Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/QWzql91pb8AqydKLph2Rk8pMMJg.roa
File: QWzql91pb8AqydKLph2Rk8pMMJg.roa (raw, json)
Hash identifier: V0Cy33zvO3+B6j6F2O8VNY3jtZCF/pRG1qa2knevRzE=
Subject key identifier: 41:6C:EA:97:DD:69:6F:C0:2A:C9:D2:8B:A6:1D:91:93:CA:4C:30:98
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 01A1C00E4797FDCE45B1091FE11BDDFB1103
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/QWzql91pb8AqydKLph2Rk8pMMJg.roa
Signing time: Mon 09 Nov 2026 11:25:23 +0000
ROA not before: Mon 09 Nov 2026 11:25:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209420
IP address blocks: 31.207.68.0/24 maxlen: 24
31.207.69.0/24 maxlen: 24
31.207.70.0/24 maxlen: 24
31.207.72.0/24 maxlen: 24
152.89.133.0/24 maxlen: 24
178.236.138.0/24 maxlen: 24
192.145.16.0/23 maxlen: 23
192.145.16.0/24 maxlen: 24
192.145.17.0/24 maxlen: 24
192.145.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:0e:47:97:fd:ce:45:b1:09:1f:e1:1b:dd:fb:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Nov 9 11:25:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=416cea97dd696fc02ac9d28ba61d9193ca4c3098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:5b:df:b0:36:99:2f:84:b4:5c:01:47:19:
1a:8c:12:e7:e7:fa:2e:53:04:6c:27:d3:23:5e:9f:
e0:f8:96:5c:e6:08:21:b0:a6:58:fd:c0:0f:d7:6f:
13:39:e4:02:f2:b9:0b:97:8b:ad:f1:c6:04:ff:73:
a4:11:ee:eb:0e:19:7b:38:1e:9f:35:48:d3:bd:11:
bb:a2:d7:ab:6e:31:b8:59:ca:1d:54:5b:42:d0:89:
f1:18:1e:b5:cf:eb:fe:8b:15:0f:e8:56:fc:b9:fd:
8d:18:c2:b0:a0:dd:70:f7:b1:99:ed:92:05:d6:07:
ee:2c:8c:ea:8d:8e:fa:6e:be:9f:d0:de:2b:df:8f:
65:c5:75:bb:86:95:5c:43:e1:e5:df:2f:c3:dd:3b:
7a:ed:5c:64:48:ab:0a:5a:49:49:85:0b:42:55:50:
a0:51:ca:d1:32:37:5b:82:50:61:de:86:4e:40:e9:
1a:a7:54:df:dd:fd:38:b7:1a:65:7d:1e:ee:b9:81:
a2:fe:19:5b:34:47:64:60:b9:86:80:ca:e1:0f:14:
de:e7:9f:75:7a:e2:1a:13:32:8f:73:ed:b1:22:b1:
4b:6a:f0:24:11:20:d0:16:bb:da:9c:ea:11:6e:80:
79:15:42:a2:2c:a7:09:0a:6a:45:35:bb:7e:c5:df:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6C:EA:97:DD:69:6F:C0:2A:C9:D2:8B:A6:1D:91:93:CA:4C:30:98
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/QWzql91pb8AqydKLph2Rk8pMMJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.68.0-31.207.70.255
31.207.72.0/24
152.89.133.0/24
178.236.138.0/24
192.145.16.0-192.145.18.255
Signature Algorithm: sha256WithRSAEncryption
90:d7:57:72:7d:5e:54:98:c0:ff:2b:c3:9f:9a:30:2f:f4:4e:
eb:14:a1:20:28:06:68:43:64:11:46:04:a2:34:65:e2:fe:f8:
bb:24:80:6e:64:e2:20:83:51:a6:81:47:b0:ff:ac:ce:e4:a0:
b6:34:17:0f:14:d1:28:2a:3b:a3:77:1d:9b:0c:73:a9:fb:56:
64:f4:80:1b:33:2c:8b:f7:09:6f:72:d1:f4:4c:ef:25:b9:63:
ea:b5:57:f4:a1:64:7e:c9:b4:b9:a6:f9:93:b9:f3:85:79:d7:
53:8b:ad:f2:b0:fe:f6:6b:89:43:4b:5b:96:41:45:12:99:07:
cd:d7:b3:a3:e8:a7:c4:03:0c:18:ca:ad:a5:2a:30:56:19:8e:
c7:90:c3:3c:9a:fc:ce:9a:e5:29:81:36:00:81:88:25:3f:02:
6b:5d:6d:12:ad:a7:a1:bc:60:6b:7b:d1:b2:1d:fb:15:e9:d1:
95:84:44:e2:e6:ad:44:e4:cb:8c:cd:58:d6:ec:ce:e7:ef:36:
56:42:01:3c:5f:23:00:5e:4b:1f:58:80:e5:64:f3:98:ff:6e:
65:5f:01:2e:0a:b2:a3:1c:da:83:66:13:ab:41:9d:a1:4c:6a:
fb:f0:64:31:c4:57:83:e0:f2:91:23:61:7c:f5:c3:cb:6a:0a:
ee:ea:9c:93
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAaHADkeX/c5FsQkf4Rvd+xEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj
MGRmYWMwHhcNMjYxMTA5MTEyNTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTZjZWE5N2RkNjk2ZmMwMmFjOWQyOGJhNjFkOTE5M2NhNGMzMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07lb37A2mS+EtFwBRxkajBLn5/ou
UwRsJ9MjXp/g+JZc5gghsKZY/cAP128TOeQC8rkLl4ut8cYE/3OkEe7rDhl7OB6f
NUjTvRG7oterbjG4WcodVFtC0InxGB61z+v+ixUP6Fb8uf2NGMKwoN1w97GZ7ZIF
1gfuLIzqjY76br6f0N4r349lxXW7hpVcQ+Hl3y/D3Tt67VxkSKsKWklJhQtCVVCg
UcrRMjdbglBh3oZOQOkap1Tf3f04txplfR7uuYGi/hlbNEdkYLmGgMrhDxTe5591
euIaEzKPc+2xIrFLavAkESDQFrvanOoRboB5FUKiLKcJCmpFNbt+xd81IQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFEFs6pfdaW/AKsnSi6YdkZPKTDCYMB8GA1UdIwQY
MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt
N2E0MTI1NGVhYWNhLzEvUVd6cWw5MXBiOEFxeWRLTHBoMlJrOHBNTUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh
LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAIfz0QD
BAAfz0YDBAAfz0gDBACYWYUDBACy7IowDAMEBMCREAMEAMCREjANBgkqhkiG9w0B
AQsFAAOCAQEAkNdXcn1eVJjA/yvDn5owL/RO6xShICgGaENkEUYEojRl4v74uySA
bmTiIINRpoFHsP+szuSgtjQXDxTRKCo7o3cdmwxzqftWZPSAGzMsi/cJb3LR9Ezv
Jblj6rVX9KFkfsm0uab5k7nzhXnXU4ut8rD+9muJQ0tblkFFEpkHzdezo+inxAMM
GMqtpSowVhmOx5DDPJr8zprlKYE2AIGIJT8Ca11tEq2nobxga3vRsh37FenRlYRE
4uatROTLjM1Y1uzO5+82VkIBPF8jAF5LH1iA5WTzmP9uZV8BLgqyoxzag2YTq0Gd
oUxq+/BkMcRXg+DykSNhfPXDy2oK7uqckw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:29:14 2026 by rpki-client