Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/QI41Q1BgQgAKjDKKvOOgBlUnTsU.roa
File: QI41Q1BgQgAKjDKKvOOgBlUnTsU.roa (raw, json)
Hash identifier: veVI5hYrjAlTuuwvf4GtNwr0lHCBhI/CK1pVow6H0rw=
Subject key identifier: 40:8E:35:43:50:60:42:00:0A:8C:32:8A:BC:E3:A0:06:55:27:4E:C5
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 01A16A7356498A2E22A74696F564703A577F
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/QI41Q1BgQgAKjDKKvOOgBlUnTsU.roa
Signing time: Fri 23 Oct 2026 20:28:25 +0000
ROA not before: Fri 23 Oct 2026 20:28:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60439
IP address blocks: 45.10.76.0/22 maxlen: 24
45.10.76.0/24 maxlen: 24
45.10.77.0/24 maxlen: 24
45.10.78.0/24 maxlen: 24
45.10.79.0/24 maxlen: 24
45.12.20.0/22 maxlen: 24
45.82.92.0/22 maxlen: 24
45.82.92.0/24 maxlen: 24
45.82.93.0/24 maxlen: 24
45.82.94.0/24 maxlen: 24
45.82.95.0/24 maxlen: 24
45.90.148.0/22 maxlen: 24
45.90.148.0/24 maxlen: 24
45.90.149.0/24 maxlen: 24
45.90.150.0/24 maxlen: 24
45.90.151.0/24 maxlen: 24
45.94.80.0/22 maxlen: 24
45.94.80.0/24 maxlen: 24
45.94.81.0/24 maxlen: 24
45.94.82.0/24 maxlen: 24
45.94.83.0/24 maxlen: 24
45.131.112.0/22 maxlen: 24
45.131.112.0/24 maxlen: 24
45.131.113.0/24 maxlen: 24
45.131.114.0/24 maxlen: 24
45.131.115.0/24 maxlen: 24
45.136.212.0/22 maxlen: 24
45.136.212.0/24 maxlen: 24
45.136.213.0/24 maxlen: 24
45.136.214.0/24 maxlen: 24
45.136.215.0/24 maxlen: 24
45.141.224.0/22 maxlen: 24
45.151.80.0/24 maxlen: 24
45.151.81.0/24 maxlen: 24
45.151.82.0/24 maxlen: 24
45.151.83.0/24 maxlen: 24
85.208.196.0/24 maxlen: 24
85.208.197.0/24 maxlen: 24
85.208.198.0/24 maxlen: 24
85.208.199.0/24 maxlen: 24
91.207.248.0/24 maxlen: 24
139.28.16.0/22 maxlen: 24
193.160.22.0/24 maxlen: 24
193.160.23.0/24 maxlen: 24
193.160.30.0/24 maxlen: 24
193.160.31.0/24 maxlen: 24
2a13:8240::/40 maxlen: 48
2a13:8240:42::/48 maxlen: 48
2a13:8240:44::/48 maxlen: 48
2a13:8240:100::/40 maxlen: 48
2a13:8240:200::/40 maxlen: 48
2a13:8240:205::/48 maxlen: 48
2a13:8240:206::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:73:56:49:8a:2e:22:a7:46:96:f5:64:70:3a:57:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Oct 23 20:28:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=408e3543506042000a8c328abce3a00655274ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:9b:e8:26:e1:c8:5c:f6:aa:82:22:cc:49:
d3:40:bc:bc:5f:85:92:4d:93:36:1b:37:1f:96:73:
f8:9e:44:98:ed:b1:02:5f:d8:78:d5:44:de:2b:32:
c6:61:22:b3:9d:98:b3:2c:27:d8:08:ee:c3:1f:13:
45:96:01:2b:07:ee:6c:c3:13:3a:5d:d9:57:e8:65:
ba:d2:2f:68:ad:56:0b:2a:10:0f:ab:d6:db:ab:b9:
cc:f9:39:13:fc:78:e8:b7:b3:00:f5:f0:77:b7:21:
0d:32:a5:ab:b2:53:be:1c:94:86:46:ce:60:16:17:
94:d9:2e:fb:8f:a8:97:89:25:bd:4e:3f:24:b8:78:
1b:d1:5a:f4:a4:4a:6e:d8:fe:76:1c:3b:58:cb:19:
b6:de:66:a8:44:6c:df:94:a0:eb:b0:0b:e8:c2:9d:
52:de:30:2f:d7:fe:40:1c:ae:50:60:b8:26:6c:b0:
6e:64:e8:43:bb:ed:7e:7d:69:d1:e3:2a:47:ff:40:
7c:b7:c9:b2:ad:b7:9d:c4:02:35:fb:cf:7b:e2:ed:
b6:15:27:01:46:dc:b0:c1:69:33:ba:15:2f:bc:ca:
67:06:f4:1a:be:ab:ff:99:b6:4b:b0:d8:38:7f:62:
3a:b3:45:cb:36:a8:35:7d:d7:34:db:fc:5d:d2:1c:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8E:35:43:50:60:42:00:0A:8C:32:8A:BC:E3:A0:06:55:27:4E:C5
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/QI41Q1BgQgAKjDKKvOOgBlUnTsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.76.0/22
45.12.20.0/22
45.82.92.0/22
45.90.148.0/22
45.94.80.0/22
45.131.112.0/22
45.136.212.0/22
45.141.224.0/22
45.151.80.0/22
85.208.196.0/22
91.207.248.0/24
139.28.16.0/22
193.160.22.0/23
193.160.30.0/23
IPv6:
2a13:8240::-2a13:8240:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9e:8b:15:43:f4:3d:74:75:b9:42:aa:0b:d7:0b:88:16:f1:b8:
ee:7f:9d:02:9e:a4:da:49:ec:00:72:99:97:9a:62:d5:61:b5:
f5:6a:5b:8e:e8:40:13:4b:71:33:c0:f9:a6:19:9e:6c:c4:4c:
59:4e:f0:84:09:18:a1:73:70:2c:51:a7:c1:a1:d2:07:00:92:
ee:94:ab:5e:60:9c:a4:a3:b6:ad:94:7e:89:a8:99:17:4b:8b:
18:72:ac:01:ce:e6:b5:5a:9e:82:93:a6:7d:65:b8:c1:dd:f3:
7c:c2:45:28:29:5e:35:34:e0:1c:38:d9:d3:03:a3:61:46:7b:
33:48:b1:84:a4:a1:36:25:46:82:18:af:81:47:e5:52:b5:e2:
94:4d:7f:9c:91:aa:6c:f6:dc:46:11:37:46:b4:e4:7a:71:4f:
c1:b9:26:30:7d:ca:bd:3c:b4:be:02:ef:2e:58:00:af:90:3c:
cb:02:87:0d:5d:d6:20:9d:91:c1:35:ae:3d:33:de:fa:76:c4:
c7:3e:f7:ff:36:a7:60:a9:53:76:a1:8a:06:84:e4:62:31:cc:
67:0b:cd:0a:82:5b:bd:92:16:ee:18:c4:e8:b2:3a:f0:11:b7:
b4:49:cb:08:13:d6:cd:ad:d7:97:65:fe:ef:61:a8:db:7a:62:
04:c7:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:28 2026 by rpki-client