Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Qd42JrXjyAV1oZR2xviPrPaEVl4.roa
File: Qd42JrXjyAV1oZR2xviPrPaEVl4.roa (raw, json)
Hash identifier: YgePSASlPXP9t223DSSb820cVfWyu3kwGiqD0XQ6QkE=
Subject key identifier: 41:DE:36:26:B5:E3:C8:05:75:A1:94:76:C6:F8:8F:AC:F6:84:56:5E
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019E9314BBFD3420E51FA7FA6B399CCCD01E
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Qd42JrXjyAV1oZR2xviPrPaEVl4.roa
Signing time: Thu 04 Jun 2026 14:41:10 +0000
ROA not before: Thu 04 Jun 2026 14:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204339
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.13.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.119.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
103.85.112.0/24 maxlen: 24
103.85.113.0/24 maxlen: 24
104.128.131.0/24 maxlen: 24
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.61.0/24 maxlen: 24
132.243.20.0/24 maxlen: 24
132.243.21.0/24 maxlen: 24
132.243.22.0/24 maxlen: 24
132.243.23.0/24 maxlen: 24
135.136.181.0/24 maxlen: 24
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
135.136.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:14:bb:fd:34:20:e5:1f:a7:fa:6b:39:9c:cc:d0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 4 14:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41de3626b5e3c80575a19476c6f88facf684565e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:91:26:da:70:1f:a6:ea:77:10:97:ed:15:
ae:37:ff:68:9b:c3:34:1f:74:40:26:31:2c:e1:b0:
6b:8c:9a:a0:d4:f0:d0:53:b7:d2:63:da:74:b0:f2:
33:72:35:cc:1b:83:49:1f:5e:3b:2c:0c:f1:4d:21:
7b:49:59:01:66:d5:d8:ff:0b:6d:45:9e:53:10:cb:
94:ba:5e:c6:de:7b:1e:dd:6c:33:15:d4:e7:22:ad:
e7:7b:82:41:9f:5b:a9:b9:b8:73:28:1c:71:85:61:
f4:51:8e:cf:0c:9a:b2:ec:9e:43:df:f1:a6:a4:3f:
75:cb:08:73:b6:4c:04:01:98:7b:3a:66:4a:eb:f4:
bc:47:31:86:96:56:b8:15:62:6f:fe:36:20:41:be:
de:c7:62:38:00:d5:58:49:c8:31:42:fd:21:c0:6d:
47:f9:11:a8:62:25:2e:e3:01:e8:94:84:d3:80:1c:
25:43:1f:af:62:7b:4d:fb:26:7b:c7:ac:aa:f4:21:
b8:28:e2:39:06:0c:e3:1f:d2:9a:8c:61:52:eb:1d:
92:35:e9:d8:fd:12:d2:02:36:03:45:14:dc:58:55:
15:ea:c2:22:46:83:a5:2b:b5:b2:5b:b8:ab:61:4d:
7c:dc:0c:b8:83:d0:b8:f2:a4:f3:bf:33:6d:74:8d:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DE:36:26:B5:E3:C8:05:75:A1:94:76:C6:F8:8F:AC:F6:84:56:5E
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Qd42JrXjyAV1oZR2xviPrPaEVl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/23
95.81.93.0/24
95.81.119.0-95.81.120.255
103.85.112.0/23
104.128.131.0/24
104.128.142.0/23
109.69.61.0/24
132.243.20.0/22
135.136.181.0-135.136.183.255
135.136.189.0/24
Signature Algorithm: sha256WithRSAEncryption
42:13:64:55:bc:42:04:d6:ce:68:e7:77:cd:d5:a2:5b:96:08:
af:1e:31:1c:2a:4a:3d:7a:e6:ab:d5:8b:9e:ae:27:0b:2d:ec:
cf:3a:db:48:d7:e1:cf:33:bd:45:f4:d0:7a:2e:f7:ae:72:80:
c4:6f:ff:55:f4:a1:da:72:b6:5b:41:9e:12:46:22:84:48:47:
0e:4f:ca:5e:62:be:67:d3:3a:ac:7a:41:f5:b4:e6:10:63:59:
60:78:3e:bc:35:cf:fd:66:f2:fb:fd:26:1a:34:01:9b:2e:2c:
c6:07:a5:e1:60:a3:4b:6c:d3:9b:fb:58:81:18:4f:00:72:76:
38:0d:c1:b4:39:78:e3:cc:93:e2:6a:44:ba:0e:7a:7a:04:77:
af:37:99:5b:ac:4d:42:98:aa:bd:73:c4:13:fe:99:00:13:1d:
8b:00:de:3b:da:45:4d:56:bc:9e:ed:9e:e4:c2:78:c7:7f:ff:
64:18:b8:98:1a:aa:ab:7a:8a:9c:04:e0:b1:e6:89:ec:6b:ef:
da:d6:90:3b:9c:58:91:2c:58:87:37:08:ba:8d:0a:23:ff:50:
9d:d7:b9:61:d4:c8:b9:ce:1a:bf:89:a5:46:89:ef:2e:ae:dd:
06:3c:bc:37:43:cb:ed:fb:b8:80:85:e5:52:cc:32:9a:07:3a:
8e:88:18:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:34 2026 by rpki-client