Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/QL7b4I-8HWqz1N7Ob5lNINRe1YM.roa
File: QL7b4I-8HWqz1N7Ob5lNINRe1YM.roa (raw, json)
Hash identifier: eqF1+iN5AoBCtlcYwfv+FOiTFV16VAX0mv8JBLnW9r0=
Subject key identifier: 40:BE:DB:E0:8F:BC:1D:6A:B3:D4:DE:CE:6F:99:4D:20:D4:5E:D5:83
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019F8D74DEE4EDB0EAEBC400FE2918F35F66
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/QL7b4I-8HWqz1N7Ob5lNINRe1YM.roa
Signing time: Thu 23 Jul 2026 05:31:14 +0000
ROA not before: Thu 23 Jul 2026 05:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201167
IP address blocks: 62.212.235.0/24 maxlen: 24
85.132.8.0/24 maxlen: 24
85.132.9.0/24 maxlen: 24
85.132.10.0/24 maxlen: 24
85.132.11.0/24 maxlen: 24
85.132.97.0/24 maxlen: 24
94.20.42.0/24 maxlen: 24
94.20.52.0/24 maxlen: 24
94.20.96.0/24 maxlen: 24
94.20.97.0/24 maxlen: 24
94.20.98.0/24 maxlen: 24
94.20.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:74:de:e4:ed:b0:ea:eb:c4:00:fe:29:18:f3:5f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Jul 23 05:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40bedbe08fbc1d6ab3d4dece6f994d20d45ed583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:d8:a0:26:8f:65:d7:af:8e:31:fc:18:d0:
6f:7e:7c:f1:fb:34:cc:51:28:c3:37:d0:53:d6:9a:
98:89:a7:7f:4d:b6:71:bd:71:d6:54:01:d7:3b:5b:
e5:5d:f4:8f:55:32:a9:21:a5:ec:de:fc:13:77:45:
df:b3:b9:72:8c:ff:5d:09:41:a5:ce:40:2c:6f:78:
11:05:dd:2d:5c:86:99:d1:a5:ed:cc:38:e9:13:6c:
f4:1c:e8:93:e7:4a:a8:ac:05:6c:da:2d:22:02:7d:
dc:56:07:c3:4e:57:66:e2:af:e9:af:63:2f:25:11:
db:bb:06:09:d3:70:52:80:4d:8c:a4:78:8f:98:3c:
56:3a:80:63:93:77:d6:5e:aa:c8:a9:bb:b2:6c:82:
26:68:85:37:a9:90:4b:93:d6:ab:bc:9f:e7:3f:fb:
b2:5b:69:34:6e:db:fc:68:57:46:a7:49:d8:fa:a5:
5b:b6:cd:cc:de:4f:fd:c9:c4:df:be:9f:c5:ba:14:
3c:1c:73:3f:96:16:12:82:12:0e:28:9a:05:a3:53:
48:c5:3a:80:6b:ce:65:29:be:b3:23:4b:46:c0:4b:
5d:ca:b1:a7:e6:1f:ff:30:e6:6c:12:e8:35:c3:03:
8d:10:9d:bc:5b:de:5b:f1:b5:71:a9:a5:a2:8d:17:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BE:DB:E0:8F:BC:1D:6A:B3:D4:DE:CE:6F:99:4D:20:D4:5E:D5:83
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/QL7b4I-8HWqz1N7Ob5lNINRe1YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.212.235.0/24
85.132.8.0/22
85.132.97.0/24
94.20.42.0/24
94.20.52.0/24
94.20.96.0/22
Signature Algorithm: sha256WithRSAEncryption
38:09:d0:dc:97:c6:96:16:b0:3a:37:f5:0d:fe:bf:bf:61:06:
0e:fd:30:0c:8a:ba:b9:f7:99:42:09:1d:d5:f0:a0:93:83:04:
97:3e:4b:f4:ae:b6:3b:79:71:95:c5:53:06:c4:4c:14:1e:0a:
13:0b:48:ec:cb:c5:fd:5e:68:85:35:4b:85:6c:f8:7b:ea:1d:
1e:31:07:ad:67:8b:c4:55:34:95:b1:45:26:00:45:e8:9c:4a:
49:f9:b3:94:b9:bd:77:ef:05:61:34:ea:5e:9d:af:f8:39:29:
24:c2:e0:28:9b:02:c6:8e:4d:81:54:22:47:47:81:a4:1c:89:
8d:db:2d:d3:67:d1:81:4b:7f:c7:d0:ca:e3:b0:df:fa:91:13:
9d:bf:93:63:99:03:48:61:7e:87:33:c6:6b:9f:c2:9b:c8:39:
db:85:e7:f7:3f:0a:4d:17:72:89:3b:a3:a9:58:9d:21:a7:ba:
0e:92:b9:85:76:af:14:35:29:d8:2e:ae:55:5c:4e:43:7c:17:
97:4b:1f:aa:70:f3:9a:ef:b7:1b:20:33:74:4e:73:ee:0a:04:
f1:40:01:37:37:9d:1a:26:3e:6d:61:53:99:e5:ca:1c:cb:d2:
09:f3:0c:9d:9b:25:1b:0e:b9:39:40:dc:49:f8:30:ef:d6:af:
85:24:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:44 2026 by rpki-client