Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/rQnQSbd7o9-OvIgKv8h__OmAsEY.roa
File: rQnQSbd7o9-OvIgKv8h__OmAsEY.roa (raw, json)
Hash identifier: ZDErkXEmgB/Etshg0U0eYbGFMJVBShvWYxaaJXM10Z4=
Subject key identifier: AD:09:D0:49:B7:7B:A3:DF:8E:BC:88:0A:BF:C8:7F:FC:E9:80:B0:46
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 01A0476497765399DDCE1FA450604959FD90
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/rQnQSbd7o9-OvIgKv8h__OmAsEY.roa
Signing time: Fri 28 Aug 2026 08:02:49 +0000
ROA not before: Fri 28 Aug 2026 08:02:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24768
IP address blocks: 5.253.180.0/24 maxlen: 24
5.253.181.0/24 maxlen: 24
5.253.182.0/24 maxlen: 24
5.253.183.0/24 maxlen: 24
82.102.7.0/24 maxlen: 24
94.46.12.0/22 maxlen: 22
94.46.12.0/24 maxlen: 24
94.46.13.0/24 maxlen: 24
94.46.14.0/24 maxlen: 24
94.46.15.0/24 maxlen: 24
94.46.16.0/22 maxlen: 22
94.46.16.0/24 maxlen: 24
94.46.20.0/22 maxlen: 22
94.46.20.0/24 maxlen: 24
94.46.21.0/24 maxlen: 24
94.46.22.0/24 maxlen: 24
94.46.23.0/24 maxlen: 24
94.46.25.0/24 maxlen: 24
94.46.26.0/24 maxlen: 24
94.46.27.0/24 maxlen: 24
94.46.28.0/22 maxlen: 22
94.46.28.0/24 maxlen: 24
94.46.29.0/24 maxlen: 24
94.46.30.0/24 maxlen: 24
94.46.31.0/24 maxlen: 24
94.46.128.0/21 maxlen: 21
94.46.132.0/24 maxlen: 24
94.46.133.0/24 maxlen: 24
94.46.160.0/20 maxlen: 24
94.46.176.0/21 maxlen: 21
94.46.179.0/24 maxlen: 24
94.46.182.0/24 maxlen: 24
109.71.40.0/21 maxlen: 21
109.71.40.0/24 maxlen: 24
109.71.41.0/24 maxlen: 24
109.71.42.0/24 maxlen: 24
109.71.43.0/24 maxlen: 24
109.71.44.0/24 maxlen: 24
109.71.45.0/24 maxlen: 24
109.71.46.0/24 maxlen: 24
109.71.47.0/24 maxlen: 24
130.185.80.0/21 maxlen: 21
130.185.81.0/24 maxlen: 24
130.185.82.0/24 maxlen: 24
130.185.83.0/24 maxlen: 24
130.185.84.0/24 maxlen: 24
130.185.85.0/24 maxlen: 24
130.185.86.0/24 maxlen: 24
130.185.87.0/24 maxlen: 24
185.15.20.0/22 maxlen: 22
185.15.20.0/24 maxlen: 24
185.15.22.0/24 maxlen: 24
185.15.23.0/24 maxlen: 24
2a00:1650::/33 maxlen: 33
2a00:1650:0:1000::/64 maxlen: 64
2a00:1650:8000::/33 maxlen: 33
2a09:58c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:64:97:76:53:99:dd:ce:1f:a4:50:60:49:59:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Aug 28 08:02:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad09d049b77ba3df8ebc880abfc87ffce980b046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:d5:f1:b7:2e:20:64:e8:8c:ac:0a:57:fc:
27:d5:78:77:60:c0:f7:06:8f:9e:08:db:40:a5:16:
3e:75:e2:40:80:ad:73:b7:9c:7c:38:77:a3:33:77:
5d:75:64:87:e4:7c:35:57:94:8a:1e:55:9b:d7:47:
23:b9:2a:84:35:1c:88:54:a3:a6:a2:74:ba:19:56:
d8:f4:51:ff:c6:65:7b:2e:7e:2d:17:3d:af:fb:3f:
17:80:a7:bc:2b:f3:c1:9f:97:7b:88:fe:88:d0:4b:
e5:d4:ed:61:f2:58:bb:b2:e3:b6:21:d7:b7:89:38:
7a:ef:46:9c:5d:5b:5f:41:96:c6:b1:cf:15:f6:ec:
d2:7c:e5:0d:76:b9:6d:9b:8e:c6:84:08:aa:83:43:
e9:df:aa:2c:df:6e:fa:ad:ac:91:2d:96:e8:7a:3c:
a4:12:a5:3a:76:cc:09:1b:01:c5:99:86:89:4d:a6:
d2:6f:29:48:c0:6f:78:02:03:d0:e7:f3:9d:05:8a:
b3:f1:05:20:39:c0:2a:81:86:4e:29:d4:d0:f0:5f:
7f:93:b1:29:aa:a4:1d:4e:d2:ed:7f:31:56:52:c0:
be:19:39:35:b1:2f:bb:01:cd:5b:a4:0e:84:1e:06:
1c:32:5a:9e:be:9d:52:c4:12:f8:28:0b:a4:31:bf:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:09:D0:49:B7:7B:A3:DF:8E:BC:88:0A:BF:C8:7F:FC:E9:80:B0:46
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/rQnQSbd7o9-OvIgKv8h__OmAsEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.180.0/22
82.102.7.0/24
94.46.12.0-94.46.23.255
94.46.25.0-94.46.31.255
94.46.128.0/21
94.46.160.0-94.46.183.255
109.71.40.0/21
130.185.80.0/21
185.15.20.0/22
IPv6:
2a00:1650::/32
2a09:58c0::/48
Signature Algorithm: sha256WithRSAEncryption
93:44:5a:ad:e3:3e:5e:c0:d1:d3:74:45:7c:bb:97:56:b3:51:
19:de:09:03:a2:e0:d3:35:db:af:18:1f:fb:2e:cb:de:3f:40:
92:f3:e5:97:08:a5:b9:dd:06:05:17:11:e5:c3:00:e5:88:a2:
ad:b7:bf:e5:09:85:0b:45:97:d6:30:f6:35:10:f5:25:07:d6:
be:89:a4:85:e3:12:c1:0e:e3:42:16:33:e2:50:93:29:5b:1c:
ba:bb:13:4f:45:b4:3e:d8:f3:cc:72:83:4c:0f:c0:63:06:47:
3c:7f:ab:b5:ce:00:99:4b:17:5e:06:6d:51:52:76:e6:a6:c3:
ed:81:b5:bb:d8:73:f5:54:e2:13:dd:4e:c5:bb:55:12:25:d4:
5f:87:77:63:a0:cf:73:1b:29:9b:b4:09:10:01:e0:d5:6e:df:
23:d1:b7:32:05:96:24:a1:56:78:f1:b5:c0:54:fb:4e:7b:8a:
e8:50:d4:7f:49:7a:56:a8:df:9e:ac:12:0e:d1:1b:f9:cf:55:
98:a9:0b:44:1c:98:ba:70:f4:37:c3:42:a1:29:09:88:f2:f4:
f2:7e:70:87:9e:a7:2e:74:6c:8c:d0:bf:97:e5:2a:76:e9:b8:
2e:c4:7d:17:2b:17:0e:fa:fe:ef:47:21:b0:4b:ed:90:4c:cd:
9d:c8:60:24
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAaBHZJd2U5ndzh+kUGBJWf2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi
NDNhMTgwHhcNMjYwODI4MDgwMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDA5ZDA0OWI3N2JhM2RmOGViYzg4MGFiZmM4N2ZmY2U5ODBiMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsvV8bcuIGTojKwKV/wn1Xh3YMD3
Bo+eCNtApRY+deJAgK1zt5x8OHejM3dddWSH5Hw1V5SKHlWb10cjuSqENRyIVKOm
onS6GVbY9FH/xmV7Ln4tFz2v+z8XgKe8K/PBn5d7iP6I0Evl1O1h8li7suO2Ide3
iTh670acXVtfQZbGsc8V9uzSfOUNdrltm47GhAiqg0Pp36os3276rayRLZboejyk
EqU6dswJGwHFmYaJTabSbylIwG94AgPQ5/OdBYqz8QUgOcAqgYZOKdTQ8F9/k7Ep
qqQdTtLtfzFWUsC+GTk1sS+7Ac1bpA6EHgYcMlqevp1SxBL4KAukMb+1NQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFK0J0Em3e6PfjryICr/If/zpgLBGMB8GA1UdIwQY
MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt
YWFiYjA2MmU0MGRiLzEvclFuUVNiZDdvOS1PdklnS3Y4aF9fT21Bc0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi
LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBUBAIAATBOAwQCBf20AwQA
UmYHMAwDBAJeLgwDBANeLhAwDAMEAF4uGQMEBV4uAAMEA14ugDAMAwQFXi6gAwQD
Xi6wAwQDbUcoAwQDgrlQAwQCuQ8UMBYEAgACMBADBQAqABZQAwcAKglYwAAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCTRFqt4z5ewNHTdEV8u5dWs1EZ3gkDouDTNduvGB/7
LsveP0CS8+WXCKW53QYFFxHlwwDliKKtt7/lCYULRZfWMPY1EPUlB9a+iaSF4xLB
DuNCFjPiUJMpWxy6uxNPRbQ+2PPMcoNMD8BjBkc8f6u1zgCZSxdeBm1RUnbmpsPt
gbW72HP1VOIT3U7Fu1USJdRfh3djoM9zGymbtAkQAeDVbt8j0bcyBZYkoVZ48bXA
VPtOe4roUNR/SXpWqN+erBIO0Rv5z1WYqQtEHJi6cPQ3w0KhKQmI8vTyfnCHnqcu
dGyM0L+X5Sp26bguxH0XKxcO+v7vRyGwS+2QTM2dyGAk
-----END CERTIFICATE-----
Generated at Wed Sep 16 16:52:42 2026 by rpki-client