Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/qc_dQh5RKoHE-mlJq9abZyl5JUI.roa
File: qc_dQh5RKoHE-mlJq9abZyl5JUI.roa (raw, json)
Hash identifier: B95dhYhAYCE48Hv3JKdbp0E5RF/uMFx9nFUHRc4ClXk=
Subject key identifier: A9:CF:DD:42:1E:51:2A:81:C4:FA:69:49:AB:D6:9B:67:29:79:25:42
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A0DDED0A4BC5F19BCA89A089004A56F130
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/qc_dQh5RKoHE-mlJq9abZyl5JUI.roa
Signing time: Sat 26 Sep 2026 13:34:54 +0000
ROA not before: Sat 26 Sep 2026 13:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51173
IP address blocks: 37.203.48.0/24 maxlen: 24
37.203.49.0/24 maxlen: 24
37.203.50.0/24 maxlen: 24
37.203.51.0/24 maxlen: 24
37.203.52.0/24 maxlen: 24
37.203.53.0/24 maxlen: 24
89.106.136.0/24 maxlen: 24
89.106.137.0/24 maxlen: 24
89.106.139.0/24 maxlen: 24
89.106.140.0/24 maxlen: 24
89.106.141.0/24 maxlen: 24
89.106.142.0/24 maxlen: 24
89.106.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ed:0a:4b:c5:f1:9b:ca:89:a0:89:00:4a:56:f1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Sep 26 13:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9cfdd421e512a81c4fa6949abd69b6729792542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:5a:98:b1:57:e1:f6:57:c5:5f:27:17:7d:
eb:c8:06:ee:66:e6:94:61:6b:c0:14:e3:8d:83:ba:
a0:25:dd:ad:03:70:be:b4:c4:ae:0c:86:f3:ac:33:
32:4f:53:5e:92:4c:52:5b:db:96:81:e6:29:d8:88:
ea:73:5e:14:18:4f:9a:ad:7f:81:92:87:ae:a2:ad:
db:56:06:4f:9b:30:94:d6:d5:c9:7c:df:c5:5d:57:
b5:0a:b0:83:95:24:6a:4e:44:7c:d1:68:f4:37:80:
b2:d3:a7:ce:9e:26:5f:c0:6d:41:a1:45:47:0a:47:
e4:56:a7:e5:7c:f7:f1:0a:04:27:ab:91:ca:3e:a1:
09:0c:48:ca:e8:ae:d9:92:b8:9a:55:05:c7:13:82:
d0:3b:71:48:e3:65:fc:52:62:1f:f9:f3:1d:92:8e:
61:16:6f:50:7b:b8:e6:95:d0:2f:f5:ca:44:8b:71:
5c:c8:75:ea:2c:c1:65:4e:3b:d0:cd:6c:93:09:6e:
9b:c0:01:c9:b6:55:af:94:8b:89:9b:06:ce:d2:af:
39:77:78:f3:fc:37:14:0d:a5:40:4e:28:d2:62:00:
90:ce:87:75:db:68:1e:e7:d6:90:0f:65:ab:2e:46:
f8:c7:5d:17:19:02:a9:eb:10:18:a0:be:4a:87:24:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:DD:42:1E:51:2A:81:C4:FA:69:49:AB:D6:9B:67:29:79:25:42
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/qc_dQh5RKoHE-mlJq9abZyl5JUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.48.0-37.203.53.255
89.106.136.0/23
89.106.139.0-89.106.143.255
Signature Algorithm: sha256WithRSAEncryption
5a:22:e7:39:d0:14:bd:99:2c:5a:73:50:4f:03:ac:98:e2:5b:
95:79:48:cc:30:4f:5a:f7:96:69:3b:89:ab:b3:dd:53:e6:c0:
84:ea:2f:f3:b7:37:83:d1:6b:85:8b:ef:0f:e1:a1:c0:74:fe:
8a:ea:fa:61:36:9d:64:f5:eb:5f:ad:3e:e5:0a:2a:3e:b2:76:
23:ab:0c:14:13:99:3c:6d:e9:82:09:a8:71:d3:60:03:ff:9a:
16:d0:b8:3a:07:a7:4f:df:b8:43:6a:d3:48:6c:61:0e:19:13:
b7:cb:dc:0e:b9:fa:fe:07:06:6e:27:7c:93:20:dd:62:e1:eb:
28:8d:85:85:0f:2d:24:8b:e6:56:51:73:7a:77:9e:1e:6b:56:
3a:8d:01:59:31:6d:8e:2c:32:42:73:be:5a:72:f3:f7:b8:95:
2c:6e:3d:fa:20:26:5c:91:ed:35:ed:c0:d8:87:66:0d:ab:f4:
2f:81:f5:7e:73:eb:96:80:ce:95:41:b8:d5:6b:5a:26:28:ce:
2f:a4:ce:20:95:b4:64:e4:83:92:96:47:18:00:e8:61:23:cf:
f9:37:11:4f:bd:8a:1c:b7:5d:42:7f:d6:61:1e:2f:bd:ce:53:
02:d6:6f:fd:51:0f:fd:b7:80:2e:fc:f7:a0:7d:24:da:b8:e5:
15:e9:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:45:25 2026 by rpki-client