Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/QeKemWkzcdPI_tNo1w__my2Ru00.roa
File: QeKemWkzcdPI_tNo1w__my2Ru00.roa (raw, json)
Hash identifier: 3P7/WmXupW+gmjWQd/15doAHhoPqVQGMW4/L7I58SJ4=
Subject key identifier: 41:E2:9E:99:69:33:71:D3:C8:FE:D3:68:D7:0F:FF:9B:2D:91:BB:4D
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A1ACE6B7A0B4605DF03AD4020D39E5544D
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/QeKemWkzcdPI_tNo1w__my2Ru00.roa
Signing time: Thu 05 Nov 2026 18:09:23 +0000
ROA not before: Thu 05 Nov 2026 18:09:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204997
IP address blocks: 45.144.64.0/24 maxlen: 24
45.144.65.0/24 maxlen: 24
45.144.66.0/24 maxlen: 24
45.144.67.0/24 maxlen: 24
46.17.104.0/24 maxlen: 24
91.217.81.0/24 maxlen: 24
139.28.222.0/24 maxlen: 24
139.28.223.0/24 maxlen: 24
147.78.64.0/24 maxlen: 24
147.78.65.0/24 maxlen: 24
147.78.66.0/24 maxlen: 24
147.78.67.0/24 maxlen: 24
185.17.0.0/24 maxlen: 24
185.17.3.0/24 maxlen: 24
185.40.4.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.104.249.0/24 maxlen: 24
185.139.68.0/24 maxlen: 24
185.139.69.0/24 maxlen: 24
185.139.70.0/24 maxlen: 24
185.139.71.0/24 maxlen: 24
185.174.138.0/24 maxlen: 24
185.180.230.0/24 maxlen: 24
185.180.231.0/24 maxlen: 24
185.188.182.0/24 maxlen: 24
185.188.183.0/24 maxlen: 24
185.189.12.0/22 maxlen: 22
185.189.12.0/24 maxlen: 24
185.189.13.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
185.195.24.0/24 maxlen: 24
185.195.25.0/24 maxlen: 24
185.195.26.0/24 maxlen: 24
185.195.27.0/24 maxlen: 24
185.204.0.0/24 maxlen: 24
185.204.2.0/24 maxlen: 24
185.204.3.0/24 maxlen: 24
185.212.148.0/24 maxlen: 24
185.244.172.0/24 maxlen: 24
185.244.173.0/24 maxlen: 24
185.252.146.0/24 maxlen: 24
185.252.147.0/24 maxlen: 24
185.255.132.0/24 maxlen: 24
185.255.133.0/24 maxlen: 24
185.255.134.0/24 maxlen: 24
185.255.135.0/24 maxlen: 24
193.109.78.0/24 maxlen: 24
193.109.79.0/24 maxlen: 24
195.66.114.0/24 maxlen: 24
2a04:5200:fb01::/48 maxlen: 48
2a04:5200:fb02::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5200:fff2::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff4::/48 maxlen: 48
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5200:fff7::/48 maxlen: 48
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:e6:b7:a0:b4:60:5d:f0:3a:d4:02:0d:39:e5:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Nov 5 18:09:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41e29e99693371d3c8fed368d70fff9b2d91bb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:e9:ce:be:0c:38:45:27:a5:64:0c:2f:d9:
b9:46:9f:bb:e6:1e:91:5a:10:13:e1:80:8a:98:b0:
5d:3a:03:1d:e5:ba:77:bd:d9:b8:8b:11:05:9a:67:
32:df:11:75:fb:fa:d5:a4:27:53:91:aa:3f:86:54:
15:62:95:ad:69:31:85:68:09:63:db:ee:d3:69:f9:
18:46:c8:35:e5:ea:e1:ef:47:4e:ee:36:e9:7b:17:
ac:01:39:6c:b0:9c:c6:75:dd:86:ea:ad:05:51:13:
e2:36:28:c5:92:ec:6d:43:f5:a1:42:ea:d0:2b:8a:
c8:92:d7:b8:5e:49:4e:6a:4e:e6:56:bf:b3:76:71:
52:07:19:01:65:69:7d:ae:4b:02:9f:b6:bb:a0:35:
5a:66:70:b0:a2:84:bf:c3:9d:6a:6c:f1:fb:4b:73:
ea:6b:71:9c:46:ba:97:2d:1c:ee:e9:39:27:c9:40:
22:dc:48:67:bc:39:d5:67:93:3d:ac:85:ba:0c:c5:
26:c2:20:bb:5b:a4:2d:74:03:4b:ee:53:4d:6f:b4:
11:a1:53:07:74:ae:39:01:d2:ad:0b:1e:5a:7e:ce:
8f:a2:4a:0d:0a:f0:97:b8:3e:c4:ed:57:b4:a2:65:
42:41:41:61:ef:e7:15:3e:0f:01:6f:ba:3d:80:27:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E2:9E:99:69:33:71:D3:C8:FE:D3:68:D7:0F:FF:9B:2D:91:BB:4D
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/QeKemWkzcdPI_tNo1w__my2Ru00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.64.0/22
46.17.104.0/24
91.217.81.0/24
139.28.222.0/23
147.78.64.0/22
185.17.0.0/24
185.17.3.0/24
185.40.4.0/24
185.104.248.0/23
185.139.68.0/22
185.174.138.0/24
185.180.230.0/23
185.188.182.0/23
185.189.12.0/22
185.195.24.0/22
185.204.0.0/24
185.204.2.0/23
185.212.148.0/24
185.244.172.0/23
185.252.146.0/23
185.255.132.0/22
193.109.78.0/23
195.66.114.0/24
IPv6:
2a04:5200:fb01::-2a04:5200:fb02:ffff:ffff:ffff:ffff:ffff
2a04:5200:ff00::/48
2a04:5200:ff10::/48
2a04:5200:fff1::-2a04:5200:fff9:ffff:ffff:ffff:ffff:ffff
2a04:5200:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
94:dc:24:72:b4:c4:b0:f4:fe:7b:20:57:0f:74:90:74:6e:ce:
d6:f4:df:e2:82:3a:33:08:7a:73:2b:c0:cb:e7:11:4c:bf:aa:
0a:16:2c:94:f2:71:15:99:54:f5:9a:a5:e0:cf:44:ca:ed:62:
09:4c:0e:03:43:4d:18:15:c0:18:9e:c5:35:4e:51:33:b3:d1:
47:cd:94:21:ff:21:74:e9:57:6d:2d:3c:08:9c:63:32:44:1a:
a7:33:ee:0f:0b:c1:11:a7:af:81:ce:4c:73:fa:5b:c3:47:00:
3e:8b:56:56:81:5d:72:7e:24:47:47:cf:f6:3e:7a:d9:1c:75:
9d:e2:2f:1b:d5:38:94:80:e4:ff:db:9e:da:b7:80:00:50:3c:
4c:6e:7d:ce:b9:43:9a:e5:88:d5:7f:20:72:61:70:0a:0b:3e:
03:4f:7e:c9:9d:87:c9:50:a2:6b:7b:84:ee:fd:b8:06:bc:fb:
2c:62:b1:77:88:db:98:61:ca:66:d4:c6:cf:c3:e2:76:17:e8:
76:2f:62:f9:86:00:c9:f6:7c:d4:c4:df:eb:ef:95:ec:75:cb:
c1:4f:16:f4:32:41:c5:07:58:b9:0f:2d:55:b0:dd:44:27:c6:
71:9e:09:5a:8b:e4:62:13:e5:e5:ed:6d:82:1d:18:8d:10:85:
95:ba:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:53:59 2026 by rpki-client