Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/qgusrLPdxbmOAmCCh-LDhKvWtUo.roa
File: qgusrLPdxbmOAmCCh-LDhKvWtUo.roa (raw, json)
Hash identifier: hmQSz0Gp8rt8ydBZY/twqJ9mc/ykbC8FHiCR9kZOXOg=
Subject key identifier: AA:0B:AC:AC:B3:DD:C5:B9:8E:02:60:82:87:E2:C3:84:AB:D6:B5:4A
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019FE5B9907A75876DC8B28EF67C6DBAE5A8
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/qgusrLPdxbmOAmCCh-LDhKvWtUo.roa
Signing time: Sun 09 Aug 2026 08:52:51 +0000
ROA not before: Sun 09 Aug 2026 08:52:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211665
IP address blocks: 45.84.89.0/24 maxlen: 24
193.0.232.0/24 maxlen: 24
205.220.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e5:b9:90:7a:75:87:6d:c8:b2:8e:f6:7c:6d:ba:e5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Aug 9 08:52:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa0bacacb3ddc5b98e02608287e2c384abd6b54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:d4:78:82:3e:d4:a2:d7:b9:54:69:aa:d5:
18:23:49:85:7a:09:05:48:dd:9d:44:42:fa:c6:eb:
24:b9:fa:ba:11:61:3d:06:b5:38:47:81:2c:36:ca:
d1:c5:6c:10:11:99:ff:8a:79:19:28:33:37:ab:5a:
df:87:65:b8:e7:55:04:76:6e:2e:2b:ab:a1:b0:ae:
e4:71:09:52:7a:92:db:0c:eb:a8:08:ed:2b:b5:93:
9c:75:39:15:8b:c2:38:e9:69:d3:d7:8b:20:55:34:
ab:75:94:d1:a5:5a:9b:25:ed:d2:98:c1:b8:5a:55:
31:6a:05:fb:38:15:ea:f1:c9:aa:db:b9:88:e3:11:
47:c9:1b:1a:ab:dd:1d:df:56:34:5a:db:74:13:d5:
d3:24:05:37:11:d5:4e:31:81:c4:d3:73:0e:0c:3f:
01:00:b7:ea:6b:7b:bc:80:14:50:31:d6:db:b5:77:
c7:f5:c9:4d:e3:da:1d:26:bb:c6:5b:5a:37:12:49:
5f:ed:85:11:f8:ec:0b:4e:9c:53:00:28:d5:72:72:
31:53:67:96:86:bc:a5:4f:37:47:9d:e6:4a:7f:08:
eb:7e:68:a1:cb:44:b3:b0:18:f8:b0:87:10:df:fd:
5c:1a:ea:32:83:81:d9:74:46:dd:37:99:dc:f6:17:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0B:AC:AC:B3:DD:C5:B9:8E:02:60:82:87:E2:C3:84:AB:D6:B5:4A
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/qgusrLPdxbmOAmCCh-LDhKvWtUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
193.0.232.0/24
205.220.225.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8b:8c:34:b3:d8:b0:f5:1d:38:52:14:cc:8b:5c:69:2a:cc:
d0:78:ec:a4:aa:74:92:dd:8f:2e:eb:35:64:53:78:9c:a2:ee:
e3:3e:98:00:ef:db:ce:f1:89:e4:69:f8:65:7e:4a:ef:1a:56:
2a:56:37:85:92:3a:0f:81:d1:a7:6e:87:4e:9d:58:07:8a:59:
3f:dc:a3:88:89:4c:4c:1c:75:71:1f:61:0b:5d:e9:bb:f0:81:
48:57:2d:04:00:03:e6:26:3d:3e:1b:a9:07:85:9a:ca:e5:40:
48:4b:17:bd:b3:51:2c:c7:c9:6d:11:7f:bf:6c:fc:75:fa:2f:
9f:aa:c5:6f:ff:28:db:16:55:1d:9e:8e:f7:37:54:ad:b8:ea:
9d:04:57:aa:db:b5:30:96:15:4d:5b:b4:55:2f:dd:d3:2d:53:
e2:2a:da:31:35:8b:02:66:c5:58:90:14:d1:c5:70:cd:5e:79:
56:cc:07:74:ab:71:a5:4e:03:21:5e:d3:2a:c7:48:4d:3e:7e:
1c:ba:8e:a5:ac:64:8b:0c:ef:74:ec:df:8d:d8:22:b7:87:4e:
de:35:eb:f5:99:24:59:8b:b9:b4:4e:b9:25:40:f4:58:c3:d4:
f3:ae:43:fc:df:c6:2f:c7:c5:78:23:36:29:78:5d:82:ac:39:
a8:3e:8f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:20:28 2026 by rpki-client