Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/j1QZf3SAJ67DkE3ST0QZXExYuQE.roa
File: j1QZf3SAJ67DkE3ST0QZXExYuQE.roa (raw, json)
Hash identifier: AzjMpQi+d2hp18c2fvHJNiJSr2x7rUI7rmBU7wVpQsQ=
Subject key identifier: 8F:54:19:7F:74:80:27:AE:C3:90:4D:D2:4F:44:19:5C:4C:58:B9:01
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A183428FC35FF5E106209158527DE59F46
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/j1QZf3SAJ67DkE3ST0QZXExYuQE.roa
Signing time: Wed 28 Oct 2026 16:05:39 +0000
ROA not before: Wed 28 Oct 2026 16:05:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13194
IP address blocks: 80.81.54.0/24 maxlen: 24
80.81.61.0/24 maxlen: 24
85.254.69.0/24 maxlen: 24
85.254.71.0/24 maxlen: 24
85.254.73.0/24 maxlen: 24
85.254.74.0/23 maxlen: 23
85.254.74.0/24 maxlen: 24
85.254.75.0/24 maxlen: 24
85.254.76.0/22 maxlen: 22
85.254.76.0/24 maxlen: 24
85.254.80.0/22 maxlen: 22
85.254.84.0/23 maxlen: 23
85.254.92.0/22 maxlen: 22
85.254.92.0/23 maxlen: 23
85.254.92.0/24 maxlen: 24
85.254.93.0/24 maxlen: 24
85.254.94.0/24 maxlen: 24
85.254.95.0/24 maxlen: 24
85.254.96.0/22 maxlen: 22
85.254.96.0/23 maxlen: 23
85.254.98.0/23 maxlen: 23
85.254.100.0/24 maxlen: 24
85.254.101.0/24 maxlen: 24
85.254.102.0/24 maxlen: 24
85.254.123.0/24 maxlen: 24
85.254.124.0/23 maxlen: 23
85.254.141.0/24 maxlen: 24
85.254.149.0/24 maxlen: 24
85.254.151.0/24 maxlen: 24
85.254.152.0/22 maxlen: 22
85.254.159.0/24 maxlen: 24
85.254.161.0/24 maxlen: 24
85.254.168.0/24 maxlen: 24
85.254.169.0/24 maxlen: 24
85.254.170.0/24 maxlen: 24
85.254.176.0/23 maxlen: 23
91.142.8.0/21 maxlen: 24
91.190.45.0/24 maxlen: 24
91.190.48.0/24 maxlen: 24
91.190.49.0/24 maxlen: 24
159.148.73.0/24 maxlen: 24
159.148.114.0/24 maxlen: 24
159.148.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:42:8f:c3:5f:f5:e1:06:20:91:58:52:7d:e5:9f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 28 16:05:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f54197f748027aec3904dd24f44195c4c58b901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:b4:e5:5e:1b:fc:1d:08:60:af:1f:4c:8a:
53:00:9f:29:81:72:25:df:fd:40:dd:82:6c:d8:c2:
3d:cd:cc:fe:6f:6c:ec:5b:25:2a:f1:7e:3a:73:2e:
b7:56:6a:ec:59:8f:06:8e:c0:57:ab:39:a2:e3:86:
1f:74:da:85:a1:bc:3c:99:e8:b0:e3:7c:ef:52:6f:
c5:b6:b1:0b:b3:bf:b5:e3:f2:9f:71:31:bd:f7:f5:
73:7c:25:7b:cd:34:4c:5b:74:6c:d7:db:34:35:da:
99:e4:89:22:02:b7:66:62:3b:8f:9c:a9:1c:32:60:
be:72:a0:5f:bd:af:9a:7d:5c:05:9a:14:ee:d6:5a:
2e:ed:6b:f9:e8:a1:9e:8c:09:dd:a4:50:a6:ef:b5:
2d:3d:50:83:ba:85:31:62:96:51:77:81:57:3a:19:
45:d0:af:5c:80:aa:76:54:8f:d7:e3:6f:a0:24:b3:
64:c9:04:4e:27:91:fc:78:fc:b4:6e:83:b2:4f:8c:
16:b1:f6:f1:7d:7b:a9:14:95:9c:e7:e5:66:17:71:
29:92:53:53:83:6d:ad:8b:a5:d0:64:28:3e:ad:67:
08:b7:e6:89:a2:51:a3:20:1a:d8:8b:7e:ea:ae:29:
15:b7:6f:34:1e:2a:d8:e9:98:fd:b7:25:58:0c:a7:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:54:19:7F:74:80:27:AE:C3:90:4D:D2:4F:44:19:5C:4C:58:B9:01
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/j1QZf3SAJ67DkE3ST0QZXExYuQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.54.0/24
80.81.61.0/24
85.254.69.0/24
85.254.71.0/24
85.254.73.0-85.254.85.255
85.254.92.0-85.254.102.255
85.254.123.0-85.254.125.255
85.254.141.0/24
85.254.149.0/24
85.254.151.0-85.254.155.255
85.254.159.0/24
85.254.161.0/24
85.254.168.0-85.254.170.255
85.254.176.0/23
91.142.8.0/21
91.190.45.0/24
91.190.48.0/23
159.148.73.0/24
159.148.114.0/24
159.148.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d5:2c:af:26:3a:95:c9:72:f1:9c:6e:3a:fc:4d:b4:56:ec:
f8:cd:d5:96:27:bf:3f:c9:6d:6c:e3:d6:df:3b:38:9c:2a:c7:
d8:60:ce:ba:ea:a0:3f:ca:08:46:f7:0d:60:53:e1:c0:a1:50:
c0:b6:73:d0:ae:92:d0:dc:0f:1c:7b:09:90:5a:22:0e:8b:b1:
74:cd:4d:8c:b5:07:3e:79:6b:44:85:68:d3:6c:d1:1d:a9:14:
61:f2:9d:c2:21:33:70:3f:6e:84:61:a1:b3:a5:b9:94:11:a8:
5b:fc:df:d4:76:4d:99:7d:f4:04:4f:52:2d:a3:4a:e9:cb:ae:
42:40:7e:31:64:16:18:e0:69:46:c7:a2:49:87:d7:36:43:44:
74:68:b3:32:ae:be:a1:0f:d6:15:ea:22:33:6b:e0:9f:f8:9d:
c5:2d:68:af:ae:cd:8e:b2:98:63:c0:f5:a6:d3:31:44:ff:10:
d7:33:dd:d7:11:cb:a6:7c:a7:28:74:fd:5d:46:0d:f3:e8:79:
44:99:48:b8:ae:0d:26:ac:55:21:d0:8b:56:ce:94:55:42:64:
d5:9d:45:f6:a2:db:13:7f:81:5c:cf:6f:70:4b:26:cc:f6:7b:
47:53:aa:5a:c0:2c:9b:11:d2:be:6b:b3:c0:f3:c3:34:70:f5:
99:d0:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:51 2026 by rpki-client