Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/q9si30G3Z4SCm8CWscBg7k7qW-o.roa
File: q9si30G3Z4SCm8CWscBg7k7qW-o.roa (raw, json)
Hash identifier: hQIS9g3ceAT84twsdrq5NBtYX97qQ4HwbcAX1yCehDk=
Subject key identifier: AB:DB:22:DF:41:B7:67:84:82:9B:C0:96:B1:C0:60:EE:4E:EA:5B:EA
Certificate issuer: /CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Certificate serial: 019F2368E5C34749491A0B330927DA2466F1
Authority key identifier: A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/q9si30G3Z4SCm8CWscBg7k7qW-o.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205081
IP address blocks: 5.133.190.0/24 maxlen: 24
46.33.12.0/24 maxlen: 24
153.92.27.0/24 maxlen: 24
155.133.192.0/23 maxlen: 23
185.136.216.0/22 maxlen: 22
185.136.216.0/24 maxlen: 24
185.136.217.0/24 maxlen: 24
185.136.218.0/24 maxlen: 24
185.136.219.0/24 maxlen: 24
2a0c:5500::/48 maxlen: 48
2a0c:5500:1::/48 maxlen: 48
2a0c:5500:2::/48 maxlen: 48
2a0c:5500:3::/48 maxlen: 48
2a0c:5500:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e5:c3:47:49:49:1a:0b:33:09:27:da:24:66:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abdb22df41b76784829bc096b1c060ee4eea5bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:9b:0c:1e:55:ab:ee:c4:8c:c3:c4:4a:b4:
ed:dc:4c:bb:e5:b2:0c:fe:49:03:16:6a:e7:6b:79:
80:e9:13:6b:37:cc:09:2d:5d:00:a2:63:76:42:db:
6a:53:d8:89:22:77:8d:c1:84:fa:36:d5:5d:35:9b:
ba:fb:7f:1c:15:5b:b4:26:c5:43:56:65:60:b0:ce:
e2:68:d8:13:81:7a:c4:25:21:06:e1:2a:a4:0f:d4:
4c:94:24:d0:49:81:d5:f3:bf:bd:4d:35:27:fa:b3:
26:10:22:e7:d8:a0:08:fb:c9:0c:5b:89:6f:ab:47:
44:a4:ba:a3:6e:3c:32:e8:90:93:6c:a9:94:ea:33:
77:1a:c4:a3:9e:0d:ee:33:1c:68:8e:fb:04:d4:5d:
c0:91:c8:75:67:20:05:af:82:8e:f5:3b:49:6a:61:
69:64:b6:ae:b0:eb:fa:94:20:75:2b:1a:22:75:f9:
ac:d3:b3:3d:64:4c:c8:7a:c6:ed:95:41:95:a5:ac:
56:89:1e:55:69:6c:a9:ba:2f:b0:6f:81:e0:96:ae:
e9:78:23:92:92:3c:cf:7c:0f:88:46:fc:d1:5d:38:
bc:78:1a:73:9f:00:e0:b2:11:2e:c3:d6:b5:dd:d9:
34:01:52:f5:e8:35:8c:00:0a:26:5d:32:72:7b:f3:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DB:22:DF:41:B7:67:84:82:9B:C0:96:B1:C0:60:EE:4E:EA:5B:EA
X509v3 Authority Key Identifier:
keyid:A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/q9si30G3Z4SCm8CWscBg7k7qW-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.190.0/24
46.33.12.0/24
153.92.27.0/24
155.133.192.0/23
185.136.216.0/22
IPv6:
2a0c:5500::-2a0c:5500:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:fe:fb:e1:a2:a5:d0:ff:09:30:ea:cc:19:d1:8f:ea:b8:b2:
89:9c:43:92:48:bd:d7:49:f0:ee:05:19:3f:52:99:fd:bc:35:
b9:ad:9e:72:7d:a0:63:c4:63:82:10:a5:36:84:12:f8:86:05:
33:d8:e7:31:89:20:82:ea:70:76:e2:db:cb:f3:1e:7e:91:3b:
04:26:ca:00:e0:21:c5:22:7f:d7:40:15:1d:b1:3f:9c:c0:95:
1c:fd:d5:37:e1:f4:25:bc:1e:ef:79:fb:6b:ef:bf:aa:12:99:
16:76:11:02:e8:aa:43:e3:60:26:be:3a:c5:cd:59:8f:64:4f:
78:f7:3a:b8:87:30:9c:c6:96:8b:8f:d7:71:d9:60:5b:1d:d6:
22:3a:15:ed:c1:b0:69:72:48:24:5a:74:a3:21:20:60:12:af:
76:0c:5b:f1:a5:fc:95:90:cb:ed:31:09:ae:73:5d:8f:5b:14:
89:23:b9:91:fc:15:cd:57:ab:bd:74:99:51:66:57:ff:6f:f4:
cf:c5:3c:98:34:63:51:57:e8:14:ce:ab:5e:4f:5d:f6:81:99:
90:53:39:30:fd:96:84:d0:ca:ee:39:24:2b:b0:ae:33:8c:11:
2a:99:66:59:c6:47:23:b6:4d:77:9a:08:ee:5a:1e:dc:d1:8c:
91:6c:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:15 2026 by rpki-client