Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/QWk9GiDzxcKmdKlPAqwLjmLDG3g.roa
File: QWk9GiDzxcKmdKlPAqwLjmLDG3g.roa (raw, json)
Hash identifier: C/bVd8wMcMdGfEa1kfbfzLpajs56ejFQLgOU3mZpCHg=
Subject key identifier: 41:69:3D:1A:20:F3:C5:C2:A6:74:A9:4F:02:AC:0B:8E:62:C3:1B:78
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 01A131B21CF605C42A1FADDE5FDC463C4282
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/QWk9GiDzxcKmdKlPAqwLjmLDG3g.roa
Signing time: Mon 12 Oct 2026 19:58:38 +0000
ROA not before: Mon 12 Oct 2026 19:58:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48040
IP address blocks: 31.172.65.0/24 maxlen: 24
81.85.79.0/24 maxlen: 24
89.127.193.0/24 maxlen: 24
89.127.201.0/24 maxlen: 24
89.127.204.0/24 maxlen: 24
89.127.207.0/24 maxlen: 24
89.127.212.0/24 maxlen: 24
89.127.222.0/24 maxlen: 24
130.17.1.0/24 maxlen: 24
130.17.8.0/24 maxlen: 24
130.17.14.0/24 maxlen: 24
130.17.16.0/24 maxlen: 24
130.17.28.0/24 maxlen: 24
162.248.163.0/24 maxlen: 24
185.21.11.0/24 maxlen: 24
185.134.201.0/24 maxlen: 24
194.154.25.0/24 maxlen: 24
194.154.31.0/24 maxlen: 24
199.68.198.0/24 maxlen: 24
199.68.199.0/24 maxlen: 24
199.195.197.0/24 maxlen: 24
213.193.197.0/24 maxlen: 24
213.239.158.0/24 maxlen: 24
2a02:6b40:800e::/48 maxlen: 48
2a02:6b40:800f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b2:1c:f6:05:c4:2a:1f:ad:de:5f:dc:46:3c:42:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Oct 12 19:58:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41693d1a20f3c5c2a674a94f02ac0b8e62c31b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:75:23:e4:ff:b2:30:93:be:61:c3:8c:fa:
c6:cc:f5:db:c4:75:8d:05:12:67:b0:40:3b:61:72:
e1:87:5c:bc:8d:b6:e0:4f:63:7b:e7:19:c1:6c:9f:
c2:42:f7:3a:f3:97:8f:3a:35:08:fb:7e:67:9f:52:
f0:e8:02:d2:26:f0:a9:5a:7c:2f:1e:24:1c:b2:1d:
5c:d2:fa:4f:23:f8:7a:df:0b:e4:85:8a:b5:c0:12:
dd:c7:60:5c:00:25:12:bd:12:65:a4:f3:ca:47:02:
81:aa:f3:36:aa:55:85:f6:6b:fe:d7:22:9a:4d:04:
2f:06:f3:f0:76:5a:71:b3:a0:98:ae:ff:9d:60:45:
56:f6:af:72:9c:a4:7f:4b:31:73:52:d4:85:ba:37:
01:08:19:71:19:ed:5f:ac:03:b7:c8:86:d8:9d:17:
e2:a3:58:bc:ef:e4:69:ad:31:c3:2e:88:bd:db:5e:
50:8b:c9:11:da:cc:8c:c6:b4:ba:a3:30:a0:c6:c9:
16:e2:28:0f:6d:3b:69:7d:11:f0:2d:00:7c:99:38:
a5:a6:34:31:16:b5:65:ff:1b:9e:59:83:84:01:43:
71:1a:3a:02:1d:5b:76:e8:42:48:3b:2d:ed:eb:df:
b1:6b:05:e4:0e:5d:1e:50:8b:27:b3:6a:64:e6:25:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:3D:1A:20:F3:C5:C2:A6:74:A9:4F:02:AC:0B:8E:62:C3:1B:78
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/QWk9GiDzxcKmdKlPAqwLjmLDG3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.65.0/24
81.85.79.0/24
89.127.193.0/24
89.127.201.0/24
89.127.204.0/24
89.127.207.0/24
89.127.212.0/24
89.127.222.0/24
130.17.1.0/24
130.17.8.0/24
130.17.14.0/24
130.17.16.0/24
130.17.28.0/24
162.248.163.0/24
185.21.11.0/24
185.134.201.0/24
194.154.25.0/24
194.154.31.0/24
199.68.198.0/23
199.195.197.0/24
213.193.197.0/24
213.239.158.0/24
IPv6:
2a02:6b40:800e::/47
Signature Algorithm: sha256WithRSAEncryption
85:29:d6:7d:f4:17:73:ef:79:8e:8a:6a:91:22:31:93:11:76:
a1:e1:64:cb:73:54:93:a1:44:8b:2a:ee:38:5d:5d:5d:44:e4:
73:a8:8c:f6:06:4f:f7:35:aa:b0:1d:c3:29:9f:7f:69:66:2f:
38:d7:78:37:32:06:15:02:bc:22:da:3e:dc:7e:c6:ee:19:6c:
b8:78:49:e6:c6:28:8c:5e:6e:76:49:a9:c0:e4:a7:67:dc:71:
8e:69:2d:7a:a6:7c:b9:13:85:8b:40:64:dc:b4:fb:16:1f:ea:
be:ce:c2:f2:e6:9c:a6:f1:53:39:11:d3:8c:e3:68:82:4d:dd:
e9:0e:68:9e:21:88:cd:96:6f:68:df:42:98:88:d4:4c:91:84:
d9:17:4e:73:c8:cc:cd:f8:d8:4c:b9:2d:71:da:33:89:3c:c9:
60:c7:4b:e7:c5:62:b6:4c:5b:1f:e2:86:34:d3:1b:84:13:7c:
0f:e0:17:75:cb:4c:d5:cd:35:82:8f:97:05:d3:34:26:74:3d:
75:69:86:10:c1:01:38:87:94:7e:09:87:ec:5e:19:cc:a8:91:
d4:62:9f:2b:74:77:f7:5b:84:6f:2f:c2:c9:3d:1c:7d:ca:b0:
6e:ad:38:08:63:0d:ff:4e:7b:39:26:87:13:28:e8:0d:cf:d7:
ce:7a:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:43 2026 by rpki-client