Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/1QVffqytSmC1a3CyEMjTZiMPz2I.roa
File: 1QVffqytSmC1a3CyEMjTZiMPz2I.roa (raw, json)
Hash identifier: Z9oUBWWYgzGCyhKCdwmz/nYZmRhrSkL7ppTpw2620JQ=
Subject key identifier: D5:05:5F:7E:AC:AD:4A:60:B5:6B:70:B2:10:C8:D3:66:23:0F:CF:62
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019EF965FF26F303A0A2CA4FB573490B9E35
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/1QVffqytSmC1a3CyEMjTZiMPz2I.roa
Signing time: Wed 24 Jun 2026 11:31:11 +0000
ROA not before: Wed 24 Jun 2026 11:31:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200651
IP address blocks: 37.156.68.0/24 maxlen: 24
37.228.128.0/24 maxlen: 24
37.228.129.0/24 maxlen: 24
85.193.77.0/24 maxlen: 24
94.198.190.0/24 maxlen: 24
95.133.166.0/23 maxlen: 23
185.10.68.0/24 maxlen: 24
185.100.84.0/23 maxlen: 23
185.100.84.0/24 maxlen: 24
185.100.85.0/24 maxlen: 24
185.100.86.0/24 maxlen: 24
185.100.87.0/24 maxlen: 24
185.146.232.0/24 maxlen: 24
185.146.233.0/24 maxlen: 24
185.146.234.0/24 maxlen: 24
185.165.168.0/24 maxlen: 24
185.165.169.0/24 maxlen: 24
185.165.170.0/24 maxlen: 24
185.165.171.0/24 maxlen: 24
185.246.188.0/24 maxlen: 24
185.246.189.0/24 maxlen: 24
185.246.190.0/24 maxlen: 24
185.246.191.0/24 maxlen: 24
185.247.224.0/24 maxlen: 24
185.247.225.0/24 maxlen: 24
185.247.226.0/24 maxlen: 24
188.240.231.0/24 maxlen: 24
188.241.54.0/24 maxlen: 24
213.218.160.0/24 maxlen: 24
213.218.161.0/24 maxlen: 24
2a06:1700::/48 maxlen: 48
2a06:1700:1::/48 maxlen: 48
2a06:1700:2::/48 maxlen: 48
2a06:1700:3::/48 maxlen: 48
2a06:1700:4::/48 maxlen: 48
2a06:1700:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:65:ff:26:f3:03:a0:a2:ca:4f:b5:73:49:0b:9e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Jun 24 11:31:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5055f7eacad4a60b56b70b210c8d366230fcf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:7c:1e:6d:db:a2:80:26:c3:64:af:70:73:
02:5c:08:ba:c9:18:25:79:2e:17:76:9b:66:04:d4:
7c:df:e9:65:2a:22:dd:75:da:26:9c:76:66:29:4f:
54:7e:2e:41:19:a9:58:7f:c5:1e:f1:f1:ae:c4:2a:
08:f5:a7:c0:94:a8:20:88:0b:c2:01:72:5a:38:ac:
68:8e:62:e4:52:aa:01:13:8b:f0:e5:ec:f5:33:a1:
8f:02:cf:01:d4:36:91:d3:57:d9:99:0f:22:9c:7b:
9b:e6:d3:86:ff:c4:82:fa:44:86:4e:03:ed:f3:ae:
cc:b5:64:5e:22:a2:d0:d7:bf:27:e1:74:50:45:2e:
02:c4:1f:56:8e:ce:97:5b:b3:ba:1f:c0:24:1c:97:
c4:c3:b2:52:1e:e1:5f:89:13:85:31:f8:d4:7c:68:
d4:ac:5f:0b:99:72:e5:db:95:a0:7b:ed:03:4d:e0:
2a:db:eb:7e:01:e5:e4:2a:bb:09:4c:e4:8f:c4:dc:
de:c7:4c:f9:59:0a:6f:ec:43:11:89:be:ca:d4:2e:
fe:28:ba:a2:32:a5:fc:95:85:9b:79:9a:49:00:48:
c0:32:df:94:a6:93:68:84:17:45:9b:b8:aa:26:5b:
02:13:5f:96:b1:f0:ec:67:3e:bb:79:83:90:74:a4:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:05:5F:7E:AC:AD:4A:60:B5:6B:70:B2:10:C8:D3:66:23:0F:CF:62
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/1QVffqytSmC1a3CyEMjTZiMPz2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.68.0/24
37.228.128.0/23
85.193.77.0/24
94.198.190.0/24
95.133.166.0/23
185.10.68.0/24
185.100.84.0/22
185.146.232.0-185.146.234.255
185.165.168.0/22
185.246.188.0/22
185.247.224.0-185.247.226.255
188.240.231.0/24
188.241.54.0/24
213.218.160.0/23
IPv6:
2a06:1700::-2a06:1700:4:ffff:ffff:ffff:ffff:ffff
2a06:1700:100::/48
Signature Algorithm: sha256WithRSAEncryption
99:31:a4:92:20:57:50:d7:36:51:81:00:5c:b1:04:5a:49:6b:
b3:3d:0f:00:d3:25:61:ec:a8:d9:13:53:9a:8d:d3:34:b0:c9:
0c:c6:d9:fd:3e:d6:b8:ae:59:76:a0:72:b3:19:99:23:0f:e3:
cf:63:8e:69:55:e2:9b:00:ad:9d:ca:67:01:64:3d:90:78:4b:
cc:a5:00:f5:b5:a9:c6:95:76:06:35:52:e2:25:1d:94:02:67:
75:a8:57:a4:e0:b1:dc:3f:6d:b1:6a:e5:33:0b:49:9b:d3:0b:
bd:e4:42:c7:9f:84:99:1f:87:40:56:29:0c:bc:c6:75:e3:14:
f5:ef:88:96:cb:57:07:1b:1b:e2:c9:41:9d:7d:4c:84:03:6b:
bb:44:01:56:d5:fb:e4:5e:6d:87:5c:d3:78:6e:ef:5b:b1:d0:
aa:6d:dd:52:9d:db:76:3d:1a:4e:e1:0a:f0:50:45:95:73:35:
b0:70:8e:8c:f5:31:9b:4e:2d:e1:fa:13:6b:9e:5b:b9:33:43:
4c:0a:8b:9e:78:fd:f3:1a:14:a7:c8:8e:cb:c1:a7:e1:93:86:
d2:ee:58:b9:ca:80:b4:b1:09:7a:04:84:70:15:85:6c:34:d0:
e0:29:97:55:20:66:d3:be:89:50:3e:07:6c:39:84:32:2d:aa:
78:98:fa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:25 2026 by rpki-client