Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/PbfQXR-baDZPQCV3KzmFSl3NBu0.roa
File: PbfQXR-baDZPQCV3KzmFSl3NBu0.roa (raw, json)
Hash identifier: d7QUcrvXmkMs7NU8766otUgeBhwhhAhea+tgCx1SFO8=
Subject key identifier: 3D:B7:D0:5D:1F:9B:68:36:4F:40:25:77:2B:39:85:4A:5D:CD:06:ED
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019DB39605341BC2C1617CCA220EC0258823
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/PbfQXR-baDZPQCV3KzmFSl3NBu0.roa
Signing time: Wed 22 Apr 2026 05:07:26 +0000
ROA not before: Wed 22 Apr 2026 05:07:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 2.59.168.0/22 maxlen: 22
2.59.168.0/24 maxlen: 24
2.59.169.0/24 maxlen: 24
2.59.170.0/24 maxlen: 24
2.59.171.0/24 maxlen: 24
45.14.132.0/22 maxlen: 22
45.14.132.0/24 maxlen: 24
45.14.133.0/24 maxlen: 24
45.14.134.0/24 maxlen: 24
45.14.135.0/24 maxlen: 24
45.82.64.0/22 maxlen: 22
45.82.64.0/24 maxlen: 24
45.82.65.0/24 maxlen: 24
45.82.66.0/24 maxlen: 24
45.82.67.0/24 maxlen: 24
62.112.8.0/22 maxlen: 22
62.112.8.0/24 maxlen: 24
62.112.9.0/24 maxlen: 24
62.112.10.0/24 maxlen: 24
62.112.11.0/24 maxlen: 24
80.79.4.0/22 maxlen: 22
80.79.4.0/24 maxlen: 24
80.79.5.0/24 maxlen: 24
80.79.6.0/24 maxlen: 24
80.79.7.0/24 maxlen: 24
89.38.96.0/22 maxlen: 22
89.38.96.0/24 maxlen: 24
89.38.97.0/24 maxlen: 24
89.38.98.0/24 maxlen: 24
89.38.99.0/24 maxlen: 24
89.39.104.0/22 maxlen: 22
89.39.104.0/24 maxlen: 24
89.39.105.0/24 maxlen: 24
89.39.106.0/24 maxlen: 24
89.39.107.0/24 maxlen: 24
91.229.23.0/24 maxlen: 24
91.232.105.0/24 maxlen: 24
93.190.136.0/21 maxlen: 21
93.190.136.0/24 maxlen: 24
93.190.137.0/24 maxlen: 24
93.190.138.0/24 maxlen: 24
93.190.139.0/24 maxlen: 24
93.190.140.0/22 maxlen: 22
93.190.140.0/24 maxlen: 24
93.190.141.0/24 maxlen: 24
93.190.142.0/24 maxlen: 24
93.190.143.0/24 maxlen: 24
109.236.80.0/20 maxlen: 20
109.236.80.0/24 maxlen: 24
109.236.81.0/24 maxlen: 24
109.236.82.0/24 maxlen: 24
109.236.83.0/24 maxlen: 24
109.236.84.0/24 maxlen: 24
109.236.85.0/24 maxlen: 24
109.236.86.0/24 maxlen: 24
109.236.87.0/24 maxlen: 24
109.236.88.0/24 maxlen: 24
109.236.89.0/24 maxlen: 24
109.236.90.0/24 maxlen: 24
109.236.91.0/24 maxlen: 24
109.236.92.0/24 maxlen: 24
109.236.93.0/24 maxlen: 24
109.236.94.0/24 maxlen: 24
109.236.95.0/24 maxlen: 24
175.110.112.0/20 maxlen: 20
175.110.112.0/24 maxlen: 24
175.110.113.0/24 maxlen: 24
175.110.114.0/24 maxlen: 24
175.110.115.0/24 maxlen: 24
175.110.116.0/24 maxlen: 24
175.110.117.0/24 maxlen: 24
175.110.118.0/24 maxlen: 24
175.110.119.0/24 maxlen: 24
175.110.120.0/24 maxlen: 24
175.110.121.0/24 maxlen: 24
175.110.122.0/24 maxlen: 24
175.110.123.0/24 maxlen: 24
175.110.124.0/24 maxlen: 24
175.110.125.0/24 maxlen: 24
175.110.126.0/24 maxlen: 24
175.110.127.0/24 maxlen: 24
178.132.0.0/21 maxlen: 21
178.132.0.0/24 maxlen: 24
178.132.1.0/24 maxlen: 24
178.132.2.0/24 maxlen: 24
178.132.3.0/24 maxlen: 24
178.132.4.0/24 maxlen: 24
178.132.5.0/24 maxlen: 24
178.132.6.0/24 maxlen: 24
178.132.7.0/24 maxlen: 24
178.218.196.0/22 maxlen: 22
178.218.196.0/24 maxlen: 24
178.218.197.0/24 maxlen: 24
178.218.198.0/24 maxlen: 24
178.218.199.0/24 maxlen: 24
185.2.80.0/22 maxlen: 22
185.2.80.0/24 maxlen: 24
185.2.81.0/24 maxlen: 24
185.2.82.0/24 maxlen: 24
185.2.83.0/24 maxlen: 24
185.4.112.0/22 maxlen: 22
185.21.60.0/22 maxlen: 22
185.21.60.0/24 maxlen: 24
185.21.61.0/24 maxlen: 24
185.21.62.0/24 maxlen: 24
185.21.63.0/24 maxlen: 24
185.100.232.0/22 maxlen: 22
185.100.232.0/24 maxlen: 24
185.100.233.0/24 maxlen: 24
185.100.234.0/24 maxlen: 24
185.100.235.0/24 maxlen: 24
185.132.132.0/22 maxlen: 22
185.132.132.0/24 maxlen: 24
185.132.133.0/24 maxlen: 24
185.132.134.0/24 maxlen: 24
185.132.135.0/24 maxlen: 24
185.132.176.0/22 maxlen: 22
185.132.176.0/24 maxlen: 24
185.132.177.0/24 maxlen: 24
185.132.178.0/24 maxlen: 24
185.132.179.0/24 maxlen: 24
185.165.240.0/22 maxlen: 22
185.165.240.0/24 maxlen: 24
185.165.241.0/24 maxlen: 24
185.165.242.0/24 maxlen: 24
185.165.243.0/24 maxlen: 24
185.172.88.0/22 maxlen: 22
185.172.88.0/24 maxlen: 24
185.172.89.0/24 maxlen: 24
185.172.90.0/24 maxlen: 24
185.172.91.0/24 maxlen: 24
185.173.160.0/22 maxlen: 22
185.173.160.0/24 maxlen: 24
185.173.161.0/24 maxlen: 24
185.173.162.0/24 maxlen: 24
185.173.163.0/24 maxlen: 24
185.177.124.0/22 maxlen: 22
185.177.124.0/24 maxlen: 24
185.177.125.0/24 maxlen: 24
185.177.126.0/24 maxlen: 24
185.177.127.0/24 maxlen: 24
185.180.220.0/22 maxlen: 22
185.180.220.0/24 maxlen: 24
185.180.221.0/24 maxlen: 24
185.180.222.0/24 maxlen: 24
185.180.223.0/24 maxlen: 24
185.182.192.0/22 maxlen: 22
185.182.192.0/24 maxlen: 24
185.182.193.0/24 maxlen: 24
185.182.194.0/24 maxlen: 24
185.182.195.0/24 maxlen: 24
185.183.32.0/22 maxlen: 22
185.183.32.0/24 maxlen: 24
185.183.33.0/24 maxlen: 24
185.183.34.0/24 maxlen: 24
185.183.35.0/24 maxlen: 24
185.184.192.0/22 maxlen: 22
185.184.192.0/24 maxlen: 24
185.184.193.0/24 maxlen: 24
185.184.194.0/24 maxlen: 24
185.184.195.0/24 maxlen: 24
185.185.48.0/22 maxlen: 22
185.185.48.0/24 maxlen: 24
185.185.49.0/24 maxlen: 24
185.185.50.0/24 maxlen: 24
185.185.51.0/24 maxlen: 24
185.191.0.0/22 maxlen: 22
185.191.0.0/24 maxlen: 24
185.191.1.0/24 maxlen: 24
185.191.2.0/24 maxlen: 24
185.191.3.0/24 maxlen: 24
193.200.164.0/24 maxlen: 24
194.88.104.0/22 maxlen: 22
194.88.104.0/24 maxlen: 24
194.88.105.0/24 maxlen: 24
194.88.106.0/24 maxlen: 24
194.88.107.0/24 maxlen: 24
212.8.240.0/24 maxlen: 24
212.8.242.0/23 maxlen: 23
212.8.242.0/24 maxlen: 24
212.8.243.0/24 maxlen: 24
212.8.248.0/23 maxlen: 23
212.8.248.0/24 maxlen: 24
212.8.249.0/24 maxlen: 24
212.8.250.0/24 maxlen: 24
212.8.252.0/23 maxlen: 23
212.8.252.0/24 maxlen: 24
212.8.253.0/24 maxlen: 24
217.23.0.0/20 maxlen: 20
217.23.0.0/24 maxlen: 24
217.23.1.0/24 maxlen: 24
217.23.2.0/24 maxlen: 24
217.23.3.0/24 maxlen: 24
217.23.4.0/24 maxlen: 24
217.23.5.0/24 maxlen: 24
217.23.6.0/24 maxlen: 24
217.23.7.0/24 maxlen: 24
217.23.8.0/24 maxlen: 24
217.23.9.0/24 maxlen: 24
217.23.10.0/24 maxlen: 24
217.23.11.0/24 maxlen: 24
217.23.12.0/24 maxlen: 24
217.23.13.0/24 maxlen: 24
217.23.14.0/24 maxlen: 24
217.23.15.0/24 maxlen: 24
2a00:7c80::/29 maxlen: 32
2a00:7c81::/32 maxlen: 32
2a00:7c82::/32 maxlen: 32
2a00:7c83::/32 maxlen: 32
2a02:20b3:100::/40 maxlen: 40
2a02:20b3:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:96:05:34:1b:c2:c1:61:7c:ca:22:0e:c0:25:88:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Apr 22 05:07:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3db7d05d1f9b68364f4025772b39854a5dcd06ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:03:c6:fd:57:0a:86:db:09:04:e3:2d:c1:
00:91:50:28:d3:31:b8:37:0f:4e:a1:76:0f:bb:c3:
9d:18:64:ab:1e:b7:1c:13:08:cd:2d:d1:41:33:1a:
43:d3:3c:fa:18:64:09:fa:3e:ee:8d:90:a5:3c:d5:
15:31:5b:ee:89:30:75:88:5b:f8:b1:ed:0c:f5:a6:
6c:73:2a:9d:7a:fd:d1:0c:e1:88:d1:67:2c:f7:6e:
b9:69:02:39:0e:96:8f:13:94:c4:57:b5:4d:a3:c5:
db:75:70:d8:67:1f:99:51:4e:97:58:c5:83:a0:ee:
64:20:17:7c:e1:d7:ac:c0:f0:27:cc:ef:3d:6a:b3:
09:85:0a:d0:f6:7d:79:34:6c:e7:f3:d0:5f:b8:5c:
8a:d9:8f:f5:28:c5:14:90:ca:99:a7:32:a7:03:f3:
f9:1e:7d:32:1d:8e:5c:6d:34:51:6a:67:09:b1:d3:
07:11:1e:64:73:5f:c7:ad:b6:27:6b:16:fe:f8:d9:
ae:85:9d:af:05:73:71:32:6c:56:1c:00:48:3c:22:
5d:42:a1:6a:c6:21:4e:7f:f4:be:4e:50:0e:37:d7:
60:15:5c:69:f0:3b:88:ad:20:d8:dd:7c:5d:e3:53:
73:b3:b2:aa:05:10:24:80:6b:15:9a:de:3d:80:4d:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:D0:5D:1F:9B:68:36:4F:40:25:77:2B:39:85:4A:5D:CD:06:ED
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/PbfQXR-baDZPQCV3KzmFSl3NBu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.168.0/22
45.14.132.0/22
45.82.64.0/22
62.112.8.0/22
80.79.4.0/22
89.38.96.0/22
89.39.104.0/22
91.229.23.0/24
91.232.105.0/24
93.190.136.0/21
109.236.80.0/20
175.110.112.0/20
178.132.0.0/21
178.218.196.0/22
185.2.80.0/22
185.4.112.0/22
185.21.60.0/22
185.100.232.0/22
185.132.132.0/22
185.132.176.0/22
185.165.240.0/22
185.172.88.0/22
185.173.160.0/22
185.177.124.0/22
185.180.220.0/22
185.182.192.0/22
185.183.32.0/22
185.184.192.0/22
185.185.48.0/22
185.191.0.0/22
193.200.164.0/24
194.88.104.0/22
212.8.240.0/24
212.8.242.0/23
212.8.248.0-212.8.250.255
212.8.252.0/23
217.23.0.0/20
IPv6:
2a00:7c80::/29
2a02:20b3:100::-2a02:20b3:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b1:65:8e:2d:86:3f:65:1e:46:c6:03:e1:d7:16:c0:9a:0b:5b:
50:c9:f6:e3:5c:d9:71:fd:d1:7e:da:c7:73:8c:b2:ed:e8:40:
d4:ff:7e:7f:7a:97:21:7c:05:f7:6c:e9:c6:c7:69:c2:c1:f2:
5e:56:39:60:b0:50:dc:77:e2:96:6f:d0:a6:27:14:1e:5a:7f:
af:8f:a2:13:a0:9e:3b:c9:f1:2e:f5:4c:ee:69:52:dc:d8:36:
c4:0b:5e:90:3e:37:84:69:38:4e:da:37:83:35:26:20:7b:df:
87:34:f6:10:73:87:4b:bb:da:77:4d:ad:19:6a:40:53:1f:b7:
68:5b:9f:72:93:4a:a8:c1:35:0c:18:bb:8a:9b:54:b6:e3:e8:
a2:fa:00:1a:03:0e:6f:ce:38:4b:87:17:12:1d:b8:09:d7:3e:
c3:cb:6a:c5:60:9a:4a:d0:63:fb:2a:25:ae:07:ad:ee:8f:f3:
b0:7f:6b:ee:f5:ed:a5:e2:30:88:c8:72:f3:7d:01:8d:27:15:
2d:a8:e1:ae:e6:73:35:09:4a:3f:cb:7a:e5:5e:53:8d:e1:a0:
6e:8e:63:32:fa:f9:46:8d:34:a3:8b:c0:58:94:90:b4:da:5b:
3a:6c:70:05:b8:9c:c2:34:e2:5a:81:f6:88:d1:69:6d:fe:08:
84:c5:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:24:17 2026 by rpki-client