Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QUhq5Kd3xDIEpo1FyZ-rl54rA5g.roa
File: QUhq5Kd3xDIEpo1FyZ-rl54rA5g.roa (raw, json)
Hash identifier: 7pNzFG84GBEIUnUma4y1m9njQPgciF8HN1FNTZ9wl48=
Subject key identifier: 41:48:6A:E4:A7:77:C4:32:04:A6:8D:45:C9:9F:AB:97:9E:2B:03:98
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E16654ABE5273A51E5E12616C07BA5094
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QUhq5Kd3xDIEpo1FyZ-rl54rA5g.roa
Signing time: Mon 11 May 2026 09:36:37 +0000
ROA not before: Mon 11 May 2026 09:36:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 82.108.104.0/22 maxlen: 22
92.244.178.0/23 maxlen: 23
92.244.188.0/23 maxlen: 23
195.40.145.0/24 maxlen: 24
195.40.146.0/23 maxlen: 24
195.40.148.0/22 maxlen: 24
195.40.192.0/18 maxlen: 24
195.172.0.0/18 maxlen: 24
195.172.64.0/19 maxlen: 24
195.172.224.0/19 maxlen: 24
212.134.29.0/24 maxlen: 24
212.134.30.0/24 maxlen: 24
212.134.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:65:4a:be:52:73:a5:1e:5e:12:61:6c:07:ba:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 11 09:36:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41486ae4a777c43204a68d45c99fab979e2b0398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:fa:b6:6b:6a:9f:08:d8:a2:a9:04:bb:28:
e3:ad:33:d1:9e:7a:93:9a:4d:e9:76:76:9b:74:c8:
b1:e6:69:7c:8d:53:9b:7c:6e:a5:57:60:27:78:59:
97:ce:0e:e2:4b:2c:58:ba:f0:d7:56:11:56:1e:06:
93:b9:da:b1:4d:dc:4e:71:f3:85:f9:0a:73:ff:68:
92:82:3b:68:a3:e9:3b:d0:39:27:8a:91:ae:14:f1:
1e:ce:d2:02:80:e8:36:17:c5:c9:c8:e3:66:22:4e:
3b:3f:67:2b:a9:8e:dd:71:d7:a0:0c:1d:6a:e9:c3:
02:3a:94:f6:51:cc:f1:3d:68:13:29:75:85:6b:c4:
f8:8b:bf:66:3d:f1:87:46:15:29:42:4e:5e:10:44:
98:4b:f3:21:a6:09:f8:4a:ec:19:2b:8c:64:21:4c:
6f:1d:7f:68:65:0a:1d:87:cd:cf:9a:68:12:3d:f0:
25:e0:4d:6c:9d:b7:c6:05:a0:cf:e9:25:f5:2f:a3:
16:28:2b:cb:cc:d1:07:97:72:9e:27:1b:8a:84:c1:
cf:15:53:62:08:db:1e:5f:f6:50:32:ee:d8:b1:81:
30:27:5e:ee:18:93:ed:5f:ab:1d:92:37:55:90:2d:
24:37:02:e5:97:16:a4:fc:76:0c:11:bf:4f:ee:76:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:6A:E4:A7:77:C4:32:04:A6:8D:45:C9:9F:AB:97:9E:2B:03:98
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QUhq5Kd3xDIEpo1FyZ-rl54rA5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.104.0/22
92.244.178.0/23
92.244.188.0/23
195.40.145.0-195.40.151.255
195.40.192.0/18
195.172.0.0-195.172.95.255
195.172.224.0/19
212.134.29.0-212.134.31.255
Signature Algorithm: sha256WithRSAEncryption
9d:ce:ac:7b:81:13:47:80:78:bc:c7:29:19:a2:83:ab:03:b9:
dc:93:b8:1f:45:1a:d1:64:bc:ce:5b:31:50:3d:2c:62:a8:8c:
03:f3:8b:3c:c0:01:76:88:bc:ef:08:93:05:79:e1:78:2d:71:
4e:e3:d9:4b:29:7c:18:af:f8:f1:8a:94:f8:4c:23:23:09:ba:
47:b3:88:f6:32:83:ff:b6:cd:fc:bc:b3:97:c4:15:e8:8e:71:
bd:4f:6f:cd:c5:66:6f:4e:95:75:7a:51:c3:c6:5f:76:31:9a:
aa:91:d0:0d:08:ba:27:b8:d6:97:fb:ee:ee:d1:c0:47:6e:17:
d2:a3:df:53:9d:97:4a:96:f3:20:db:3c:78:d2:16:eb:b2:26:
31:33:8b:d2:7c:df:29:91:9d:46:fc:8b:ff:28:e6:63:01:94:
0e:25:e7:94:97:72:13:8e:c2:ca:77:25:f9:33:f8:86:7b:d9:
c9:53:d0:7c:54:a5:d1:ba:d3:59:3a:91:24:16:2f:c4:c5:7f:
20:80:8d:34:5e:39:f1:03:6c:9f:48:f5:0c:70:6a:04:bc:30:
1f:e2:61:db:43:0e:71:5d:72:88:d1:a2:c6:ce:8b:e2:32:44:
0e:13:13:16:56:e2:0f:ff:6d:a2:04:72:cd:13:4b:79:76:ac:
9a:ed:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:54 2026 by rpki-client