Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qN39aaOMkomU1zCwSmoxpvIfwL0.roa
File: qN39aaOMkomU1zCwSmoxpvIfwL0.roa (raw, json)
Hash identifier: TlUfTrDzoHbERx90NlgB8Jrz6q4viNSJkGRwaRwCIjs=
Subject key identifier: A8:DD:FD:69:A3:8C:92:89:94:D7:30:B0:4A:6A:31:A6:F2:1F:C0:BD
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A16324549DAE90C2652581E8C97CDA58BB
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qN39aaOMkomU1zCwSmoxpvIfwL0.roa
Signing time: Thu 22 Oct 2026 10:24:47 +0000
ROA not before: Thu 22 Oct 2026 10:24:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212598
IP address blocks: 185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:24:54:9d:ae:90:c2:65:25:81:e8:c9:7c:da:58:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:24:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8ddfd69a38c928994d730b04a6a31a6f21fc0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:5f:5a:04:3c:f2:83:82:a1:6d:26:d1:f4:
9c:2e:9c:7d:f6:58:1c:34:9c:40:4c:45:ce:49:5d:
45:20:83:97:f7:dd:19:9a:8f:dc:23:c1:39:9a:bb:
d8:f5:9f:5b:f4:ee:65:40:9e:ec:a2:f7:d1:f7:d8:
25:b5:f8:f1:23:76:6d:1a:e2:9e:35:3c:44:70:71:
8e:92:43:44:53:c8:d3:f7:32:9d:1e:b9:e0:2c:52:
c3:b8:54:84:26:ed:bd:51:73:75:78:49:80:c3:a2:
f0:28:cf:d5:ee:c9:a0:cb:07:86:e6:b1:67:55:37:
74:9d:be:df:80:8e:4c:47:5b:e0:51:70:e0:73:4e:
e5:0d:bd:ff:72:2d:92:2f:8e:ed:eb:54:96:d7:22:
18:bc:87:1e:25:91:9d:c5:25:94:7a:d7:0d:6e:e4:
5d:95:ef:58:d4:df:f0:76:08:47:81:64:53:71:88:
fd:2d:1a:f1:58:de:85:5d:9f:1b:53:8e:3f:17:f9:
f4:13:cc:d3:d4:34:31:2c:1b:97:98:bd:aa:5e:7c:
f3:5d:81:2f:18:ae:3e:8f:0f:93:7a:bd:56:e1:02:
8a:40:55:07:4a:70:61:1b:9f:bf:8a:49:43:d7:a9:
ad:16:ba:73:1b:8c:9a:40:0b:94:1e:24:cc:b7:dc:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:FD:69:A3:8C:92:89:94:D7:30:B0:4A:6A:31:A6:F2:1F:C0:BD
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qN39aaOMkomU1zCwSmoxpvIfwL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.29.0/24
193.35.152.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0d:0c:1d:71:be:31:6f:30:27:ed:98:c3:6a:17:b9:87:7b:
f9:2a:d4:3a:0b:23:c4:89:35:17:99:19:ab:dd:91:f5:25:de:
34:53:08:6b:e9:e8:f2:e7:36:41:cf:d2:7b:fd:f4:42:d5:e8:
49:03:f2:15:f2:8b:67:96:e3:44:e7:f9:d2:b9:50:4e:38:7f:
1c:c7:2a:2e:1f:af:30:0a:f2:3d:62:dc:e1:1f:67:79:f9:15:
46:7e:b0:df:7b:f5:6b:69:fb:a9:ef:38:a6:94:90:22:0d:b1:
d8:ec:a7:33:3e:53:b7:90:84:c7:6c:c8:a0:2a:bc:73:ff:ed:
1c:01:9f:0c:8c:67:06:aa:a7:91:02:01:02:2e:b7:aa:14:1f:
a4:e0:ff:fb:fd:25:4a:d4:2c:fd:d8:27:50:3b:7b:42:92:a3:
67:97:80:f3:fa:d0:ba:6a:8a:26:03:30:06:ca:c2:c3:5a:a6:
8c:dd:8d:bc:95:22:1d:d4:e6:7d:3d:3b:f7:1c:13:e5:1b:26:
3a:4f:10:6a:ed:cc:bd:5e:fe:4e:57:91:26:eb:2a:fa:f7:a5:
74:39:a8:00:6f:d3:d4:f4:ed:ce:64:5b:ec:0e:86:cf:c4:83:
3a:21:3e:3e:65:4a:af:c1:31:47:55:9c:ec:67:95:e1:3c:52:
20:b0:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:50:11 2026 by rpki-client