Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/QuJwAkOFN_XOE8IM4XrowzLIN7M.roa
File: QuJwAkOFN_XOE8IM4XrowzLIN7M.roa (raw, json)
Hash identifier: VPGDJLJ+93FnhUEzwkY0Hv11B12LiVEv3FiMpJzAXQA=
Subject key identifier: 42:E2:70:02:43:85:37:F5:CE:13:C2:0C:E1:7A:E8:C3:32:C8:37:B3
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 01A0D398FEE75FEB0764441052FF02161200
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/QuJwAkOFN_XOE8IM4XrowzLIN7M.roa
Signing time: Thu 24 Sep 2026 13:26:54 +0000
ROA not before: Thu 24 Sep 2026 13:26:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216083
IP address blocks: 5.42.148.0/23 maxlen: 24
195.68.234.0/23 maxlen: 23
195.68.234.0/24 maxlen: 24
195.68.235.0/24 maxlen: 24
195.110.8.0/24 maxlen: 24
2a14:1a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:98:fe:e7:5f:eb:07:64:44:10:52:ff:02:16:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Sep 24 13:26:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42e27002438537f5ce13c20ce17ae8c332c837b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:03:d3:6c:08:ff:61:12:d4:82:75:ab:42:
e0:9c:ed:47:f5:b2:b0:86:7e:0d:1e:cc:fa:47:5f:
6e:80:06:e7:16:1b:24:e7:72:8b:d5:24:f9:1c:4c:
57:00:e5:52:52:41:3a:99:1c:e5:ff:16:40:2c:33:
88:62:05:ef:42:f9:a9:d8:c9:f6:5e:94:9a:83:4e:
af:31:90:88:6e:4a:14:83:5b:4a:8a:8a:09:c7:02:
af:86:c2:4a:d3:b9:b1:44:39:e3:b3:ac:29:2a:c3:
d2:df:8c:4d:ef:cb:39:84:bb:6b:ca:87:95:17:de:
16:72:6a:99:e4:0d:2a:19:67:35:7a:aa:78:6a:87:
b0:4d:6b:ce:2d:78:34:50:ff:00:b4:c8:ca:77:4a:
aa:00:3d:09:c0:fa:a9:f1:18:6a:ea:ae:e1:69:88:
7b:92:f1:b8:ea:24:b2:2f:da:b8:bf:68:bf:92:ba:
e1:68:6f:8e:2f:5c:e2:59:7e:4f:ec:ea:18:be:57:
0a:9c:26:bc:7c:f3:37:b2:db:67:3d:cb:5a:73:18:
5a:7f:43:ca:e0:94:9e:6b:67:b9:8e:ec:75:3e:62:
62:f1:5d:bc:91:2d:1e:66:5f:05:cd:a2:5e:86:0c:
dd:f0:a9:4b:2d:59:1e:03:53:62:5b:ae:53:e9:fd:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E2:70:02:43:85:37:F5:CE:13:C2:0C:E1:7A:E8:C3:32:C8:37:B3
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/QuJwAkOFN_XOE8IM4XrowzLIN7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.148.0/23
195.68.234.0/23
195.110.8.0/24
IPv6:
2a14:1a00::/29
Signature Algorithm: sha256WithRSAEncryption
45:f8:f2:dc:3d:85:3d:ea:55:ba:3a:26:ca:6d:9f:8c:32:aa:
3d:f1:74:4e:c4:af:d6:db:18:13:72:1c:38:c4:59:da:df:57:
19:ef:ef:3b:b5:ff:c1:ad:15:49:0a:46:2c:bc:43:f7:87:38:
5e:b3:2f:b9:8a:3c:74:43:0c:c2:64:de:87:22:9e:f7:c8:19:
8c:b6:03:c0:38:f0:2d:15:d6:b3:67:67:3d:5f:ed:91:1c:7c:
ee:53:25:5d:45:09:a0:1f:55:48:0b:39:9e:1a:c6:23:3a:8a:
e8:d5:33:02:ea:32:75:b5:b7:ac:68:0f:f0:01:ad:24:ee:45:
48:14:53:a8:d3:48:ce:b5:af:63:92:d3:83:0c:65:f6:29:cc:
ce:7d:d6:93:23:3c:74:00:e3:ed:1f:5d:94:ce:d9:41:eb:12:
57:c3:7e:ed:d1:83:06:83:7c:ae:24:9f:5d:73:7b:87:db:13:
07:6a:0b:6e:e4:2b:16:e2:ff:fd:59:d5:03:ff:d5:6c:82:fd:
a3:5d:56:a3:f8:4d:ca:54:80:dc:c3:4f:62:dd:04:3f:ed:56:
b9:36:4f:00:4f:57:30:49:cc:61:7e:e0:de:e5:58:a7:3f:69:
38:3b:b7:9e:f6:57:94:83:2e:0f:d5:53:dd:e0:f3:f7:6b:9d:
c8:5d:b4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:36:14 2026 by rpki-client