Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/QZBaF79CzrPKnbwGspDRSVhHDCg.roa
File: QZBaF79CzrPKnbwGspDRSVhHDCg.roa (raw, json)
Hash identifier: jFKG0mrVt4edDrmlum+ZGhqMeXQuE67qBL/OA/l4wEQ=
Subject key identifier: 41:90:5A:17:BF:42:CE:B3:CA:9D:BC:06:B2:90:D1:49:58:47:0C:28
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 019F17CE02726DC25D09B3D414EE78F4F728
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/QZBaF79CzrPKnbwGspDRSVhHDCg.roa
Signing time: Tue 30 Jun 2026 09:13:24 +0000
ROA not before: Tue 30 Jun 2026 09:13:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61323
IP address blocks: 31.193.0.0/20 maxlen: 20
37.220.88.0/21 maxlen: 21
45.67.172.0/22 maxlen: 22
45.84.20.0/22 maxlen: 24
45.131.136.0/22 maxlen: 22
45.145.100.0/22 maxlen: 22
45.157.40.0/22 maxlen: 22
46.37.160.0/19 maxlen: 19
78.24.88.0/24 maxlen: 24
78.24.89.0/24 maxlen: 24
78.24.90.0/23 maxlen: 23
78.109.160.0/20 maxlen: 20
78.137.112.0/20 maxlen: 20
80.66.200.0/22 maxlen: 22
80.244.176.0/20 maxlen: 20
81.201.128.0/20 maxlen: 20
94.229.160.0/20 maxlen: 20
109.108.128.0/19 maxlen: 19
159.253.208.0/21 maxlen: 21
176.124.52.0/22 maxlen: 24
178.238.128.0/20 maxlen: 20
185.55.76.0/23 maxlen: 24
185.55.76.0/24 maxlen: 24
185.55.77.0/24 maxlen: 24
185.55.78.0/23 maxlen: 23
185.156.64.0/24 maxlen: 24
185.156.65.0/24 maxlen: 24
185.156.66.0/23 maxlen: 23
185.160.180.0/22 maxlen: 22
185.160.252.0/22 maxlen: 24
185.162.224.0/22 maxlen: 22
185.166.128.0/22 maxlen: 22
185.181.196.0/22 maxlen: 22
185.182.88.0/22 maxlen: 22
185.197.60.0/22 maxlen: 22
185.207.108.0/22 maxlen: 22
185.210.196.0/22 maxlen: 22
185.213.116.0/22 maxlen: 22
185.216.76.0/22 maxlen: 22
185.217.40.0/22 maxlen: 22
185.220.60.0/22 maxlen: 22
185.221.204.0/22 maxlen: 22
185.226.220.0/22 maxlen: 22
185.234.36.0/22 maxlen: 22
185.241.248.0/22 maxlen: 24
192.166.44.0/24 maxlen: 24
192.166.45.0/24 maxlen: 24
192.166.46.0/23 maxlen: 23
193.39.252.0/22 maxlen: 22
194.39.164.0/22 maxlen: 22
195.69.102.0/24 maxlen: 24
2a02:21a8::/48 maxlen: 48
2a02:21a8:1::/48 maxlen: 48
2a02:22d0::/32 maxlen: 32
2a02:22d0:c::/48 maxlen: 48
2a09:b200:6::/48 maxlen: 48
2a09:b600:5::/48 maxlen: 48
2a09:ba00:4::/48 maxlen: 48
2a0c:3dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:ce:02:72:6d:c2:5d:09:b3:d4:14:ee:78:f4:f7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jun 30 09:13:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41905a17bf42ceb3ca9dbc06b290d14958470c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3a:cf:fe:a1:a1:af:93:d4:4c:86:25:cc:22:
d2:87:e0:7f:56:eb:35:cb:2f:34:6c:45:37:f9:0f:
f4:cc:20:cc:0f:a5:aa:13:cc:77:8e:c8:57:1b:82:
95:f2:fa:b7:8c:26:c1:b8:82:2c:52:42:90:d3:76:
e2:c8:5e:4c:9f:8c:d1:e8:1f:4c:5e:b9:8b:44:6c:
11:de:64:05:27:66:1e:b4:4e:66:98:35:41:fe:8b:
9d:e6:e5:8d:bd:4a:94:da:95:df:0d:0b:10:b8:d9:
29:3c:4a:d0:6d:9a:19:7b:77:34:d0:28:8e:68:f3:
4c:8b:16:67:b5:de:87:0d:6c:57:eb:cb:b4:25:51:
af:83:1d:30:a7:11:9d:74:fc:8d:18:11:01:78:29:
82:d4:ea:fe:c9:bd:ed:6a:75:a3:f3:ee:36:c0:f3:
5d:c2:00:89:69:31:3b:f3:60:02:cc:a7:40:36:27:
7d:e6:52:68:02:3c:30:ae:cc:34:51:b8:c8:fd:c1:
8a:fc:42:9d:49:a0:e4:d5:26:0d:d3:5f:fd:8c:e0:
3f:85:57:ae:b4:9a:a9:92:b5:81:52:a6:a7:a0:90:
d0:bf:76:df:20:02:7a:5d:50:9d:3a:b7:90:f1:55:
c6:63:52:fd:46:e3:35:17:d7:2f:13:c8:2a:8e:fa:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:90:5A:17:BF:42:CE:B3:CA:9D:BC:06:B2:90:D1:49:58:47:0C:28
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/QZBaF79CzrPKnbwGspDRSVhHDCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.0.0/20
37.220.88.0/21
45.67.172.0/22
45.84.20.0/22
45.131.136.0/22
45.145.100.0/22
45.157.40.0/22
46.37.160.0/19
78.24.88.0/22
78.109.160.0/20
78.137.112.0/20
80.66.200.0/22
80.244.176.0/20
81.201.128.0/20
94.229.160.0/20
109.108.128.0/19
159.253.208.0/21
176.124.52.0/22
178.238.128.0/20
185.55.76.0/22
185.156.64.0/22
185.160.180.0/22
185.160.252.0/22
185.162.224.0/22
185.166.128.0/22
185.181.196.0/22
185.182.88.0/22
185.197.60.0/22
185.207.108.0/22
185.210.196.0/22
185.213.116.0/22
185.216.76.0/22
185.217.40.0/22
185.220.60.0/22
185.221.204.0/22
185.226.220.0/22
185.234.36.0/22
185.241.248.0/22
192.166.44.0/22
193.39.252.0/22
194.39.164.0/22
195.69.102.0/24
IPv6:
2a02:21a8::/47
2a02:22d0::/32
2a09:b200:6::/48
2a09:b600:5::/48
2a09:ba00:4::/48
2a0c:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
33:28:ab:2d:3c:9a:a6:5f:b7:ff:cb:3e:02:69:26:5a:dd:35:
53:4e:e3:c5:d8:26:47:61:0e:a3:af:4e:c3:4f:8f:4f:9e:45:
f6:4c:75:8e:bc:6c:53:52:42:6d:af:ac:fc:b1:2f:3e:1e:64:
50:52:69:33:a4:5e:94:48:27:fd:95:a0:7c:e2:a5:af:db:05:
08:2f:06:8a:ba:31:ff:53:f6:7a:cb:e0:19:cc:42:fb:e7:84:
66:fc:cd:5e:26:1e:1b:f1:a9:03:d1:da:44:8e:72:98:23:32:
ef:86:b2:5b:24:31:01:a2:c5:49:cb:c7:bc:31:a5:c0:94:79:
2d:19:38:af:bf:51:ff:2c:86:02:c9:c8:79:d8:59:69:59:43:
6e:0b:48:70:89:f5:30:b8:d8:12:7e:b6:6d:14:5d:7a:6a:b9:
81:83:5e:05:80:29:e1:09:ab:3f:39:8b:11:7d:88:98:87:57:
a2:45:fa:12:1a:4f:7b:28:5a:a4:65:2c:21:a2:29:92:54:75:
ed:01:95:97:30:1a:24:c9:49:5b:fe:9f:54:12:e1:46:d3:85:
37:ea:a2:df:5b:60:08:c7:89:b0:d9:53:24:22:df:a2:08:a6:
b5:a1:17:60:f9:8e:eb:e2:cd:e6:88:5e:1d:df:49:b1:d8:d6:
19:89:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:47 2026 by rpki-client