Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Q4zYlgqR2E6QteR-SS7vLL4f0Fo.roa
File: Q4zYlgqR2E6QteR-SS7vLL4f0Fo.roa (raw, json)
Hash identifier: xdne681KIBXOw1iuKrPmdm7hma+L/l6mzmX+ckXNgJI=
Subject key identifier: 43:8C:D8:96:0A:91:D8:4E:90:B5:E4:7E:49:2E:EF:2C:BE:1F:D0:5A
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 01A1645AB0245D99C0703A609CCF0AEFF1E8
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Q4zYlgqR2E6QteR-SS7vLL4f0Fo.roa
Signing time: Thu 22 Oct 2026 16:03:47 +0000
ROA not before: Thu 22 Oct 2026 16:03:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209341
IP address blocks: 65.98.48.0/24 maxlen: 24
65.181.113.0/24 maxlen: 24
69.72.149.0/24 maxlen: 24
69.72.244.0/24 maxlen: 24
85.187.140.0/22 maxlen: 24
85.187.152.0/22 maxlen: 24
114.129.152.0/22 maxlen: 24
185.62.136.0/22 maxlen: 24
185.141.188.0/22 maxlen: 24
185.143.44.0/22 maxlen: 24
185.146.20.0/22 maxlen: 24
185.166.145.0/24 maxlen: 24
192.250.229.0/24 maxlen: 24
192.250.230.0/24 maxlen: 24
194.147.95.0/24 maxlen: 24
208.116.19.0/24 maxlen: 24
208.116.57.0/24 maxlen: 24
209.42.26.0/24 maxlen: 24
209.42.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:5a:b0:24:5d:99:c0:70:3a:60:9c:cf:0a:ef:f1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Oct 22 16:03:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=438cd8960a91d84e90b5e47e492eef2cbe1fd05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:11:c1:ba:f2:7e:70:66:2c:97:4a:33:ed:
70:da:70:1c:d7:12:c9:a1:42:9a:f3:f0:51:73:43:
f0:ea:76:49:7b:44:18:b0:b4:39:b3:d3:26:c6:fd:
10:89:ac:5c:73:f7:cc:7d:fa:e7:e2:89:0e:dc:b2:
f9:ff:2b:1a:5c:d7:bf:15:aa:c4:ef:bb:09:2d:a1:
1d:7c:7a:2e:e3:73:7c:96:91:06:03:b9:b4:b3:83:
c3:6c:13:8b:95:5a:4a:7a:35:59:7f:b2:97:23:53:
72:dd:2c:a4:c1:56:fb:b0:74:9e:16:a0:e3:54:70:
a8:fd:67:04:f9:d9:d8:b8:33:3a:82:62:37:c4:ec:
d4:0e:0f:0d:fa:13:5a:37:d7:e6:0f:81:e3:60:68:
4b:f8:91:f8:02:06:2b:f2:1c:0a:47:d9:5d:3d:d5:
b4:cb:65:e2:3a:88:7c:e2:08:c3:43:83:ce:90:b9:
91:a5:8d:3a:b2:d6:a8:86:de:de:b1:82:28:a3:2e:
40:0b:c9:f4:75:f8:08:5d:3a:c6:b3:21:63:07:d9:
00:3b:af:47:06:1a:ce:fa:91:a5:22:6b:a2:9b:7d:
f4:60:d6:93:2b:37:2d:c8:ca:81:ab:e6:e9:ac:0b:
b2:20:62:38:fc:92:af:2a:8f:fc:f0:f0:fc:7d:77:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:D8:96:0A:91:D8:4E:90:B5:E4:7E:49:2E:EF:2C:BE:1F:D0:5A
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Q4zYlgqR2E6QteR-SS7vLL4f0Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.98.48.0/24
65.181.113.0/24
69.72.149.0/24
69.72.244.0/24
85.187.140.0/22
85.187.152.0/22
114.129.152.0/22
185.62.136.0/22
185.141.188.0/22
185.143.44.0/22
185.146.20.0/22
185.166.145.0/24
192.250.229.0-192.250.230.255
194.147.95.0/24
208.116.19.0/24
208.116.57.0/24
209.42.26.0/24
209.42.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:57:50:3f:02:68:15:92:7f:a4:34:a8:29:3e:e5:31:00:74:
63:35:42:4d:60:98:7e:4b:c4:70:11:35:6b:a1:ff:ae:f6:7f:
4d:40:65:00:12:a7:5a:b7:7b:85:d5:f2:74:a1:54:c7:e4:af:
f2:bd:89:28:fe:65:5a:54:6b:66:9d:24:bd:aa:d6:35:61:50:
e5:49:0b:ea:97:4d:f8:f7:81:15:35:2d:44:60:d6:b6:8a:90:
d1:92:b3:63:c0:55:df:07:1d:23:2d:7f:62:ee:3b:b4:3e:3d:
09:a7:53:11:3c:5c:26:50:99:ee:17:ec:67:a5:98:8a:bc:f5:
ea:00:80:5b:c9:f1:e0:84:bb:a3:b0:e9:b6:cc:77:0b:44:cd:
10:47:1d:d5:38:5f:3a:41:ca:7f:5d:3c:88:5f:74:85:06:df:
3b:af:57:83:3d:04:da:1e:ed:0e:1b:3d:58:d6:9a:af:80:d6:
00:a3:04:d4:bb:3b:22:81:a9:c0:9c:4c:6b:93:2d:09:f8:41:
d1:f8:a2:1a:b0:2e:6b:55:7e:3c:5b:ac:cd:8f:15:d1:0f:e0:
88:b6:52:86:42:6a:ce:bd:3a:7e:aa:aa:61:04:5a:9d:53:10:
d5:ed:a6:5d:71:ee:79:6e:8c:61:2a:c8:e8:a6:9f:be:12:1a:
6e:b9:08:9a
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAaFkWrAkXZnAcDpgnM8K7/HoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjYxMDIyMTYwMzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzhjZDg5NjBhOTFkODRlOTBiNWU0N2U0OTJlZWYyY2JlMWZkMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxucRwbryfnBmLJdKM+1w2nAc1xLJ
oUKa8/BRc0Pw6nZJe0QYsLQ5s9Mmxv0Qiaxcc/fMffrn4okO3LL5/ysaXNe/FarE
77sJLaEdfHou43N8lpEGA7m0s4PDbBOLlVpKejVZf7KXI1Ny3SykwVb7sHSeFqDj
VHCo/WcE+dnYuDM6gmI3xOzUDg8N+hNaN9fmD4HjYGhL+JH4AgYr8hwKR9ldPdW0
y2XiOoh84gjDQ4POkLmRpY06staoht7esYIooy5AC8n0dfgIXTrGsyFjB9kAO69H
BhrO+pGlImuim330YNaTKzctyMqBq+bprAuyIGI4/JKvKo/88PD8fXecIQIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFEOM2JYKkdhOkLXkfkku7yy+H9BaMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvUTR6WWxncVIyRTZRdGVSLVNTN3ZMTDRmMEZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAEFiMAME
AEG1cQMEAEVIlQMEAEVI9AMEAlW7jAMEAlW7mAMEAnKBmAMEArk+iAMEArmNvAME
ArmPLAMEArmSFAMEALmmkTAMAwQAwPrlAwQAwPrmAwQAwpNfAwQA0HQTAwQA0HQ5
AwQA0SoaAwQA0SofMA0GCSqGSIb3DQEBCwUAA4IBAQAsV1A/AmgVkn+kNKgpPuUx
AHRjNUJNYJh+S8RwETVrof+u9n9NQGUAEqdat3uF1fJ0oVTH5K/yvYko/mVaVGtm
nSS9qtY1YVDlSQvql03494EVNS1EYNa2ipDRkrNjwFXfBx0jLX9i7ju0Pj0Jp1MR
PFwmUJnuF+xnpZiKvPXqAIBbyfHghLujsOm2zHcLRM0QRx3VOF86Qcp/XTyIX3SF
Bt87r1eDPQTaHu0OGz1Y1pqvgNYAowTUuzsiganAnExrky0J+EHR+KIasC5rVX48
W6zNjxXRD+CItlKGQmrOvTp+qqphBFqdUxDV7aZdce55boxhKsjopp++EhpuuQia
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:29:16 2026 by rpki-client