Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/Q3WTPfUFUp4m0ZjtwYkyBFPpV7k.roa
File: Q3WTPfUFUp4m0ZjtwYkyBFPpV7k.roa (raw, json)
Hash identifier: CT1JMwYSy6oJySNRis4zt8oqjE+2sdxgb342qVOSd2I=
Subject key identifier: 43:75:93:3D:F5:05:52:9E:26:D1:98:ED:C1:89:32:04:53:E9:57:B9
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 01A1505389E6123EE8EE0411D3EA9300902E
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/Q3WTPfUFUp4m0ZjtwYkyBFPpV7k.roa
Signing time: Sun 18 Oct 2026 18:43:34 +0000
ROA not before: Sun 18 Oct 2026 18:43:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213609
IP address blocks: 82.119.96.0/19 maxlen: 19
82.119.96.0/20 maxlen: 20
82.119.112.0/20 maxlen: 20
85.216.128.0/17 maxlen: 17
85.216.128.0/18 maxlen: 18
85.216.192.0/18 maxlen: 18
89.173.0.0/16 maxlen: 16
89.173.0.0/17 maxlen: 17
89.173.128.0/17 maxlen: 17
188.167.0.0/16 maxlen: 16
188.167.0.0/17 maxlen: 17
188.167.128.0/17 maxlen: 17
217.23.240.0/20 maxlen: 20
217.23.240.0/21 maxlen: 21
217.23.248.0/21 maxlen: 21
2a02:ab00::/29 maxlen: 29
2a02:ab00::/30 maxlen: 30
2a02:ab04::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:53:89:e6:12:3e:e8:ee:04:11:d3:ea:93:00:90:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Oct 18 18:43:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4375933df505529e26d198edc189320453e957b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:9c:6d:a8:cf:34:df:23:b8:77:a3:4e:18:
f1:9b:f0:16:eb:b9:17:ab:dd:ea:ed:5a:7a:96:64:
59:4d:53:60:e7:11:a0:ab:bc:16:46:44:83:d4:37:
34:9c:0b:7c:4f:51:a9:8c:c1:eb:89:2e:58:ef:54:
1d:8c:6e:2e:e2:0d:3d:fd:d0:1c:5a:74:b2:3e:cc:
c5:51:82:ac:f1:50:19:08:a9:82:09:d1:1f:77:94:
45:f6:4e:bd:3d:49:8a:f0:d5:0a:8d:bf:8a:fd:43:
3e:72:ab:1b:90:58:c8:3c:b0:f0:92:2f:4a:8c:ae:
d7:cc:3f:c5:a0:3e:5b:85:bd:bb:31:9c:dc:d3:75:
a0:f0:8e:8c:17:5e:0b:70:fa:bf:9e:73:85:73:89:
cb:43:8a:1e:b2:31:05:db:13:bd:bb:9b:e3:ad:61:
03:81:0b:4e:62:0a:f0:2c:4e:20:74:02:6c:db:76:
e3:6b:60:14:ef:3f:54:da:8b:5d:2f:c1:74:34:07:
89:d8:e5:30:f9:bf:01:3a:03:4d:51:da:8f:26:b8:
16:ee:8f:f2:62:07:d4:77:f6:17:3b:bf:e6:c2:53:
d7:27:ba:bb:da:f2:14:1b:2a:fd:df:46:a3:af:18:
b0:9f:b1:33:c6:09:e2:25:f8:a6:e2:49:e6:0c:29:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:75:93:3D:F5:05:52:9E:26:D1:98:ED:C1:89:32:04:53:E9:57:B9
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/Q3WTPfUFUp4m0ZjtwYkyBFPpV7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.96.0/19
85.216.128.0/17
89.173.0.0/16
188.167.0.0/16
217.23.240.0/20
IPv6:
2a02:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
72:d9:31:a8:8f:ea:86:fb:91:ac:a6:57:a3:d2:87:e7:3e:49:
ba:ca:3c:de:34:79:0a:ae:18:4a:cc:50:dc:55:1f:31:37:1d:
34:6d:c9:69:08:82:ca:1c:ca:db:83:1e:ef:1b:0f:c0:96:2e:
30:2c:22:6e:fc:53:25:eb:7f:de:f6:72:70:a7:7f:99:d9:df:
2b:f5:e3:3f:5a:78:67:6e:08:04:6b:83:40:61:32:5a:43:d9:
d6:0f:e1:d4:b2:9d:41:fa:af:cb:6b:f8:d4:05:75:46:3f:24:
e5:e6:50:43:a7:15:94:b0:fc:54:de:33:59:51:56:cc:e7:58:
6f:84:2f:77:cc:64:10:89:8b:46:45:1f:98:13:2b:04:a4:54:
55:de:45:4e:92:25:cb:e5:6f:4f:db:8c:99:98:fd:73:e2:b6:
52:e8:45:ef:a2:10:31:22:f1:86:01:15:f4:0f:57:f9:5c:57:
ce:74:9c:cc:4c:79:b2:62:52:7f:f0:b5:39:89:11:ba:95:e1:
78:8a:5e:c8:17:48:60:d7:f4:57:17:45:b1:ae:c8:f3:99:34:
79:a1:e5:44:5f:4b:af:df:ef:09:2f:41:4b:24:21:21:91:78:
7a:1f:f0:cc:b0:47:c8:bc:de:2c:a5:fc:96:ea:62:01:ed:43:
e6:2c:bd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:43 2026 by rpki-client