Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/zqr4aGdDDtzTHDNPWJqgcPddlew.roa
File: zqr4aGdDDtzTHDNPWJqgcPddlew.roa (raw, json)
Hash identifier: SNHy9E5ZRD/6ft8c8Ogn35Ny9ABmYBAl4wY1xF1BhGo=
Subject key identifier: CE:AA:F8:68:67:43:0E:DC:D3:1C:33:4F:58:9A:A0:70:F7:5D:95:EC
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019F5FB4F9BDF979A54878E51E8FE83D8BA7
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/zqr4aGdDDtzTHDNPWJqgcPddlew.roa
Signing time: Tue 14 Jul 2026 08:18:43 +0000
ROA not before: Tue 14 Jul 2026 08:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198605
IP address blocks: 159.242.227.0/24 maxlen: 24
159.242.234.0/24 maxlen: 24
159.242.239.0/24 maxlen: 24
185.54.230.0/24 maxlen: 24
194.99.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:b4:f9:bd:f9:79:a5:48:78:e5:1e:8f:e8:3d:8b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jul 14 08:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ceaaf86867430edcd31c334f589aa070f75d95ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:a1:be:d3:82:26:01:e1:5f:84:15:38:6c:
0e:81:11:1d:7b:2c:19:5e:ae:b6:36:d0:a5:1c:5a:
df:34:2e:55:83:d3:a4:13:8d:b6:6b:94:32:69:a2:
0a:1f:b1:50:c3:94:9b:6b:1a:ad:50:22:9d:45:20:
7f:41:f5:cb:c9:91:59:a5:0c:9e:8e:a2:9e:7a:d0:
4f:89:3b:ba:81:32:5e:93:ab:c1:24:d2:57:e2:5f:
1d:2f:17:40:ce:d8:fe:14:28:5b:8a:ef:7b:25:b0:
14:a9:c6:a8:35:64:e7:91:55:88:f6:4d:98:3e:e6:
61:aa:b6:47:18:13:e5:0c:9d:70:d4:b5:c6:61:3d:
1b:7c:e4:8f:3a:e0:b2:fd:d8:5b:82:2a:19:43:81:
30:23:0e:b3:d7:6a:cc:2c:c8:80:44:c8:cd:3e:ca:
f4:85:d8:2a:eb:dd:c4:51:41:27:17:91:9c:ec:2b:
fa:1b:15:01:c5:e9:80:90:d2:dd:f7:d4:67:53:83:
3c:28:3d:35:98:a4:d2:e5:7e:b0:03:12:c6:75:f9:
71:a0:91:4e:94:7e:7e:50:cb:f9:de:e6:9d:be:7a:
23:b1:44:f3:d1:2b:d9:21:d5:c9:1f:08:f1:e8:95:
87:e8:ea:b8:0f:2e:54:b1:c4:21:68:72:62:36:b9:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:F8:68:67:43:0E:DC:D3:1C:33:4F:58:9A:A0:70:F7:5D:95:EC
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/zqr4aGdDDtzTHDNPWJqgcPddlew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.242.227.0/24
159.242.234.0/24
159.242.239.0/24
185.54.230.0/24
194.99.28.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:28:aa:9a:47:bc:02:3d:02:e7:5e:11:c7:d1:3d:de:7a:a2:
8b:e2:87:8d:d3:6d:9c:26:bf:42:a2:31:bd:45:67:9b:36:00:
99:31:d2:e5:4b:3a:67:e0:c8:a4:eb:61:d7:8c:63:f6:ba:ed:
e5:9a:bd:e4:f9:c1:72:b6:86:d9:56:da:95:2f:46:1a:16:76:
dd:07:44:a2:c6:f0:fb:cb:f4:57:50:51:3c:db:20:2e:59:7e:
9f:83:ab:fc:d5:d0:98:52:d3:e1:12:e2:10:a4:a2:d3:6e:b6:
5b:0f:f8:85:b9:e8:55:20:61:de:ae:3e:4f:9f:c4:01:79:26:
50:be:3e:2c:ce:22:59:df:e5:94:65:1f:26:0d:f9:0f:6c:0b:
ba:e3:53:6a:6a:9e:78:b6:5d:90:f3:98:72:4d:7f:b1:d8:00:
fa:71:9a:00:ca:21:ff:c8:06:49:b7:02:8c:1b:a3:eb:a1:f9:
30:28:86:b2:74:68:c0:1c:54:98:99:fb:dc:27:8d:47:a8:45:
f7:5c:89:38:7d:56:f1:c4:51:da:47:6b:05:ff:bd:fb:f4:35:
d8:1e:10:bc:ac:bf:3d:d1:fe:73:24:6f:ba:c0:a0:14:46:91:
1b:99:98:5a:fb:20:a1:bd:56:0f:5a:49:9c:56:f7:e6:42:a8:
62:bc:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:37 2026 by rpki-client