Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/qqh5JrewpneFMulWBUYLL1slgjE.roa
File: qqh5JrewpneFMulWBUYLL1slgjE.roa (raw, json)
Hash identifier: XxinXNX0i/Fsxa1HgPe4TOFh7Wgq3TresthOVXUd5Go=
Subject key identifier: AA:A8:79:26:B7:B0:A6:77:85:32:E9:56:05:46:0B:2F:5B:25:82:31
Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial: 01A12385D28D876F8249FD6128A596BE40DB
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/qqh5JrewpneFMulWBUYLL1slgjE.roa
Signing time: Sat 10 Oct 2026 01:55:35 +0000
ROA not before: Sat 10 Oct 2026 01:55:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 185.148.148.0/24 maxlen: 24
185.148.150.0/24 maxlen: 24
185.148.151.0/24 maxlen: 24
193.19.90.0/24 maxlen: 24
193.19.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:85:d2:8d:87:6f:82:49:fd:61:28:a5:96:be:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Validity
Not Before: Oct 10 01:55:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaa87926b7b0a6778532e95605460b2f5b258231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:5d:b7:d0:ee:3a:54:58:5f:38:a5:17:ca:
22:f8:52:8c:b5:d0:f3:16:23:3f:f8:8e:92:d6:47:
6c:4b:ac:4c:95:c4:d2:8d:8a:8e:e1:b9:d5:6f:aa:
0b:a2:d5:69:d2:e5:bd:d4:f9:2e:9b:a1:66:a5:5f:
bf:c9:30:2f:eb:4e:14:cf:f1:56:b6:32:25:11:7e:
1d:0c:3f:e8:44:4d:19:95:22:28:9b:9b:df:76:d6:
b7:9b:53:56:0f:09:f2:c9:80:07:46:24:dc:d3:92:
70:b3:51:f9:07:2e:3f:fa:f1:27:d2:e7:b4:19:d2:
1c:6c:a0:d0:00:f5:1d:66:27:d7:04:ab:0b:ba:db:
76:94:f1:df:92:86:6a:f8:e3:9b:87:9f:eb:36:5a:
69:e0:80:f1:3c:f4:fb:5a:f1:e6:08:79:14:5d:27:
87:f3:84:9b:26:af:71:c7:e0:80:b8:b3:07:31:f6:
e9:37:d1:07:f6:ad:77:c9:8f:b2:9a:f7:8a:85:6c:
44:5c:a0:50:bc:dc:a7:4e:60:aa:a9:49:28:17:38:
0d:d3:44:70:90:b0:19:1a:9a:31:04:91:62:e2:66:
97:f7:fe:fb:a2:23:cd:9b:70:bc:0f:db:89:c1:d2:
f8:98:f2:78:47:5e:57:5d:40:af:da:ff:4b:d9:65:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A8:79:26:B7:B0:A6:77:85:32:E9:56:05:46:0B:2F:5B:25:82:31
X509v3 Authority Key Identifier:
keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/qqh5JrewpneFMulWBUYLL1slgjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.148.0/24
185.148.150.0/23
193.19.90.0/23
Signature Algorithm: sha256WithRSAEncryption
44:a7:55:51:f9:24:25:42:05:af:10:7a:ba:d8:78:c0:09:a5:
e5:3c:7d:3b:24:8e:cc:f5:89:5b:c8:f0:60:c1:ee:10:5f:7d:
01:e4:24:7a:c1:17:0b:9c:0c:18:54:12:31:3a:80:00:42:76:
62:d3:8c:3c:bb:c8:69:fb:3c:68:9f:ba:f7:fe:07:d5:3b:f5:
44:af:f6:be:84:0d:a2:8f:f7:03:df:73:c5:23:77:b8:f8:a7:
96:01:83:88:c6:06:21:0b:4f:fd:bc:59:39:a2:a0:a0:a9:f1:
6b:02:d8:f9:ff:73:b8:5a:c6:71:9e:57:af:ba:77:10:9e:77:
a3:d0:a5:23:22:3b:b3:9a:f4:ab:21:7e:65:5a:c2:31:65:ed:
d4:ac:64:bb:85:a9:63:08:f6:ec:83:62:bc:70:40:66:12:e2:
a1:d6:c0:9e:0b:be:9d:4e:09:a2:f2:4b:ff:12:98:ef:b0:d2:
f3:74:2e:89:8b:25:45:e2:5c:94:75:30:7d:70:d5:5b:89:0c:
0b:ab:e0:ed:27:99:b6:df:91:4b:0c:18:0e:b2:78:bc:6b:18:
da:0c:07:d8:5b:dc:6f:26:a0:6b:0f:3d:f3:b4:14:a1:34:88:
dd:e0:10:3e:47:98:09:f1:f8:84:4e:1d:0c:09:89:9e:52:bb:
c2:53:0a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:27:35 2026 by rpki-client