Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/QZ0Vz_knDzV4SLZZ37IoAbfCYEY.roa
File: QZ0Vz_knDzV4SLZZ37IoAbfCYEY.roa (raw, json)
Hash identifier: 4Y601k3ISSzeCoyqLiqApyXkkDVNgvR2TNaLdJqfwAc=
Subject key identifier: 41:9D:15:CF:F9:27:0F:35:78:48:B6:59:DF:B2:28:01:B7:C2:60:46
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 01A1288DF8557EC792C07477FBDCCB756A68
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/QZ0Vz_knDzV4SLZZ37IoAbfCYEY.roa
Signing time: Sun 11 Oct 2026 01:22:35 +0000
ROA not before: Sun 11 Oct 2026 01:22:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50833
IP address blocks: 45.159.110.0/23 maxlen: 23
45.159.110.0/24 maxlen: 24
45.159.111.0/24 maxlen: 24
91.224.59.0/24 maxlen: 24
146.255.24.0/21 maxlen: 24
193.150.128.0/20 maxlen: 20
193.150.129.0/24 maxlen: 24
193.150.144.0/21 maxlen: 21
2001:7f8:f6::/48 maxlen: 48
2a02:5e80:2::/48 maxlen: 48
2a10:24c0::/29 maxlen: 48
2a10:24c0:272::/48 maxlen: 48
2a10:24c0:6c2::/48 maxlen: 48
2a10:24c0:ad1b::/48 maxlen: 48
2a10:24c0:ada1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:8d:f8:55:7e:c7:92:c0:74:77:fb:dc:cb:75:6a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Oct 11 01:22:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=419d15cff9270f357848b659dfb22801b7c26046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:50:96:2f:f0:49:7c:35:17:7f:1f:f1:ef:4b:
b1:bf:fe:52:59:fb:12:fe:77:2a:69:01:b7:ec:81:
7d:10:bf:4a:94:95:f8:e6:5d:c2:d1:d0:75:ac:8c:
bc:b2:84:b8:15:ee:7d:b2:86:70:42:03:f5:aa:bc:
ec:1e:83:4a:96:b7:9e:c8:1d:6c:f7:cb:64:09:c4:
49:21:ae:6b:9d:57:02:f3:42:d8:0d:ae:77:f9:bd:
0f:72:f0:58:98:fa:ec:18:08:aa:c6:e8:a1:24:ae:
73:37:d0:dc:1b:8a:ae:b4:f4:ef:33:7c:2a:39:16:
0a:c6:fd:ae:31:19:8d:93:40:c7:d7:ec:f7:6a:e9:
6f:4c:86:1d:05:37:43:99:d4:3e:93:39:db:1f:fc:
55:f3:b3:ab:1f:8e:dc:2b:dd:3e:b6:ac:82:a8:6e:
bd:0f:e8:72:af:1a:84:b3:2d:42:14:19:78:b4:2c:
c1:62:c6:b9:43:eb:81:a7:44:d9:9a:b2:71:fc:31:
db:9e:fa:19:55:0e:4c:1d:f6:c7:03:eb:54:2f:f9:
c8:9a:da:d7:59:6f:e9:10:b1:b7:fe:f4:24:94:fa:
41:41:a7:1b:4f:42:44:dd:d7:c8:14:34:97:2e:5f:
35:bc:5d:30:e7:24:36:78:b3:48:1a:95:0e:86:82:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:15:CF:F9:27:0F:35:78:48:B6:59:DF:B2:28:01:B7:C2:60:46
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/QZ0Vz_knDzV4SLZZ37IoAbfCYEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.110.0/23
91.224.59.0/24
146.255.24.0/21
193.150.128.0-193.150.151.255
IPv6:
2001:7f8:f6::/48
2a02:5e80:2::/48
2a10:24c0::/29
Signature Algorithm: sha256WithRSAEncryption
82:b4:e9:bb:65:c0:b1:fe:ce:33:a3:df:18:06:dd:47:13:58:
2d:31:23:d5:3e:fe:6f:0f:f0:2d:66:dd:05:2a:06:dd:bb:51:
0c:0e:a4:ae:60:79:a3:15:a3:ba:bc:d6:81:52:f4:01:ee:e9:
b4:67:e0:c9:e6:79:ea:86:ea:96:3f:48:fd:e4:d1:bd:d8:3b:
6f:50:09:96:1a:ca:14:ae:0f:d5:9e:53:04:bd:c3:09:d0:83:
c1:77:3b:9b:2e:25:62:93:46:f6:08:cb:71:26:c4:d8:77:10:
2b:6b:2c:b1:2d:85:ed:53:10:f2:ef:1e:c4:10:c7:03:02:f7:
b0:68:2a:72:f6:23:91:00:cb:ad:dc:7a:1b:a2:73:65:9b:43:
ec:ef:d1:89:e5:e5:89:d0:d2:46:bd:28:11:f6:94:10:d5:4a:
76:c6:5c:06:f5:93:23:17:71:e6:79:82:0d:5b:2e:96:a0:4c:
60:75:e7:a9:51:d6:a0:a7:a4:63:98:13:fe:f4:59:66:c9:3c:
3f:db:33:52:9c:3f:78:51:82:6b:3d:7c:88:f5:d1:5c:dc:43:
c6:0d:5d:e1:9c:f6:59:b8:7c:eb:31:b6:21:64:ef:c4:b9:1d:
d1:0b:80:27:b0:a6:9f:6a:cc:4e:05:12:dc:32:38:26:63:f9:
c6:a4:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:36 2026 by rpki-client