Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/qp981CWaAhJGZSFVeukRH1vZLCs.roa
File: qp981CWaAhJGZSFVeukRH1vZLCs.roa (raw, json)
Hash identifier: LD2Ef8NFp9+LfbXlntUc3ly3on2B23cWNN5jr7deXSA=
Subject key identifier: AA:9F:7C:D4:25:9A:02:12:46:65:21:55:7A:E9:11:1F:5B:D9:2C:2B
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019DB3B6FAD9361465AE7160B6E2F926C3DD
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/qp981CWaAhJGZSFVeukRH1vZLCs.roa
Signing time: Wed 22 Apr 2026 05:43:26 +0000
ROA not before: Wed 22 Apr 2026 05:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16003
IP address blocks: 31.172.74.0/24 maxlen: 24
31.172.78.0/24 maxlen: 24
79.132.137.0/24 maxlen: 24
79.132.139.0/24 maxlen: 24
81.85.76.0/24 maxlen: 24
89.127.195.0/24 maxlen: 24
89.127.202.0/24 maxlen: 24
89.127.205.0/24 maxlen: 24
89.127.206.0/24 maxlen: 24
103.75.125.0/24 maxlen: 24
103.75.126.0/24 maxlen: 24
162.248.161.0/24 maxlen: 24
185.18.52.0/22 maxlen: 22
185.18.52.0/24 maxlen: 24
185.21.9.0/24 maxlen: 24
185.21.10.0/24 maxlen: 24
194.154.26.0/24 maxlen: 24
213.239.157.0/24 maxlen: 24
213.239.159.0/24 maxlen: 24
217.177.11.0/24 maxlen: 24
217.177.73.0/24 maxlen: 24
217.194.148.0/24 maxlen: 24
2a02:6b40:8002::/48 maxlen: 48
2a02:6b40:8003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:b6:fa:d9:36:14:65:ae:71:60:b6:e2:f9:26:c3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Apr 22 05:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa9f7cd4259a0212466521557ae9111f5bd92c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:f0:ed:64:2c:6d:9f:c8:40:70:db:8b:5a:
f5:90:24:a5:64:14:bb:82:45:54:dd:c7:b2:26:c9:
41:d4:f0:75:1c:ad:32:3b:ae:d8:78:35:d0:ee:2b:
ed:22:1a:47:cb:d4:5b:4e:31:58:38:e4:86:b4:d1:
bc:83:17:25:18:0c:45:22:5c:4b:46:89:44:b1:7f:
a9:64:a8:23:7c:0b:2d:33:a2:39:52:05:aa:a5:3b:
01:9f:27:6c:6a:e6:cf:48:a2:af:c3:f1:7c:3b:76:
a8:23:c3:50:b5:5e:a1:be:dc:f7:cb:1b:62:fa:fc:
fe:54:d7:24:1a:72:57:e8:e3:ef:af:81:26:cf:ed:
ea:12:93:c3:b4:d6:0f:c9:2e:de:4e:b9:5d:90:25:
81:24:d8:b2:46:26:c7:1c:5e:92:83:20:31:37:78:
16:b1:e4:1f:fb:7c:9e:bf:09:0e:ba:94:43:d5:bb:
ea:b3:b3:c9:5b:b5:a5:91:7e:1f:c4:b8:1b:ba:55:
b7:d5:0d:2f:a4:18:ac:65:af:e3:02:71:3b:06:14:
92:4b:3b:f9:c4:b9:77:f5:b0:97:f3:e4:c0:f8:b4:
e6:70:b8:35:14:4b:6e:23:76:74:92:6b:56:b1:8a:
2c:fb:aa:ab:12:4f:e8:5c:6a:a5:d6:e2:d9:3e:18:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9F:7C:D4:25:9A:02:12:46:65:21:55:7A:E9:11:1F:5B:D9:2C:2B
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/qp981CWaAhJGZSFVeukRH1vZLCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.74.0/24
31.172.78.0/24
79.132.137.0/24
79.132.139.0/24
81.85.76.0/24
89.127.195.0/24
89.127.202.0/24
89.127.205.0-89.127.206.255
103.75.125.0-103.75.126.255
162.248.161.0/24
185.18.52.0/22
185.21.9.0-185.21.10.255
194.154.26.0/24
213.239.157.0/24
213.239.159.0/24
217.177.11.0/24
217.177.73.0/24
217.194.148.0/24
IPv6:
2a02:6b40:8002::/47
Signature Algorithm: sha256WithRSAEncryption
70:a8:19:dd:f9:43:f5:7d:58:75:67:31:45:16:29:90:19:d0:
8b:07:c8:0d:13:9f:41:3b:6a:ee:7e:01:65:4f:fc:fa:7f:0d:
0d:fd:c0:4d:44:6d:52:1a:55:a9:24:8f:4e:bc:3d:74:24:18:
91:22:f0:8c:52:5c:47:22:e8:f5:ff:da:a4:09:37:70:8f:07:
19:bb:d5:ac:68:9f:d7:41:50:2a:12:c0:29:16:37:61:0f:57:
08:c7:92:d5:74:41:5f:dd:1b:62:1a:4e:52:76:5f:b8:6c:88:
13:96:f9:ac:46:9a:42:fc:58:80:a1:5c:d3:74:fa:fa:92:25:
38:44:eb:be:43:48:4f:f2:28:23:b8:a7:34:ca:f3:4e:6e:a8:
c3:31:58:93:f8:51:30:c1:52:c3:c1:74:10:5f:44:1c:1e:5d:
a6:c4:10:9e:aa:9f:8f:f5:5f:05:23:1d:1b:e2:67:2d:ca:46:
21:ad:1c:af:0b:07:8b:40:2c:9d:0c:02:cc:83:4c:ce:77:fa:
87:c4:81:1e:eb:01:98:8e:ba:83:32:c7:72:18:99:4a:d0:97:
70:21:38:81:20:29:9b:3d:7c:92:1f:8d:6a:d1:81:b7:8d:2f:
2e:03:a6:21:bd:6d:23:af:d2:00:80:92:3d:d4:5a:00:24:ce:
38:8e:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:15:19 2026 by rpki-client