Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/QV1p24N--8uDMSfs42M3rD2K2po.roa
File: QV1p24N--8uDMSfs42M3rD2K2po.roa (raw, json)
Hash identifier: Pu65mKKOVTKLMmUsLxQRkkjMG01PHkculnluA94snlA=
Subject key identifier: 41:5D:69:DB:83:7E:FB:CB:83:31:27:EC:E3:63:37:AC:3D:8A:DA:9A
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 01A1DA43B76B944E2082B7BC76BF287078B8
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/QV1p24N--8uDMSfs42M3rD2K2po.roa
Signing time: Sat 14 Nov 2026 13:33:53 +0000
ROA not before: Sat 14 Nov 2026 13:33:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210814
IP address blocks: 87.199.152.0/24 maxlen: 24
87.199.153.0/24 maxlen: 24
87.199.155.0/24 maxlen: 24
136.148.148.0/24 maxlen: 24
136.148.149.0/24 maxlen: 24
136.148.150.0/24 maxlen: 24
185.119.205.0/24 maxlen: 24
199.204.25.0/24 maxlen: 24
199.204.26.0/24 maxlen: 24
199.204.27.0/24 maxlen: 24
2a05:3a80::/48 maxlen: 48
2a05:3a80:1::/48 maxlen: 48
2a05:3a80:2::/48 maxlen: 48
2a05:3a80:3::/48 maxlen: 48
2a05:3a80:5::/48 maxlen: 48
2a05:3a80:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:43:b7:6b:94:4e:20:82:b7:bc:76:bf:28:70:78:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Nov 14 13:33:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=415d69db837efbcb833127ece36337ac3d8ada9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:3a:0b:f3:3f:1f:ec:dd:c9:8f:e2:31:9e:
4e:e1:09:c4:5f:02:ac:be:ab:d8:c3:eb:e5:0d:8b:
40:a0:5f:0a:8a:c5:93:b0:82:bf:27:8b:f6:20:0e:
77:cd:6a:fd:e1:1c:d7:4f:09:d2:a0:4c:53:ee:31:
ee:08:df:44:9d:a3:d4:59:33:bf:d4:05:cc:8f:a1:
ee:a1:88:8f:5c:1b:95:01:54:23:a0:94:85:41:93:
5f:ae:c8:9c:9d:31:43:81:09:fe:36:b6:4b:f7:a3:
29:34:ad:2a:bb:f3:e8:e0:bb:31:fd:ba:01:31:21:
94:e0:d5:39:13:00:67:a4:11:04:c5:f5:93:91:8a:
75:ef:4e:c9:e3:33:b0:6b:6f:76:c0:9c:b6:5f:c7:
aa:8b:70:7b:05:d0:a2:5d:9c:f5:9f:11:10:3e:17:
62:5c:7e:49:2b:51:dc:de:9e:d4:2c:5c:e5:3c:ef:
0d:72:a6:ef:7f:96:db:92:50:7f:79:af:02:a5:bf:
ba:96:27:5e:9e:72:3e:62:bb:d9:7a:1f:98:12:47:
87:9a:b4:2a:0a:64:1c:fd:fd:f3:27:22:6d:31:09:
c5:43:94:7f:7b:3a:78:99:1a:40:13:a8:5a:58:75:
14:28:3e:72:41:f7:2e:cf:08:2f:c7:01:8a:3a:52:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5D:69:DB:83:7E:FB:CB:83:31:27:EC:E3:63:37:AC:3D:8A:DA:9A
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/QV1p24N--8uDMSfs42M3rD2K2po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.152.0/23
87.199.155.0/24
136.148.148.0-136.148.150.255
185.119.205.0/24
199.204.25.0-199.204.27.255
IPv6:
2a05:3a80::/46
2a05:3a80:5::-2a05:3a80:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:a0:0f:ab:21:1e:6c:6e:f5:e9:bc:16:eb:6d:b4:cb:fa:d6:
dd:5c:f7:5f:98:66:65:0d:24:a8:b1:d6:dd:4b:16:12:1c:a7:
12:d3:0e:0a:16:91:60:2a:8d:be:63:ff:13:86:22:3a:70:b0:
7b:de:e0:d1:07:56:bd:27:1f:f7:6f:6a:10:92:a0:31:49:78:
43:b0:5c:8b:1a:ec:92:98:86:36:71:27:81:38:11:e5:6a:22:
4e:34:48:c2:3e:a1:d6:72:be:40:19:d8:40:07:73:de:6b:c5:
b3:e4:67:94:26:ac:22:0d:be:d2:8a:70:d7:ed:c3:b0:61:c9:
fc:c1:7f:51:2a:a0:be:4c:27:ea:d3:0a:21:94:35:f6:46:78:
25:57:db:18:2c:03:82:72:0c:4e:b9:d2:00:bf:22:72:15:34:
4d:6c:af:68:b1:e3:77:74:ab:80:99:cb:77:c4:73:ff:67:c8:
aa:69:ae:2d:96:73:79:58:39:d6:5d:b2:e5:06:c1:e4:28:ff:
18:44:a2:30:1b:dc:9f:4a:9f:bd:99:53:f1:96:7e:72:fe:1f:
b4:80:d8:a9:bc:39:c5:fc:a9:b1:bf:c7:2d:d6:a4:5f:13:3a:
36:fe:97:04:90:e6:4e:64:bd:81:1a:00:08:5c:d5:c0:74:d4:
62:79:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:36 2026 by rpki-client