Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Q_PdlhQlvZD2-vMvZOWdHmq-K-8.roa
File: Q_PdlhQlvZD2-vMvZOWdHmq-K-8.roa (raw, json)
Hash identifier: 0YrQHbaLQdPEEvwDvN4WKDuQB3+ItmRb+blfiLTYOpA=
Subject key identifier: 43:F3:DD:96:14:25:BD:90:F6:FA:F3:2F:64:E5:9D:1E:6A:BE:2B:EF
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A19D8C5D8D283367E24EE7C9BEB0989993
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Q_PdlhQlvZD2-vMvZOWdHmq-K-8.roa
Signing time: Mon 02 Nov 2026 18:36:24 +0000
ROA not before: Mon 02 Nov 2026 18:36:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 5.180.31.0/24 maxlen: 24
45.9.18.0/24 maxlen: 24
45.9.19.0/24 maxlen: 24
45.15.125.0/24 maxlen: 24
45.15.128.0/24 maxlen: 24
45.66.165.0/24 maxlen: 24
45.66.166.0/24 maxlen: 24
45.66.167.0/24 maxlen: 24
45.136.116.0/24 maxlen: 24
45.149.113.0/24 maxlen: 24
45.149.114.0/24 maxlen: 24
85.208.108.0/24 maxlen: 24
88.218.93.0/24 maxlen: 24
139.28.233.0/24 maxlen: 24
141.98.161.0/24 maxlen: 24
141.98.162.0/24 maxlen: 24
141.98.163.0/24 maxlen: 24
141.98.164.0/24 maxlen: 24
141.98.165.0/24 maxlen: 24
141.98.166.0/24 maxlen: 24
185.106.97.0/24 maxlen: 24
185.106.98.0/24 maxlen: 24
185.106.99.0/24 maxlen: 24
185.153.180.0/24 maxlen: 24
185.153.181.0/24 maxlen: 24
185.153.183.0/24 maxlen: 24
185.161.69.0/24 maxlen: 24
185.161.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:8c:5d:8d:28:33:67:e2:4e:e7:c9:be:b0:98:99:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 2 18:36:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43f3dd961425bd90f6faf32f64e59d1e6abe2bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:97:e7:c2:2a:4f:c5:68:de:89:49:11:4d:
ab:1c:6f:a9:36:28:4a:6b:30:e7:47:4d:28:6d:de:
75:54:d8:b4:9a:e1:38:95:97:da:27:ed:d8:22:a5:
ed:f5:1a:76:b6:df:d6:11:a1:db:4e:d3:da:b3:33:
6c:50:29:22:e7:2d:e8:74:0b:12:17:20:ce:a5:b6:
dd:22:7f:1d:d9:41:35:42:ba:74:ea:db:a2:60:ce:
95:cf:ea:ce:fe:8a:ad:44:b8:fb:0d:57:77:78:be:
d5:fc:50:fc:be:4f:0a:df:69:29:d2:a2:c0:a5:1d:
07:31:b5:42:48:a6:2a:81:9d:17:38:bd:2c:94:a0:
07:ae:2d:6c:2b:b8:20:d3:91:9d:ad:97:34:fe:c1:
e5:6b:b2:d8:b9:b0:b7:3c:8b:f2:e8:a9:b3:24:6a:
62:77:2f:23:37:d6:85:72:52:35:10:3c:88:33:1c:
e4:82:98:49:34:bf:a6:36:af:f8:0a:e8:96:37:82:
d2:86:e6:b3:af:b2:f9:60:12:ef:d8:d6:af:6d:bf:
3a:f0:c7:a0:53:7d:71:5d:49:b2:d9:9c:77:36:44:
37:fa:65:17:5b:5f:c1:fa:ef:85:44:b4:a2:0a:7d:
c4:85:ab:67:2d:df:c9:06:ca:c2:9d:a5:cb:1c:fd:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F3:DD:96:14:25:BD:90:F6:FA:F3:2F:64:E5:9D:1E:6A:BE:2B:EF
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Q_PdlhQlvZD2-vMvZOWdHmq-K-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.31.0/24
45.9.18.0/23
45.15.125.0/24
45.15.128.0/24
45.66.165.0-45.66.167.255
45.136.116.0/24
45.149.113.0-45.149.114.255
85.208.108.0/24
88.218.93.0/24
139.28.233.0/24
141.98.161.0-141.98.166.255
185.106.97.0-185.106.99.255
185.153.180.0/23
185.153.183.0/24
185.161.69.0/24
185.161.71.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ad:03:4d:30:98:65:5c:0b:67:a5:5c:db:4b:d3:66:4b:aa:
80:96:43:09:c1:f2:c6:4b:85:2c:f1:c7:39:5e:ae:8d:98:47:
b5:b0:53:ea:44:58:7c:b0:1d:d5:4b:da:bc:3a:65:01:05:24:
29:5f:f6:d2:42:31:d2:35:82:f9:09:20:ac:a2:f8:0f:d5:02:
33:5d:86:de:1c:d2:0d:11:17:d4:f7:6f:43:e3:ff:37:13:6e:
90:c6:d5:a4:58:ff:be:8b:0b:65:99:42:a4:3a:6f:31:48:ea:
d6:b0:2f:ac:24:21:9c:35:25:98:76:82:6b:4c:a7:76:8b:68:
82:f5:47:27:b4:ee:7f:65:ea:0f:40:cc:3f:50:c6:58:21:79:
c0:91:f0:c8:d0:2a:07:64:c7:93:f8:c5:e6:52:d4:6c:b7:8d:
89:d0:f5:48:f1:8f:7b:7f:d0:fb:93:0b:f5:5f:25:50:bd:8f:
37:17:c4:01:b2:b7:9b:f6:16:be:43:ec:39:56:99:44:26:f0:
6f:7a:69:47:c0:bb:49:6d:99:3d:a7:5f:0e:e7:25:ab:fb:75:
9b:16:cb:33:45:84:b6:20:fa:b5:10:5c:55:a1:81:62:02:7d:
34:ef:c5:23:0f:ca:88:9c:50:ee:c7:1b:4b:ff:40:2e:95:61:
c3:6a:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:30:04 2026 by rpki-client