Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/QCS4FJLmFB_TtV0HRcC2L7aCPPU.roa
File: QCS4FJLmFB_TtV0HRcC2L7aCPPU.roa (raw, json)
Hash identifier: +ALoN9stJwp+oTowBFWka2K8GW3Wc31BnI0Y5JZvvLI=
Subject key identifier: 40:24:B8:14:92:E6:14:1F:D3:B5:5D:07:45:C0:B6:2F:B6:82:3C:F5
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019E2B703E3C43C1C6EC3B63FCE0A4D65880
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/QCS4FJLmFB_TtV0HRcC2L7aCPPU.roa
Signing time: Fri 15 May 2026 11:40:36 +0000
ROA not before: Fri 15 May 2026 11:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60117
IP address blocks: 185.45.192.0/24 maxlen: 24
185.45.194.0/24 maxlen: 24
185.45.195.0/24 maxlen: 24
185.82.200.0/24 maxlen: 24
185.82.202.0/24 maxlen: 24
185.106.120.0/24 maxlen: 24
185.106.122.0/24 maxlen: 24
185.106.123.0/24 maxlen: 24
185.117.72.0/24 maxlen: 24
185.117.73.0/24 maxlen: 24
185.141.24.0/24 maxlen: 24
185.141.27.0/24 maxlen: 24
185.183.97.0/24 maxlen: 24
185.183.98.0/24 maxlen: 24
185.198.56.0/24 maxlen: 24
185.198.58.0/24 maxlen: 24
185.198.59.0/24 maxlen: 24
185.244.148.0/24 maxlen: 24
185.244.149.0/24 maxlen: 24
185.244.151.0/24 maxlen: 24
188.116.36.0/24 maxlen: 24
194.36.188.0/24 maxlen: 24
194.36.190.0/24 maxlen: 24
194.36.191.0/24 maxlen: 24
212.8.251.0/24 maxlen: 24
2a03:660::/32 maxlen: 32
2a04:dd00::/29 maxlen: 29
2a04:dd00::/32 maxlen: 32
2a04:dd01::/32 maxlen: 32
2a04:dd02::/32 maxlen: 32
2a05:9340::/32 maxlen: 32
2a05:9341::/32 maxlen: 32
2a05:9342::/32 maxlen: 32
2a06:3d80::/29 maxlen: 29
2a0e:df40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:70:3e:3c:43:c1:c6:ec:3b:63:fc:e0:a4:d6:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: May 15 11:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4024b81492e6141fd3b55d0745c0b62fb6823cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:be:1c:bd:ee:8d:5c:b1:5d:9a:62:bd:9c:
c7:fa:cb:d3:64:fa:24:98:88:1d:a3:0d:d1:53:e1:
9d:7e:05:74:4a:58:74:14:5e:da:8a:a3:3d:32:6b:
66:6a:aa:c1:05:2a:3d:45:58:1b:b6:81:31:c0:e6:
13:d4:2a:04:43:1b:c3:58:6a:46:94:23:51:e3:52:
c3:74:39:f6:9e:8c:29:1b:5a:d0:13:77:a5:c1:f4:
84:92:d5:71:3e:02:84:5d:8d:4d:9b:47:7d:f6:df:
a6:9d:73:d1:f8:93:fb:50:90:58:38:d7:d7:83:0b:
75:92:97:ae:20:f3:e5:ae:81:0c:51:9e:f9:48:e2:
da:00:c8:dc:e0:7d:a4:4a:1f:16:5c:b1:de:19:4c:
8f:a0:f9:75:31:51:2b:96:25:e9:2c:8c:b8:c2:6b:
a2:d7:25:3c:4c:42:6a:8a:dc:49:f1:7b:7c:d4:52:
34:da:2b:a5:ce:de:f3:58:78:44:cc:5f:61:62:36:
39:16:00:e6:d0:47:36:80:14:93:90:d2:46:47:53:
38:17:57:d3:9b:3b:c6:60:70:1e:30:a7:fe:19:de:
82:fb:bc:cb:1d:4a:73:5b:6a:5b:51:b1:c6:26:af:
38:fe:f0:11:65:60:68:f3:ca:1c:76:dd:cc:96:72:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:24:B8:14:92:E6:14:1F:D3:B5:5D:07:45:C0:B6:2F:B6:82:3C:F5
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/QCS4FJLmFB_TtV0HRcC2L7aCPPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.192.0/24
185.45.194.0/23
185.82.200.0/24
185.82.202.0/24
185.106.120.0/24
185.106.122.0/23
185.117.72.0/23
185.141.24.0/24
185.141.27.0/24
185.183.97.0-185.183.98.255
185.198.56.0/24
185.198.58.0/23
185.244.148.0/23
185.244.151.0/24
188.116.36.0/24
194.36.188.0/24
194.36.190.0/23
212.8.251.0/24
IPv6:
2a03:660::/32
2a04:dd00::/29
2a05:9340::-2a05:9342:ffff:ffff:ffff:ffff:ffff:ffff
2a06:3d80::/29
2a0e:df40::/32
Signature Algorithm: sha256WithRSAEncryption
81:c8:88:5b:cf:df:b6:ae:bd:a1:ea:f5:47:43:2a:0a:b0:03:
64:e6:b1:d3:cd:ca:0b:1f:d5:23:04:55:2a:7f:05:59:5c:7a:
6b:09:a1:05:0f:e2:23:e4:85:65:99:1b:2b:c2:48:59:0b:e0:
35:9f:bd:2e:97:6e:9e:a1:4e:78:95:07:8e:34:1f:f8:ac:31:
e8:55:2f:31:aa:60:d0:9f:55:a2:26:c2:d4:a1:b3:1b:eb:89:
5e:6a:ec:97:ed:e9:bf:23:03:c5:30:6d:e6:3f:54:58:15:18:
2a:8b:c1:a3:9c:10:dd:b3:96:d1:7f:fd:f2:a0:e6:de:34:4f:
24:85:25:f2:34:b2:e4:b2:7f:49:9d:c9:3e:fb:ef:95:53:7d:
e8:85:9a:07:fc:9b:b8:31:11:2b:8f:e9:76:eb:05:df:24:12:
ea:ca:fc:75:1d:8b:05:ab:00:75:e9:74:26:dd:bd:ee:bd:db:
af:2a:f1:5a:22:e8:79:38:85:b2:b1:1b:ba:27:45:00:ed:12:
e2:d3:b9:58:34:a4:72:e2:d8:3c:b4:46:4e:d7:13:3d:43:fc:
f6:84:6e:0d:72:01:87:eb:51:c0:b4:d3:90:3a:9e:02:58:91:
ce:8f:d8:f6:98:db:e7:3e:fe:c1:fb:ad:c6:55:70:04:f1:b4:
10:b9:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 07:14:34 2026 by rpki-client