:d5:a4:48:04:5b:
70:e4:d8:51:8e:7b:86:66:8d:6b:12:58:70:f3:3a:
b8:d5:cc:02:aa:87:2b:8d:18:84:d9:2c:d6:0f:a5:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:22:13:35:1C:75:A6:5E:1D:F3:27:15:DC:3D:1E:C6:1D:6A:14
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/qhoiEzUcdaZeHfMnFdw9HsYdahQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.32.0/19
78.135.128.0/17
83.141.64.0/18
85.134.128.0/17
87.192.64.0/20
87.192.82.0-87.192.87.255
87.192.216.0/22
87.192.222.0/23
87.232.0.0/19
87.232.192.0/24
87.232.194.0-87.232.199.255
87.232.225.0/24
87.232.228.0/22
89.124.0.0/24
89.124.245.0/24
89.127.0.0/17
89.127.248.0/22
89.127.254.0/23
185.247.52.0/22
IPv6:
2001:4d68::/32
Signature Algorithm: sha256WithRSAEncryption
1a:da:41:20:7c:6d:4c:1e:f6:a3:72:6e:a0:95:4a:07:a4:0b:
4b:ce:3e:0b:c6:f3:ef:9c:c3:fe:06:f4:f8:f6:c0:51:b9:1c:
85:e8:ac:d6:63:38:ae:19:76:d4:76:72:be:1a:d1:78:11:34:
b6:8d:8a:6b:5c:e9:93:57:c2:66:ab:ba:58:54:59:78:44:a3:
cc:ce:64:3e:29:d4:ef:ee:46:10:be:1f:ce:05:cd:41:28:89:
a5:67:3a:ec:d8:43:81:dc:c3:85:82:d6:64:fa:84:3d:fd:1b:
7b:f2:76:f6:67:76:e5:dd:c8:ac:c7:58:fc:3c:6f:01:2a:b0:
1c:a2:e8:2b:2c:d7:b4:d8:91:7b:37:0d:f7:9d:93:55:70:7a:
02:43:86:69:3d:cc:bd:e8:d1:d7:7f:67:f2:89:ed:76:eb:3e:
e3:c6:03:c0:7d:6f:86:52:ac:8f:d8:0e:cd:6e:30:13:7e:e8:
a4:67:ab:53:ad:0e:8a:80:f6:9b:73:7e:85:bf:1c:07:c6:37:
ca:50:b9:2d:b7:49:50:6d:98:43:95:19:1d:19:08:08:11:1b:
5b:aa:15:d8:0d:e1:22:a8:02:1e:96:31:65:ab:79:25:d1:41:
1f:2c:34:eb:dc:d2:8e:6a:58:f8:59:02:01:81:29:ea:8c:6a:
82:ba:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:16:08 2026 by rpki-client