Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Q9nvI3qkVuFvoyPoBbJHJeLZJxI.roa
File: Q9nvI3qkVuFvoyPoBbJHJeLZJxI.roa (raw, json)
Hash identifier: D+A5lPc8Jvtsy5Z3TPYGiN1TukZ9ZXFSNxW0LNpBBH4=
Subject key identifier: 43:D9:EF:23:7A:A4:56:E1:6F:A3:23:E8:05:B2:47:25:E2:D9:27:12
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01A1D43B394749E6147B6DC6444F42B04530
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Q9nvI3qkVuFvoyPoBbJHJeLZJxI.roa
Signing time: Fri 13 Nov 2026 09:26:53 +0000
ROA not before: Fri 13 Nov 2026 09:26:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59592
IP address blocks: 37.114.32.0/19 maxlen: 32
37.114.32.0/24 maxlen: 32
37.114.33.0/24 maxlen: 32
37.114.35.0/24 maxlen: 24
37.114.36.0/24 maxlen: 24
37.114.38.0/24 maxlen: 24
37.114.39.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
94.154.48.0/21 maxlen: 24
94.154.49.0/24 maxlen: 24
94.154.51.0/24 maxlen: 24
94.154.52.0/24 maxlen: 24
94.154.53.0/24 maxlen: 24
94.154.54.0/24 maxlen: 24
176.100.32.0/21 maxlen: 32
176.100.32.0/24 maxlen: 24
176.100.33.0/24 maxlen: 24
176.100.34.0/24 maxlen: 24
176.100.35.0/24 maxlen: 24
176.100.36.0/24 maxlen: 24
176.100.37.0/24 maxlen: 24
185.14.92.0/22 maxlen: 22
2a00:ccc0::/29 maxlen: 128
2a00:ccc2::/32 maxlen: 32
2a00:ccc4::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:3b:39:47:49:e6:14:7b:6d:c6:44:4f:42:b0:45:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Nov 13 09:26:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43d9ef237aa456e16fa323e805b24725e2d92712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:26:06:99:82:02:96:94:89:cb:6c:93:a9:
7c:25:3f:74:48:e9:55:95:e4:6a:1c:03:7d:26:41:
96:16:e9:cb:b2:aa:0a:91:4d:69:f8:0f:57:d4:04:
60:af:7d:f1:06:a9:5e:b3:5a:f8:f4:1e:ff:6b:8a:
22:64:41:34:7a:2b:6e:73:5e:b4:11:18:7a:cc:c2:
0e:2c:8c:24:b9:c6:3a:ef:e7:6b:1c:b8:c4:10:4d:
b4:1b:04:5b:da:b7:9e:a9:ae:8e:db:be:89:08:2e:
1e:59:6e:f6:ac:bd:59:db:9d:61:c9:86:32:af:8f:
5d:23:1c:17:35:5e:04:70:1d:3e:e7:b1:f3:ee:10:
37:20:7f:7c:86:fa:ce:9f:7c:66:a1:a4:84:de:6a:
81:cd:47:d3:fa:54:84:5b:c9:65:09:34:0e:a7:fe:
57:6d:1a:9d:9f:42:46:ab:14:f9:17:cd:14:ee:93:
d0:51:a3:83:55:d7:4e:9c:66:7c:e1:a7:0a:89:b4:
4a:cb:c9:77:6a:06:2a:af:92:1f:54:b7:f2:bc:5a:
d4:6d:6c:f3:cc:03:11:c6:47:bc:73:94:c6:de:8f:
26:e7:8e:49:7e:2b:20:9d:01:46:68:1c:07:00:df:
b7:b6:17:c4:ae:9e:05:13:7b:b8:ed:ca:54:30:38:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D9:EF:23:7A:A4:56:E1:6F:A3:23:E8:05:B2:47:25:E2:D9:27:12
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Q9nvI3qkVuFvoyPoBbJHJeLZJxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/19
43.251.160.0/23
94.154.48.0/21
176.100.32.0/21
185.14.92.0/22
IPv6:
2a00:ccc0::/29
Signature Algorithm: sha256WithRSAEncryption
91:1f:b2:48:bb:91:71:5c:a1:55:4d:21:f3:ed:59:19:79:8c:
f4:ba:8c:d3:63:ee:9f:b0:3b:07:5f:cb:8f:7b:c9:f6:d9:f8:
49:6d:f5:64:d2:f4:f6:fb:f1:16:b8:be:59:8a:28:fb:e6:92:
8c:a9:ce:c6:4c:0e:17:c2:18:3e:86:56:5f:fd:b7:74:85:ee:
44:c0:cc:c0:e0:e0:22:1a:ed:bc:1f:6a:3d:25:f5:57:20:18:
2c:24:44:fd:a6:ae:3e:79:3f:0b:0a:64:a2:b4:ed:ed:ad:37:
12:4f:a7:78:ac:af:0b:3c:0c:22:79:31:21:55:52:94:8f:d4:
78:69:dd:57:9f:5d:96:d9:19:82:c3:a5:0a:72:46:43:a3:1a:
85:05:6b:70:e5:4a:ca:b5:22:1f:54:91:de:28:73:b5:d0:d8:
41:4d:08:6d:c2:b9:75:95:31:db:9e:42:71:08:53:23:64:3d:
b9:38:60:bd:f9:c8:d8:46:10:8f:a6:43:12:e9:f6:8e:db:94:
e2:70:96:45:61:46:e3:e9:d1:ff:02:7b:8f:36:20:9e:fc:be:
63:d7:54:c5:05:50:a7:56:b5:84:52:06:d1:2e:f2:c2:a2:58:
f6:ea:e8:89:20:7a:05:ac:ab:f8:50:1a:9e:86:83:00:88:73:
6d:d5:85:ee
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAaHUOzlHSeYUe23GRE9CsEUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjYxMTEzMDkyNjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2Q5ZWYyMzdhYTQ1NmUxNmZhMzIzZTgwNWIyNDcyNWUyZDkyNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7MmBpmCApaUictsk6l8JT90SOlV
leRqHAN9JkGWFunLsqoKkU1p+A9X1ARgr33xBqles1r49B7/a4oiZEE0eituc160
ERh6zMIOLIwkucY67+drHLjEEE20GwRb2reeqa6O276JCC4eWW72rL1Z251hyYYy
r49dIxwXNV4EcB0+57Hz7hA3IH98hvrOn3xmoaSE3mqBzUfT+lSEW8llCTQOp/5X
bRqdn0JGqxT5F80U7pPQUaODVddOnGZ84acKibRKy8l3agYqr5IfVLfyvFrUbWzz
zAMRxke8c5TG3o8m545JfisgnQFGaBwHAN+3thfErp4FE3u47cpUMDgpEQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFEPZ7yN6pFbhb6Mj6AWyRyXi2ScSMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvUTludkkzcWtWdUZ2b3lQb0JiSkhKZUxaSnhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFJXIgAwQB
K/ugAwQDXpowAwQDsGQgAwQCuQ5cMA0EAgACMAcDBQMqAMzAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRH7JIu5FxXKFVTSHz7VkZeYz0uozTY+6fsDsHX8uPe8n22fhJbfVk
0vT2+/EWuL5Ziij75pKMqc7GTA4Xwhg+hlZf/bd0he5EwMzA4OAiGu28H2o9JfVX
IBgsJET9pq4+eT8LCmSitO3trTcST6d4rK8LPAwieTEhVVKUj9R4ad1Xn12W2RmC
w6UKckZDoxqFBWtw5UrKtSIfVJHeKHO10NhBTQhtwrl1lTHbnkJxCFMjZD25OGC9
+cjYRhCPpkMS6faO25TicJZFYUbj6dH/AnuPNiCe/L5j11TFBVCnVrWEUgbRLvLC
olj26uiJIHoFrKv4UBqehoMAiHNt1YXu
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:49 2026 by rpki-client