Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/DQYQuqb5lo3rENoxL1OM36btAFY.roa
File: DQYQuqb5lo3rENoxL1OM36btAFY.roa (raw, json)
Hash identifier: GJffNh03uAAbZAp2M7lKSq3tULSYELpe18P3FMf+yB0=
Subject key identifier: 0D:06:10:BA:A6:F9:96:8D:EB:10:DA:31:2F:53:8C:DF:A6:ED:00:56
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 01A133EF3BB7E298631FC71E95E443F1A63C
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/DQYQuqb5lo3rENoxL1OM36btAFY.roa
Signing time: Tue 13 Oct 2026 06:24:38 +0000
ROA not before: Tue 13 Oct 2026 06:24:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203771
IP address blocks: 176.53.22.0/24 maxlen: 24
176.53.35.0/24 maxlen: 24
176.53.36.0/24 maxlen: 24
176.53.38.0/24 maxlen: 24
213.128.69.0/24 maxlen: 24
213.128.78.0/24 maxlen: 24
213.128.80.0/24 maxlen: 24
213.128.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:ef:3b:b7:e2:98:63:1f:c7:1e:95:e4:43:f1:a6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Oct 13 06:24:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d0610baa6f9968deb10da312f538cdfa6ed0056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:b1:dc:b8:cb:c5:30:0b:b4:ef:5b:a5:f8:
b5:6c:29:cf:d6:f6:e2:17:c8:1c:6c:11:a0:d5:e1:
ba:5a:a5:1c:7d:67:f9:ba:c2:7c:17:fc:c2:fc:75:
25:b7:0c:03:a1:a7:50:76:0e:70:2c:fc:dd:d9:05:
9d:f4:c1:e5:b8:58:7d:27:97:ba:6e:86:ba:47:11:
2f:16:d5:25:1f:4c:05:8e:05:8c:cc:50:5f:f4:ef:
e9:66:65:37:66:e6:dc:5c:62:6f:02:07:e4:13:b8:
b2:30:64:f4:18:b2:9d:24:b6:ca:be:02:a8:89:99:
fc:60:74:96:f7:24:85:ba:35:47:73:b0:25:17:1a:
c6:0a:ce:45:7e:60:4e:76:3e:91:6d:b1:eb:57:55:
be:a4:6b:32:49:5d:aa:9b:20:72:ed:41:fe:42:38:
b6:7a:fb:4e:d1:7a:e9:20:35:20:57:10:70:79:0c:
62:8d:b0:12:aa:fd:1e:d2:16:96:c2:08:07:06:73:
ad:2a:b4:f8:4f:de:50:98:04:bc:39:55:c5:ce:c8:
cb:4c:11:1c:6f:63:23:75:58:2a:e1:05:16:07:bb:
57:d6:07:5f:63:4b:66:4b:53:e0:22:9a:7c:f5:86:
11:5d:b9:b3:43:c0:c3:e0:7b:b1:af:4f:d7:27:ec:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:06:10:BA:A6:F9:96:8D:EB:10:DA:31:2F:53:8C:DF:A6:ED:00:56
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/DQYQuqb5lo3rENoxL1OM36btAFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.22.0/24
176.53.35.0-176.53.36.255
176.53.38.0/24
213.128.69.0/24
213.128.78.0/24
213.128.80.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:8d:1a:8a:fc:6a:ee:bf:bf:b1:03:36:37:5b:3a:e6:23:7f:
a0:b3:4e:6a:59:b4:e0:01:9d:a2:61:98:0f:44:ef:37:de:31:
9c:0c:aa:39:09:fc:57:91:bf:ec:f4:72:ad:37:86:d6:ff:1b:
c9:65:56:27:58:2a:bb:d2:ca:65:b1:4f:67:0e:82:f2:a2:50:
65:3a:f6:5a:02:47:5d:b9:61:ec:04:cb:7b:ee:88:e9:ac:8e:
31:fe:b5:7e:90:2d:17:03:35:49:a6:d3:59:e3:18:f7:df:7c:
3e:0b:16:e7:6e:8a:7a:7e:9f:8f:92:52:c1:bd:39:1b:27:16:
cb:d7:06:20:3f:a8:64:ed:de:92:7d:2c:98:8d:3b:ef:08:66:
f5:6d:6e:86:89:fc:76:05:87:7e:c6:6a:f3:0f:fe:79:e0:cf:
30:44:81:7a:cd:ba:a5:51:1a:82:8b:fe:63:0f:e8:a0:ba:74:
5e:41:8c:80:f1:b5:01:b7:cc:fd:5b:f2:cb:2e:a0:4e:03:c6:
39:e9:29:9e:ad:c3:37:d8:e7:92:cb:1b:cc:bb:f7:a4:96:c6:
b3:8c:44:15:03:a3:7b:d7:e0:f0:89:10:55:b1:74:56:59:05:
25:cf:be:18:2c:dc:3d:53:b4:95:91:58:d3:4d:97:48:49:72:
8d:9a:9c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:20 2026 by rpki-client