Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/qUB1b6BX-Qw2C0ROtDn1Q7GFT6Y.roa
File: qUB1b6BX-Qw2C0ROtDn1Q7GFT6Y.roa (raw, json)
Hash identifier: u0f+F4/hEfvRYFTaKED3NA4osQIMOO9o4VD954opO0I=
Subject key identifier: A9:40:75:6F:A0:57:F9:0C:36:0B:44:4E:B4:39:F5:43:B1:85:4F:A6
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01A18CF949AE2052EB6A332864210B7DAEC4
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/qUB1b6BX-Qw2C0ROtDn1Q7GFT6Y.roa
Signing time: Fri 30 Oct 2026 13:21:49 +0000
ROA not before: Fri 30 Oct 2026 13:21:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 45.152.32.0/24 maxlen: 24
45.152.33.0/24 maxlen: 24
136.176.227.0/24 maxlen: 24
136.176.240.0/24 maxlen: 24
2a10:5a81::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:f9:49:ae:20:52:eb:6a:33:28:64:21:0b:7d:ae:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Oct 30 13:21:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a940756fa057f90c360b444eb439f543b1854fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:4a:63:e2:66:8a:71:f4:1d:6e:90:ab:b9:
fc:f7:3f:5e:68:d7:1b:47:ab:44:06:e8:04:fb:58:
ac:83:8b:88:9b:d4:e8:d2:56:f9:96:0e:27:c8:d8:
04:27:f1:78:4f:17:2b:36:e6:ee:83:2a:3b:71:57:
b8:05:70:76:ab:ce:c9:3a:04:b0:22:bd:61:8e:7d:
c8:5d:63:44:67:25:8f:7b:2a:5f:0d:96:48:05:62:
4b:84:ac:17:f2:6a:df:fd:c0:ef:cd:3e:f4:29:ec:
05:0d:4d:51:1b:24:c3:c1:f7:a0:6d:4b:62:a0:e6:
d9:c2:73:3e:33:4f:77:5e:e3:e6:92:7c:e6:a7:88:
75:cf:36:f5:1d:ed:04:ab:f9:2c:0a:3c:c7:79:00:
3f:39:11:39:a6:fa:df:95:83:89:67:3a:3a:67:f9:
c5:f2:74:43:35:15:56:bc:67:b9:16:b0:35:40:20:
e4:1a:34:c2:f5:fc:74:48:e6:5f:42:71:15:01:a7:
d3:d0:a3:9f:86:ad:2c:0d:33:df:56:a9:f7:a4:51:
3f:ac:1a:41:2e:fc:72:de:65:24:04:41:bf:c7:d2:
d7:66:e8:e4:c9:b7:71:36:e1:04:26:25:3f:5b:ed:
d9:40:fc:72:f5:bd:72:6c:19:0a:fa:92:ca:b7:6b:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:40:75:6F:A0:57:F9:0C:36:0B:44:4E:B4:39:F5:43:B1:85:4F:A6
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/qUB1b6BX-Qw2C0ROtDn1Q7GFT6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.32.0/23
136.176.227.0/24
136.176.240.0/24
IPv6:
2a10:5a81::/32
Signature Algorithm: sha256WithRSAEncryption
11:f6:89:ba:c0:82:27:e5:43:ad:c0:de:03:fc:5f:71:cb:86:
17:a1:a6:ea:76:3a:00:ab:04:b4:e2:45:b5:89:5d:c2:02:b1:
37:33:4b:a1:07:72:b4:91:1c:61:22:b4:fa:d6:8c:e3:40:b2:
4d:07:f2:2c:af:2d:c7:3e:77:f5:a7:b1:8d:ea:09:0f:15:26:
f5:9c:be:28:78:24:3a:83:8a:b3:b1:29:bd:2a:28:72:b6:45:
36:3c:cf:37:1c:a5:1c:11:f0:16:63:3f:42:6a:8b:ff:75:03:
77:32:c7:24:8f:ba:a8:a9:44:13:e1:11:7d:40:19:e8:7c:4a:
45:f3:a7:59:2a:29:9c:06:1d:49:8e:6b:7a:f9:dc:ea:96:1e:
aa:b3:94:cc:f0:5b:1c:f4:4e:6b:e7:92:f0:95:cc:e2:12:bf:
0a:55:73:bf:0a:b4:fc:ed:95:f8:78:4d:3b:f6:c5:8d:57:9d:
11:e4:db:fa:91:27:85:66:6e:ad:ec:36:a0:28:3d:4b:10:5b:
d3:f6:40:31:6a:6e:c0:ea:cd:66:9b:34:55:54:dd:1b:e1:e2:
a2:13:5a:1d:6a:f8:57:f4:16:d9:33:47:46:be:03:a6:f9:51:
11:11:64:6d:47:4a:07:ac:7c:b0:0b:94:c4:28:26:bf:6a:a4:
6b:76:c3:76
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaGM+UmuIFLrajMoZCELfa7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjYxMDMwMTMyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTQwNzU2ZmEwNTdmOTBjMzYwYjQ0NGViNDM5ZjU0M2IxODU0ZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUVKY+JminH0HW6Qq7n89z9eaNcb
R6tEBugE+1isg4uIm9To0lb5lg4nyNgEJ/F4TxcrNubugyo7cVe4BXB2q87JOgSw
Ir1hjn3IXWNEZyWPeypfDZZIBWJLhKwX8mrf/cDvzT70KewFDU1RGyTDwfegbUti
oObZwnM+M093XuPmknzmp4h1zzb1He0Eq/ksCjzHeQA/ORE5pvrflYOJZzo6Z/nF
8nRDNRVWvGe5FrA1QCDkGjTC9fx0SOZfQnEVAafT0KOfhq0sDTPfVqn3pFE/rBpB
Lvxy3mUkBEG/x9LXZujkybdxNuEEJiU/W+3ZQPxy9b1ybBkK+pLKt2vFXQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKlAdW+gV/kMNgtETrQ59UOxhU+mMB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvcVVCMWI2QlgtUXcyQzBST3REbjFRN0dGVDZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBLZggAwQA
iLDjAwQAiLDwMA0EAgACMAcDBQAqEFqBMA0GCSqGSIb3DQEBCwUAA4IBAQAR9om6
wIIn5UOtwN4D/F9xy4YXoabqdjoAqwS04kW1iV3CArE3M0uhB3K0kRxhIrT61ozj
QLJNB/Isry3HPnf1p7GN6gkPFSb1nL4oeCQ6g4qzsSm9KihytkU2PM83HKUcEfAW
Yz9Caov/dQN3Msckj7qoqUQT4RF9QBnofEpF86dZKimcBh1Jjmt6+dzqlh6qs5TM
8Fsc9E5r55LwlcziEr8KVXO/CrT87ZX4eE079sWNV50R5Nv6kSeFZm6t7DagKD1L
EFvT9kAxam7A6s1mmzRVVN0b4eKiE1odavhX9BbZM0dGvgOm+VEREWRtR0oHrHyw
C5TEKCa/aqRrdsN2
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:33 2026 by rpki-client