Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qnqAS1otfL1o2AVqufuCYoguLxU.roa
File: qnqAS1otfL1o2AVqufuCYoguLxU.roa (raw, json)
Hash identifier: 0UXo3htA4RgPmZRZ/spLE15rbXGy5bCmzpSExFcvNpM=
Subject key identifier: AA:7A:80:4B:5A:2D:7C:BD:68:D8:05:6A:B9:FB:82:62:88:2E:2F:15
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A0CD1F2C71AB7BF44C80311282E5426AB4
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qnqAS1otfL1o2AVqufuCYoguLxU.roa
Signing time: Wed 23 Sep 2026 07:16:07 +0000
ROA not before: Wed 23 Sep 2026 07:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 5.180.136.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
45.9.74.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
45.132.253.0/24 maxlen: 24
45.133.245.0/24 maxlen: 24
45.133.246.0/24 maxlen: 24
46.17.106.0/24 maxlen: 24
85.209.0.0/24 maxlen: 24
85.209.3.0/24 maxlen: 24
95.214.8.0/24 maxlen: 24
139.28.220.0/24 maxlen: 24
139.28.221.0/24 maxlen: 24
185.17.2.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.94.167.0/24 maxlen: 24
185.104.250.0/24 maxlen: 24
185.105.118.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
185.112.100.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.188.181.0/24 maxlen: 24
185.229.65.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
193.109.84.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
194.53.54.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.67.200.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
2a0a:9300:1::/48 maxlen: 48
2a0a:9300:aaaa::/48 maxlen: 48
2a0b:da00::/32 maxlen: 32
2a0b:da01::/32 maxlen: 32
2a0b:da02::/32 maxlen: 32
2a0b:da03::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:1f:2c:71:ab:7b:f4:4c:80:31:12:82:e5:42:6a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Sep 23 07:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa7a804b5a2d7cbd68d8056ab9fb8262882e2f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:3e:ff:b6:89:f1:bc:50:05:3f:3b:12:6b:
d4:d9:53:ed:1a:a5:04:91:5d:c6:0f:8a:6f:a4:b7:
9c:38:de:d9:70:82:00:b3:01:4e:12:ae:11:9e:b1:
48:d4:3b:cf:f3:79:49:21:38:bf:5a:df:7b:d3:66:
ef:a3:78:bd:23:60:3e:a1:af:ee:03:b6:95:6b:9c:
1b:d5:6b:39:3d:7d:f9:24:77:a4:81:10:1b:04:38:
18:67:32:7b:92:47:2e:39:0a:b6:45:21:ab:35:a4:
6b:0a:ed:b2:e3:e4:97:1c:54:a5:1c:1a:76:d8:92:
a9:5c:68:95:14:b1:80:85:15:b1:c6:c5:ab:c5:b5:
7c:1c:b6:37:fa:f3:e5:73:2b:15:1a:6b:44:f1:81:
3c:13:5a:a5:17:c9:c1:0b:97:ee:d7:69:b2:d2:98:
fe:af:40:2a:6d:99:48:59:80:4f:c2:a7:3a:c5:63:
82:ed:a0:4c:46:3d:79:08:37:5e:d9:99:aa:62:6f:
2e:3a:95:f8:31:5b:9d:57:5f:5a:1f:41:d5:65:58:
53:30:1d:e3:d6:e3:07:19:98:e8:7e:c3:4e:2f:18:
2e:9a:7a:3c:4f:d0:df:af:13:36:31:48:7e:ef:c7:
03:33:bb:49:9c:1c:fe:3b:7f:5f:83:2d:c6:95:29:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7A:80:4B:5A:2D:7C:BD:68:D8:05:6A:B9:FB:82:62:88:2E:2F:15
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qnqAS1otfL1o2AVqufuCYoguLxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.9.74.0/24
45.89.64.0/24
45.132.253.0/24
45.133.245.0-45.133.246.255
46.17.106.0/24
85.209.0.0/24
85.209.3.0/24
95.214.8.0/24
139.28.220.0/23
185.17.2.0/24
185.58.207.0/24
185.94.167.0/24
185.104.250.0/24
185.105.118.0/24
185.112.83.0/24
185.112.100.0/24
185.125.228.0/24
185.125.230.0/23
185.188.181.0/24
185.229.65.0-185.229.66.255
192.162.100.0/24
192.162.102.0/23
193.0.200.0/24
193.0.202.0/23
193.109.84.0/23
193.124.180.0/23
194.36.177.0/24
194.53.54.0/24
194.63.140.0/22
194.67.200.0/24
195.66.87.0/24
IPv6:
2a0a:9300:1::/48
2a0a:9300:aaaa::/48
2a0b:da00::/30
Signature Algorithm: sha256WithRSAEncryption
6a:ee:c5:2f:05:1a:99:81:de:25:01:79:d4:25:6a:d7:9d:c8:
fc:ee:46:19:57:77:44:50:c2:cb:92:89:5b:f8:d5:6b:5b:93:
fd:6e:45:fe:28:49:79:49:bc:29:b2:1b:18:aa:2e:3a:fe:b1:
e3:80:d6:a7:9b:c9:6c:80:8c:43:3e:aa:6a:1f:a2:db:3d:f7:
a5:89:13:1e:ae:ac:68:8a:e7:59:93:81:19:b0:3e:cb:e3:b3:
2f:ab:eb:28:3b:7e:af:d9:58:c7:ab:01:42:27:cb:60:4f:7c:
9c:47:fb:ac:d2:9d:04:e0:2f:17:1b:a9:70:96:37:1f:7e:62:
c8:c6:29:72:eb:15:8b:31:25:ef:62:66:4b:57:3d:23:80:9c:
20:ce:8b:72:3e:5e:71:f6:d6:4e:d3:e9:1d:46:1f:ee:93:be:
16:e2:79:0f:53:3b:cc:01:c1:ea:3c:41:be:27:c2:39:4b:81:
ee:81:a1:5a:e3:4f:4c:93:1f:64:cb:76:b8:57:6d:15:14:b3:
c1:e6:ed:f7:df:e1:89:87:50:57:92:2f:b4:18:9f:ab:bf:a3:
d3:64:0c:77:5d:60:0d:9c:83:d5:fe:5e:1f:60:cc:ff:57:0e:
cc:7c:80:ad:72:bb:e4:5f:50:41:90:55:34:56:19:13:6b:e0:
d2:ff:51:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:35 2026 by rpki-client