Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qwkEN3MFN8A6dn-7Rg0HFjFKwFA.roa
File: qwkEN3MFN8A6dn-7Rg0HFjFKwFA.roa (raw, json)
Hash identifier: yeljd9jNC2vFl3kyvqrpF00mL5DP+Yd7sRaezm+dAbs=
Subject key identifier: AB:09:04:37:73:05:37:C0:3A:76:7F:BB:46:0D:07:16:31:4A:C0:50
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0C8696DEBE6E913178B5F3E0B3DD2A542
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qwkEN3MFN8A6dn-7Rg0HFjFKwFA.roa
Signing time: Tue 22 Sep 2026 09:19:07 +0000
ROA not before: Tue 22 Sep 2026 09:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 176.125.248.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.240.122.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:69:6d:eb:e6:e9:13:17:8b:5f:3e:0b:3d:d2:a5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 22 09:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab090437730537c03a767fbb460d0716314ac050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:ec:51:18:0b:6f:04:1c:58:5b:7c:16:ce:
c1:df:fd:ee:a8:67:ae:f2:39:20:b5:a4:35:ed:93:
12:e6:41:02:e0:6c:28:7b:49:c7:fc:0e:c7:e4:ff:
e0:22:41:48:98:99:d7:60:c5:f8:42:e6:e4:8f:4a:
e9:51:54:bc:ee:6d:49:39:bb:83:47:75:71:e3:6f:
2e:9f:60:ef:fc:71:58:c4:39:e0:0c:59:e4:3f:34:
74:f4:57:a0:29:9e:be:09:9c:e0:67:c6:5a:2c:72:
25:b8:69:cc:ea:09:0c:73:fb:ef:fa:0e:10:d4:7f:
bd:4b:64:7e:95:cd:6f:5a:80:a2:46:6b:4c:60:b7:
29:c5:cf:58:0c:e4:11:74:0a:62:7c:0f:5d:9b:30:
1e:bd:03:46:55:94:e5:82:df:66:7f:f8:50:ab:18:
d0:3b:65:ce:a5:b3:49:53:ba:11:e1:93:be:48:4f:
4d:06:08:d5:39:8d:d4:7f:d6:02:a8:c6:c2:8b:6a:
a0:62:f2:d4:9b:e5:7e:86:f8:e4:33:f9:cf:10:2c:
f5:0f:46:25:5d:20:4a:6e:8e:c8:9c:bc:71:c8:ad:
4f:0f:5b:76:e6:e9:23:05:e5:b2:f5:36:e2:87:1d:
cd:cf:ad:f0:3b:b1:45:92:6d:b7:74:a9:c8:9a:73:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:09:04:37:73:05:37:C0:3A:76:7F:BB:46:0D:07:16:31:4A:C0:50
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qwkEN3MFN8A6dn-7Rg0HFjFKwFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
185.222.29.0/24
185.240.122.0/24
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a1:10:3e:d9:21:fc:2f:f0:c3:89:46:92:ea:51:83:48:47:
3e:f6:98:a0:46:67:33:4b:ce:23:e7:82:2b:1d:2c:8d:4f:2f:
9b:1e:af:b1:a2:d8:68:12:a8:e1:21:19:c7:68:56:cd:46:fc:
5b:21:99:96:8b:14:07:88:6d:7b:30:77:66:fa:a7:61:d4:96:
a6:0b:e9:80:f1:ad:ff:07:c3:15:a4:b3:ee:fa:09:ed:b6:4b:
66:52:52:50:40:3e:b0:f8:16:f1:c0:53:90:5f:68:14:85:32:
c5:96:d7:47:b0:58:b8:9a:a4:43:ec:39:81:35:f0:1e:2b:94:
61:b2:9a:33:e9:33:a3:24:11:87:50:aa:41:9c:69:a0:c4:3a:
f4:d6:07:3e:0a:83:b8:f8:f0:ed:0f:23:cb:0a:60:b4:ad:17:
ab:f8:67:e6:59:9b:c0:d8:c8:29:bb:c2:b1:db:96:a1:9d:7b:
d2:2d:b9:85:ea:d5:03:5d:45:96:17:a0:38:97:a2:0e:46:4e:
b0:d3:5a:66:ea:42:14:71:01:3f:00:2c:4c:9a:20:2d:19:18:
e3:8d:f4:b8:a6:77:56:93:e9:4e:7a:90:a5:81:a9:0c:24:c6:
37:62:2e:7f:ac:a8:e9:4e:e7:30:2e:65:aa:92:de:12:82:ac:
4a:a9:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:55:14 2026 by rpki-client