Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Qlnk-TU3emncuI4U9LFebnP07e0.roa
File: Qlnk-TU3emncuI4U9LFebnP07e0.roa (raw, json)
Hash identifier: HdDucwYSpeHdchyohiZw3Ulfi4Ms+K1/9jYumPe+XtY=
Subject key identifier: 42:59:E4:F9:35:37:7A:69:DC:B8:8E:14:F4:B1:5E:6E:73:F4:ED:ED
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01A135B7F67F3FCC0D528D4FD6E79B43AB56
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Qlnk-TU3emncuI4U9LFebnP07e0.roa
Signing time: Tue 13 Oct 2026 14:43:31 +0000
ROA not before: Tue 13 Oct 2026 14:43:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42894
IP address blocks: 131.237.0.0/16 maxlen: 24
131.237.0.0/24 maxlen: 24
131.237.1.0/24 maxlen: 24
131.237.8.0/24 maxlen: 24
131.237.10.0/23 maxlen: 23
131.237.10.0/24 maxlen: 24
131.237.11.0/24 maxlen: 24
131.237.26.0/23 maxlen: 23
131.237.26.0/24 maxlen: 24
131.237.27.0/24 maxlen: 24
131.237.32.0/24 maxlen: 24
131.237.40.0/24 maxlen: 24
131.237.41.0/24 maxlen: 24
131.237.42.0/24 maxlen: 24
131.237.43.0/24 maxlen: 24
131.237.70.0/24 maxlen: 24
131.237.71.0/24 maxlen: 24
131.237.72.0/24 maxlen: 24
131.237.73.0/24 maxlen: 24
131.237.74.0/24 maxlen: 24
131.237.77.0/24 maxlen: 24
131.237.78.0/24 maxlen: 24
131.237.80.0/24 maxlen: 24
131.237.83.0/24 maxlen: 24
131.237.84.0/24 maxlen: 24
131.237.96.0/24 maxlen: 24
131.237.120.0/24 maxlen: 24
131.237.121.0/24 maxlen: 24
131.237.163.0/24 maxlen: 24
145.31.0.0/16 maxlen: 24
145.31.192.0/24 maxlen: 24
145.31.193.0/24 maxlen: 24
145.31.194.0/24 maxlen: 24
145.31.195.0/24 maxlen: 24
145.31.196.0/24 maxlen: 24
145.31.197.0/24 maxlen: 24
145.31.198.0/24 maxlen: 24
145.31.199.0/24 maxlen: 24
145.31.200.0/24 maxlen: 24
145.31.201.0/24 maxlen: 24
145.31.202.0/24 maxlen: 24
145.31.203.0/24 maxlen: 24
145.45.0.0/17 maxlen: 24
145.45.0.0/24 maxlen: 24
145.45.48.0/24 maxlen: 24
145.45.110.0/24 maxlen: 24
145.50.0.0/16 maxlen: 24
145.50.37.0/24 maxlen: 24
145.50.39.0/24 maxlen: 24
145.50.40.0/24 maxlen: 24
145.50.41.0/24 maxlen: 24
145.50.52.0/24 maxlen: 24
145.50.105.0/24 maxlen: 24
145.50.144.0/24 maxlen: 24
145.50.233.0/24 maxlen: 24
194.104.116.0/22 maxlen: 24
194.104.116.0/24 maxlen: 24
194.104.117.0/24 maxlen: 24
194.104.118.0/24 maxlen: 24
194.104.119.0/24 maxlen: 24
2a13:e080::/32 maxlen: 48
2a13:e080:2000::/40 maxlen: 40
2a13:e080:2000::/48 maxlen: 48
2a13:e080:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:b7:f6:7f:3f:cc:0d:52:8d:4f:d6:e7:9b:43:ab:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Oct 13 14:43:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4259e4f935377a69dcb88e14f4b15e6e73f4eded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:88:59:13:10:b1:17:5f:ee:18:8e:e9:e3:
6c:68:29:78:2a:d1:25:b5:46:2a:cd:75:76:78:df:
5a:c3:e4:4a:03:22:4b:fc:d6:96:8d:34:c5:25:e7:
e5:de:d7:4c:61:36:ff:3c:8b:be:c5:60:8c:76:34:
46:a3:bf:c6:d5:39:53:87:1e:a3:ed:4d:8e:48:02:
fa:d6:93:79:bd:18:5f:51:d1:a0:33:33:57:54:c9:
b3:6b:b8:0a:12:ac:ed:2a:5f:23:5b:8f:f7:44:3c:
8b:4b:31:55:b0:03:3f:29:2f:ad:99:07:a3:71:5d:
57:99:78:af:d6:0e:98:ac:bb:a0:61:36:fa:bd:96:
eb:b5:a3:b7:b0:c8:e1:c3:d6:e9:b0:c3:83:d1:3c:
f7:8f:f7:70:1b:84:dc:b8:70:4b:b1:8a:71:13:44:
c7:ba:ec:1d:85:1e:03:58:82:e4:1f:2f:21:d6:6b:
ed:37:7b:44:d2:03:18:ad:b9:f5:d9:87:9f:60:41:
9c:3e:8d:d4:8f:ef:6e:dd:14:a2:2b:5f:96:ca:8a:
26:c4:85:02:3c:ab:91:39:63:53:d5:fc:6d:2b:70:
e6:bf:16:f0:b0:24:81:5d:2e:7b:62:a9:b5:d1:c8:
ac:38:75:4e:13:ba:8c:40:09:45:cf:22:fe:a5:34:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:E4:F9:35:37:7A:69:DC:B8:8E:14:F4:B1:5E:6E:73:F4:ED:ED
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Qlnk-TU3emncuI4U9LFebnP07e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.237.0.0/16
145.31.0.0/16
145.45.0.0/17
145.50.0.0/16
194.104.116.0/22
IPv6:
2a13:e080::/32
Signature Algorithm: sha256WithRSAEncryption
34:c1:a9:18:10:dd:40:de:d0:b4:e7:37:65:83:73:33:ec:8b:
9d:bd:e6:df:a0:60:c5:4b:5a:5e:65:5f:09:35:55:81:60:53:
e2:cb:14:3a:f3:11:c8:96:10:c6:24:bc:a3:27:a1:35:05:4f:
2d:88:f1:39:66:26:02:db:87:29:89:86:1f:8e:0c:76:d4:b9:
a0:08:3c:b8:1c:81:8f:57:8c:d9:18:6c:00:aa:ad:21:16:9f:
53:62:f6:ea:0f:25:11:72:ed:2d:13:bd:6d:10:d4:a2:f1:47:
02:d4:53:f6:b4:01:b0:ab:dc:b9:44:2e:2d:b3:4c:6d:d2:e5:
f1:34:2d:d5:6f:02:9e:c0:11:bf:d9:09:35:3c:58:36:3a:05:
92:35:12:30:cc:08:63:98:3d:a6:d9:5b:c0:72:68:9a:1e:b9:
8e:c1:72:8c:80:cd:34:3e:0d:e3:5a:b8:b4:88:dd:cd:47:30:
2c:05:c7:2a:67:d8:65:13:12:a9:55:2e:8b:c5:d5:f8:84:d1:
c1:71:5e:a6:5b:94:47:e6:f0:8a:2b:57:6f:9f:1f:b2:82:06:
96:1d:5b:17:e0:44:8c:5e:ea:4b:4c:c7:f8:cf:7e:b8:64:5c:
9a:2c:f6:df:19:5d:09:68:51:e1:a1:d3:7b:3a:d2:8e:df:43:
79:35:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:15 2026 by rpki-client