Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/qKWkW5P-OHkVnupKIUpgctJf2Rc.roa
File: qKWkW5P-OHkVnupKIUpgctJf2Rc.roa (raw, json)
Hash identifier: mFnXm7HJDx7lbQXSHGnUOMniKWitjUlz6CnOLf7Zun0=
Subject key identifier: A8:A5:A4:5B:93:FE:38:79:15:9E:EA:4A:21:4A:60:72:D2:5F:D9:17
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0C960DBFF8FE11FE8916B3D10E2B0E7DB
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/qKWkW5P-OHkVnupKIUpgctJf2Rc.roa
Signing time: Tue 22 Sep 2026 13:49:23 +0000
ROA not before: Tue 22 Sep 2026 13:49:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.92.142.0/24 maxlen: 24
85.92.143.0/24 maxlen: 24
89.30.137.0/24 maxlen: 24
89.30.165.0/24 maxlen: 24
89.30.174.0/24 maxlen: 24
89.30.175.0/24 maxlen: 24
89.30.183.0/24 maxlen: 24
89.30.184.0/24 maxlen: 24
89.30.185.0/24 maxlen: 24
89.30.186.0/24 maxlen: 24
89.30.187.0/24 maxlen: 24
89.30.188.0/24 maxlen: 24
89.30.190.0/24 maxlen: 24
89.30.191.0/24 maxlen: 24
89.30.204.0/24 maxlen: 24
89.30.205.0/24 maxlen: 24
89.30.240.0/24 maxlen: 24
89.30.241.0/24 maxlen: 24
89.30.242.0/24 maxlen: 24
89.30.243.0/24 maxlen: 24
89.30.247.0/24 maxlen: 24
213.214.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:60:db:ff:8f:e1:1f:e8:91:6b:3d:10:e2:b0:e7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 22 13:49:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8a5a45b93fe3879159eea4a214a6072d25fd917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:2a:b9:1d:f8:89:84:3d:54:a6:06:0e:42:
cc:12:2c:75:7a:70:3d:6e:7d:f0:d0:64:69:be:ef:
b1:03:45:d9:e4:1c:22:98:d5:29:80:90:f4:01:d3:
22:d0:00:7a:d7:13:fe:68:1d:e2:a0:88:37:ae:37:
2b:35:d0:4e:c1:60:2c:c8:c4:d5:69:55:6d:2b:a9:
5b:4c:f8:95:1f:dd:55:05:8b:eb:f9:47:d7:f5:12:
ca:12:b2:8d:fa:a9:ca:76:5f:4d:22:85:ea:83:45:
5d:ff:5c:29:c9:80:fe:96:06:37:cf:02:95:a4:fa:
86:3a:fa:16:1c:98:9e:c6:0f:53:47:97:c6:e9:5e:
86:d5:3d:d5:30:29:1c:98:55:7f:ab:20:ec:41:f1:
55:07:95:89:45:5d:36:c2:f2:2e:7c:c1:92:cd:44:
fa:b4:3b:5c:1c:d1:57:a5:7a:0a:5a:63:cf:71:3d:
53:6a:1d:4a:f3:b8:83:eb:4a:bd:df:2c:f7:89:c8:
8a:19:e5:36:55:64:04:db:6f:6f:89:0c:f5:5b:a8:
8e:b0:3b:92:4e:e5:ea:e7:e2:1d:fc:60:16:6b:a5:
f1:46:1a:b3:ff:f6:62:39:3d:4c:93:8e:ef:bd:df:
42:a9:34:0b:0f:9e:b7:5e:11:c0:57:23:3d:b8:92:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A5:A4:5B:93:FE:38:79:15:9E:EA:4A:21:4A:60:72:D2:5F:D9:17
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/qKWkW5P-OHkVnupKIUpgctJf2Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.142.0/23
89.30.137.0/24
89.30.165.0/24
89.30.174.0/23
89.30.183.0-89.30.188.255
89.30.190.0/23
89.30.204.0/23
89.30.240.0/22
89.30.247.0/24
213.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d2:df:2f:cc:56:02:da:f3:01:b5:a6:f3:d7:ab:d9:a4:7e:
60:f8:d1:6c:4e:83:4e:21:e7:75:85:29:cb:fe:24:b7:9a:b8:
30:2a:b5:27:77:f6:dc:17:26:be:7b:49:ac:c9:e3:55:43:4e:
76:9e:ab:ba:59:d0:ef:a5:dd:0a:fc:35:63:46:13:cf:9c:3d:
cd:e5:da:f4:73:3c:87:85:10:d4:31:16:33:ef:51:40:ab:a4:
47:5e:d6:fd:94:30:da:ee:69:4d:ee:31:b6:db:59:13:c9:04:
df:11:b9:8f:a3:cb:e3:fc:36:81:21:a3:fd:f3:25:d9:df:cd:
aa:b7:2a:f9:8f:6c:c0:de:b3:ca:b1:e2:22:e9:49:44:34:0e:
31:8d:78:ad:db:ae:a1:18:82:c6:b7:fe:02:47:8c:43:cc:4c:
0c:6d:01:34:1a:96:06:1b:cf:69:9d:69:6a:89:35:68:19:1b:
0f:ef:af:17:e1:a1:00:b1:66:33:24:2d:61:f6:2e:05:81:5f:
e1:10:dd:dc:8e:f1:e5:57:37:2f:8d:a4:bb:43:fd:8a:25:06:
7d:63:24:3f:79:4a:b5:1c:37:b5:e6:f1:86:86:bc:99:5e:9f:
54:69:44:67:56:55:9b:30:b9:9c:d6:5b:46:58:1a:1b:9e:68:
86:b5:9c:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:15:36 2026 by rpki-client