Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Qwc0PS7lCg5VkElxT5Cr3FnH21U.roa
File: Qwc0PS7lCg5VkElxT5Cr3FnH21U.roa (raw, json)
Hash identifier: wdTK3twxinT3+ARlD4RZZjVh4EkWcZ9Ag3Zag6py3lE=
Subject key identifier: 43:07:34:3D:2E:E5:0A:0E:55:90:49:71:4F:90:AB:DC:59:C7:DB:55
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01A0187FDC62C2FE6BF37FCC9EBDEB2147EA
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Qwc0PS7lCg5VkElxT5Cr3FnH21U.roa
Signing time: Wed 19 Aug 2026 05:30:27 +0000
ROA not before: Wed 19 Aug 2026 05:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6718
IP address blocks: 5.154.224.0/24 maxlen: 24
37.156.37.0/24 maxlen: 24
89.35.4.0/24 maxlen: 24
89.35.5.0/24 maxlen: 24
89.37.186.0/24 maxlen: 24
89.37.187.0/24 maxlen: 24
89.40.133.0/24 maxlen: 24
89.43.240.0/24 maxlen: 24
89.43.241.0/24 maxlen: 24
89.43.242.0/24 maxlen: 24
89.43.243.0/24 maxlen: 24
89.43.244.0/24 maxlen: 24
89.43.245.0/24 maxlen: 24
89.43.246.0/24 maxlen: 24
89.43.247.0/24 maxlen: 24
89.46.24.0/24 maxlen: 24
89.46.25.0/24 maxlen: 24
89.46.27.0/24 maxlen: 24
89.46.28.0/24 maxlen: 24
89.46.29.0/24 maxlen: 24
89.46.30.0/24 maxlen: 24
89.46.31.0/24 maxlen: 24
91.208.75.0/24 maxlen: 24
91.239.230.0/24 maxlen: 24
92.114.88.0/24 maxlen: 24
92.114.89.0/24 maxlen: 24
92.114.90.0/24 maxlen: 24
92.114.91.0/24 maxlen: 24
94.176.186.0/24 maxlen: 24
94.176.187.0/24 maxlen: 24
128.0.34.0/24 maxlen: 24
128.0.36.0/24 maxlen: 24
185.36.252.0/24 maxlen: 24
193.93.142.0/23 maxlen: 23
193.162.136.0/24 maxlen: 24
195.206.164.0/24 maxlen: 24
2a00:ece0::/32 maxlen: 32
2a04:6c80::/32 maxlen: 32
2a04:6c81::/32 maxlen: 32
2a04:6c82::/32 maxlen: 32
2a04:6c83::/32 maxlen: 32
2a04:6c84::/32 maxlen: 32
2a04:6c85::/32 maxlen: 32
2a04:6c86::/32 maxlen: 32
2a04:6c87::/32 maxlen: 32
2a05:1c00::/32 maxlen: 32
2a05:1c01::/32 maxlen: 32
2a05:1c02::/32 maxlen: 32
2a05:1c03::/32 maxlen: 32
2a05:1c04::/32 maxlen: 32
2a05:1c05::/32 maxlen: 32
2a05:1c06::/32 maxlen: 32
2a05:1c07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:7f:dc:62:c2:fe:6b:f3:7f:cc:9e:bd:eb:21:47:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Aug 19 05:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4307343d2ee50a0e559049714f90abdc59c7db55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:6a:6a:56:95:9e:66:12:bf:75:2d:9b:3c:
de:6d:35:2d:16:32:da:5f:9a:1f:59:82:f1:f2:4c:
a5:8e:77:3e:3f:44:8c:57:1a:c4:65:cb:d3:d8:d4:
c1:57:bf:f2:89:e3:6f:83:03:40:d5:6e:87:4c:cf:
95:4d:a3:d5:20:f2:50:7f:8a:aa:f9:2f:fc:6c:f6:
6e:31:db:fc:46:57:d1:4c:58:f7:9f:27:f7:14:cd:
8b:15:9f:bb:a1:a5:c3:af:f1:14:61:03:24:74:43:
00:d2:57:5c:a2:cd:08:dd:05:38:ce:70:fc:35:5a:
51:59:06:d7:a2:9a:65:45:a0:49:71:aa:e3:14:ef:
37:30:01:f1:d1:4f:93:2d:8b:62:81:23:37:f6:2c:
83:2e:e7:a4:6a:e9:a7:a3:bd:1b:f9:fe:f0:82:b4:
7b:24:d0:16:db:a6:f3:c8:b0:a9:e7:9e:cc:49:51:
ed:8e:ba:6b:39:a7:52:f8:a0:b6:75:a1:55:a6:57:
67:42:6a:87:f9:a1:39:b6:ec:88:20:05:00:b3:15:
ec:69:81:58:8f:5e:88:e0:4f:1d:2e:d5:53:c3:9c:
50:a6:f4:e0:83:80:50:92:ea:08:b7:42:7a:39:c7:
d2:89:85:47:86:e3:7b:34:e6:53:fc:4a:a5:2c:17:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:07:34:3D:2E:E5:0A:0E:55:90:49:71:4F:90:AB:DC:59:C7:DB:55
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Qwc0PS7lCg5VkElxT5Cr3FnH21U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.224.0/24
37.156.37.0/24
89.35.4.0/23
89.37.186.0/23
89.40.133.0/24
89.43.240.0/21
89.46.24.0/23
89.46.27.0-89.46.31.255
91.208.75.0/24
91.239.230.0/24
92.114.88.0/22
94.176.186.0/23
128.0.34.0/24
128.0.36.0/24
185.36.252.0/24
193.93.142.0/23
193.162.136.0/24
195.206.164.0/24
IPv6:
2a00:ece0::/32
2a04:6c80::/29
2a05:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
49:90:3e:e8:18:9d:e4:24:9e:c7:e1:8c:8c:10:57:14:55:4b:
d8:61:c8:5b:e8:eb:8c:5f:ee:90:75:dc:87:50:bf:a6:76:2f:
1d:d2:63:4e:2a:73:b0:6b:31:ab:21:c7:9e:2b:5c:cd:c8:f6:
7c:d1:bf:ba:ed:5a:0f:e1:51:6c:04:bc:03:00:b5:34:1a:d5:
a1:9b:4b:6b:23:01:0d:4d:84:2f:24:1c:cb:ba:42:a0:53:54:
71:6d:7e:ca:da:85:35:19:da:55:34:28:1f:f8:11:83:ce:e0:
03:38:27:6d:34:21:fa:66:82:0b:70:93:2f:03:d0:61:d4:9d:
ac:fd:72:fc:b0:3b:90:1b:51:df:12:fd:72:17:e7:4b:3d:bb:
96:32:7d:a4:99:e2:94:75:42:19:0f:e5:50:de:d7:44:8d:d8:
cd:c0:2d:bf:d9:28:90:af:bc:38:6d:c0:e7:d7:e5:d8:dd:e9:
52:e8:94:d2:f6:25:b0:0d:ff:2c:ee:c8:1b:c7:15:72:cf:1e:
0b:7d:54:12:cf:3b:d3:08:b1:9b:7f:94:d3:cb:43:e3:af:d6:
8e:ac:62:e0:fc:56:d7:57:51:b3:41:39:4f:fe:7a:5b:25:3a:
d7:42:1b:df:36:95:b6:f9:8c:e7:6a:5b:e4:66:bf:6a:56:d8:
cd:fe:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:14:41 2026 by rpki-client