Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/qIBcgoxGaTpRyT1GVIURNEpjT0U.roa
File: qIBcgoxGaTpRyT1GVIURNEpjT0U.roa (raw, json)
Hash identifier: vzZMI2J8AcgNX06ElvLWaU+DX1AEJ/xGwsQNinRF8Xk=
Subject key identifier: A8:80:5C:82:8C:46:69:3A:51:C9:3D:46:54:85:11:34:4A:63:4F:45
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 019C52226C807DCF7F4370BA6942A132D53F
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/qIBcgoxGaTpRyT1GVIURNEpjT0U.roa
Signing time: Thu 12 Feb 2026 13:55:13 +0000
ROA not before: Thu 12 Feb 2026 13:55:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 62.106.83.0/24 maxlen: 24
77.246.242.0/24 maxlen: 24
146.19.228.0/24 maxlen: 24
185.218.184.0/24 maxlen: 24
193.109.82.0/24 maxlen: 24
195.216.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:52:22:6c:80:7d:cf:7f:43:70:ba:69:42:a1:32:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Feb 12 13:55:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8805c828c46693a51c93d46548511344a634f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:21:58:5d:11:2b:c2:71:6a:e2:c2:60:99:40:
5d:50:09:d2:47:0f:02:97:83:36:1b:39:95:7a:69:
f5:74:e5:ba:a0:2d:b1:5a:d8:27:a8:a1:40:2c:d3:
4a:71:28:2d:fe:64:3a:48:05:8b:d9:bf:39:6b:6d:
66:dd:f1:94:e8:bc:7a:c8:b8:fd:d2:e2:07:10:e7:
61:ca:52:13:3d:2a:2b:3e:57:7e:b5:ea:1c:b1:a8:
58:37:a2:b3:34:c8:01:69:ec:0c:bb:65:e1:15:97:
d4:7f:43:c8:dd:3e:65:10:23:ef:2b:ba:96:87:ed:
c3:6f:d1:1c:e8:0d:a3:1e:b5:ff:88:58:a3:88:2d:
9c:d2:fe:93:3c:7e:5a:09:39:95:f7:62:da:e4:16:
28:57:ac:6c:8a:be:ba:76:42:da:05:19:5f:85:f2:
62:fd:80:1b:ce:9c:37:52:2a:11:73:43:41:54:b4:
d5:30:85:f8:b2:1c:1a:ff:d5:a0:1f:f5:ed:a4:87:
31:a9:59:d2:54:7c:b3:ee:93:ad:e0:f4:77:80:cc:
93:2f:b6:7a:b9:64:93:31:c9:e4:15:04:86:4a:11:
b0:5a:d4:a2:86:a7:8b:ad:64:df:7f:a0:e6:8d:69:
2c:39:e0:f5:99:36:48:18:c4:e7:ea:d2:5a:db:89:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:80:5C:82:8C:46:69:3A:51:C9:3D:46:54:85:11:34:4A:63:4F:45
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/qIBcgoxGaTpRyT1GVIURNEpjT0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.83.0/24
77.246.242.0/24
146.19.228.0/24
185.218.184.0/24
193.109.82.0/24
195.216.248.0/24
Signature Algorithm: sha256WithRSAEncryption
94:88:b3:67:a0:e4:6c:20:1b:46:e5:b2:7f:f9:df:7f:97:4f:
3d:90:5b:94:c1:28:7b:93:b9:58:67:a9:13:a7:06:67:76:2f:
bc:2f:0e:26:0f:12:fa:78:f2:56:2f:e2:60:81:88:c4:01:3c:
01:a1:2b:33:9b:f2:7f:36:14:44:61:3e:52:59:3a:22:18:ee:
78:02:cb:48:99:3a:9c:a4:c1:28:1f:f3:ae:f5:bd:6b:29:aa:
78:f4:9f:ec:c8:22:2a:7a:c7:65:66:b3:35:ee:73:80:8d:15:
d3:b7:3a:a0:dc:c0:00:2a:74:90:cc:71:33:87:dc:16:e2:fb:
67:09:60:67:53:4f:3f:c1:1a:8c:04:61:26:07:50:40:72:8a:
34:e6:6b:91:7c:a6:b6:24:c7:8b:89:e3:35:af:39:15:f7:0c:
cb:00:c6:38:18:b7:d8:db:dc:bd:df:b9:21:64:ca:32:66:0d:
fe:5d:6d:a3:01:a5:7d:d7:a9:5b:dd:c2:c7:b6:d0:1b:0c:83:
7b:f6:95:db:df:b6:fa:63:67:fe:aa:43:9a:39:58:25:ca:1b:
ed:a4:0d:80:98:62:ea:69:8e:7c:5f:22:d6:5a:3a:bd:96:d2:
35:79:35:1c:ab:09:48:47:86:fe:8d:07:68:c6:d7:94:6e:b3:
54:55:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:09:04 2026 by rpki-client