Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qtJF3Dys3z3PoByizg6tR6xHy80.roa
File: qtJF3Dys3z3PoByizg6tR6xHy80.roa (raw, json)
Hash identifier: Ngj4limlaFMXJzzeKk3YwN3H9GqA1dgjcLYUCgaNUUg=
Subject key identifier: AA:D2:45:DC:3C:AC:DF:3D:CF:A0:1C:A2:CE:0E:AD:47:AC:47:CB:CD
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019F8ED0C599A535DA71C55927B92950FB21
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qtJF3Dys3z3PoByizg6tR6xHy80.roa
Signing time: Thu 23 Jul 2026 11:51:14 +0000
ROA not before: Thu 23 Jul 2026 11:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.90.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.51.0/24 maxlen: 24
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.240.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d0:c5:99:a5:35:da:71:c5:59:27:b9:29:50:fb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jul 23 11:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aad245dc3cacdf3dcfa01ca2ce0ead47ac47cbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:94:d9:41:d2:96:99:6c:66:b8:a1:40:a5:d6:
79:f0:20:1f:c7:16:76:ee:85:3a:8e:67:2a:7d:61:
ee:3c:e6:72:df:15:f7:b6:36:63:ad:2b:d8:34:9d:
4b:64:38:96:0b:41:7a:88:cf:b5:e6:70:19:0b:cd:
58:26:da:e3:46:ae:01:f7:18:d4:32:04:af:99:8a:
e5:64:d9:28:79:ca:49:9d:db:45:5d:e0:44:48:6f:
d7:03:e1:cd:d8:47:65:cd:ce:5e:b3:76:54:e9:d1:
72:d7:4d:a1:23:7a:f4:6e:c4:21:17:c7:0b:a2:ac:
a2:36:4a:50:ab:76:99:7d:00:24:f5:20:04:2b:d1:
6e:70:ea:3b:fd:2e:2b:8d:97:59:65:7d:03:a8:4c:
ed:45:74:b7:b8:b3:b3:2a:a9:2e:5c:37:5e:66:e9:
4f:83:08:5c:39:14:d0:12:42:fb:f2:55:a4:04:14:
90:92:78:db:ab:96:ca:df:79:75:3d:b3:c0:9a:2e:
51:ab:6b:1d:5a:8a:48:bd:c0:1f:8e:35:0c:93:9d:
bf:3b:87:77:1d:db:1f:6f:f9:04:41:5f:a4:e8:13:
78:11:c0:22:ca:ba:6d:05:2c:fc:c5:58:d2:93:6d:
1e:fc:3c:68:92:40:18:72:c8:ac:5f:5c:8b:f0:c3:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:45:DC:3C:AC:DF:3D:CF:A0:1C:A2:CE:0E:AD:47:AC:47:CB:CD
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qtJF3Dys3z3PoByizg6tR6xHy80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0-5.8.16.255
5.8.48.0/21
5.8.60.0/23
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.90.0/23
5.188.44.0-5.188.49.255
5.188.51.0/24
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.188.0/22
31.184.192.0/21
31.184.238.0-31.184.241.255
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
c5:48:a9:3c:00:98:ca:f7:4e:7e:aa:04:e7:72:60:42:76:cd:
e3:29:db:39:e3:2b:3b:83:ca:08:fc:0b:91:8b:e9:b5:f5:af:
d1:ee:d2:12:d9:87:2c:d9:1e:d5:19:e5:0b:23:d2:f7:66:cc:
b3:cc:9e:a2:2f:0c:c0:a3:e6:dd:fd:88:6e:6b:02:ad:95:1d:
a2:ce:a9:0d:03:e2:f4:e4:c2:2b:2f:d6:9a:68:da:e3:18:82:
b6:46:25:3c:81:44:fe:80:b5:4b:b3:81:35:d2:ab:9c:44:eb:
3a:e2:55:3b:3a:40:14:8d:49:73:8e:d9:bd:3c:97:95:1e:1c:
29:24:3c:78:ca:82:4b:19:54:57:12:db:b6:c6:25:16:55:9e:
93:78:8e:7b:6b:2c:6b:87:ba:f6:7f:fe:ee:d5:e7:2f:cf:a3:
b6:ee:3c:a6:f3:e9:2e:ce:5b:a4:e5:6f:e1:6c:8b:9e:e2:9c:
79:79:5d:cd:56:35:65:13:ef:b5:5e:a0:8a:4d:b7:1e:65:77:
c0:ae:2f:ad:7a:ee:cd:45:59:8f:5b:ca:6d:1f:4c:29:19:f2:
ad:24:1d:9b:0f:70:c4:63:c8:cd:fd:ed:b8:97:7f:31:c4:17:
82:05:16:f8:9b:6c:a1:98:41:3c:47:8b:f5:43:59:58:65:15:
35:53:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:01:51 2026 by rpki-client