Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/QxMPaFTQZis_MsQeIH22WDwNmbE.roa
File: QxMPaFTQZis_MsQeIH22WDwNmbE.roa (raw, json)
Hash identifier: zTOhuAOBPBzUwV3wZVaOtOqStDw3GD9XcFZ+DjFYt2g=
Subject key identifier: 43:13:0F:68:54:D0:66:2B:3F:32:C4:1E:20:7D:B6:58:3C:0D:99:B1
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 019F19285DD827D4BAF6D4958FDC616D3D1B
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/QxMPaFTQZis_MsQeIH22WDwNmbE.roa
Signing time: Tue 30 Jun 2026 15:31:43 +0000
ROA not before: Tue 30 Jun 2026 15:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.0.0/16 maxlen: 16
79.106.0.0/17 maxlen: 17
79.106.0.0/19 maxlen: 19
79.106.0.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.40.0/24 maxlen: 24
79.106.42.0/24 maxlen: 24
79.106.48.0/24 maxlen: 24
79.106.50.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.75.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.94.0/23 maxlen: 23
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.101.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.104.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.117.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.120.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.126.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/17 maxlen: 17
79.106.128.0/19 maxlen: 19
79.106.160.0/19 maxlen: 19
79.106.162.0/24 maxlen: 24
79.106.173.0/24 maxlen: 24
79.106.176.0/21 maxlen: 21
79.106.192.0/19 maxlen: 19
79.106.194.0/23 maxlen: 23
79.106.195.0/24 maxlen: 24
79.106.196.0/24 maxlen: 24
79.106.203.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.212.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.216.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.225.0/24 maxlen: 24
79.106.226.0/24 maxlen: 24
79.106.228.0/24 maxlen: 24
79.106.229.0/24 maxlen: 24
79.106.230.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.240.0/21 maxlen: 21
79.106.240.0/23 maxlen: 23
79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.246.0/23 maxlen: 23
79.106.254.0/24 maxlen: 24
79.106.255.0/24 maxlen: 24
185.171.144.0/22 maxlen: 22
185.171.144.0/23 maxlen: 23
185.171.146.0/23 maxlen: 23
185.171.146.0/24 maxlen: 24
185.171.147.0/24 maxlen: 24
217.24.240.0/20 maxlen: 20
217.24.240.0/21 maxlen: 21
217.24.248.0/21 maxlen: 21
217.24.248.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0::/29 maxlen: 29
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc1::/32 maxlen: 32
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc2:5000::/36 maxlen: 36
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:28:5d:d8:27:d4:ba:f6:d4:95:8f:dc:61:6d:3d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Jun 30 15:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43130f6854d0662b3f32c41e207db6583c0d99b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:9e:f5:2d:74:2f:b8:7d:1d:9d:fd:22:3c:
4c:ef:94:87:8c:b4:1d:57:60:01:a0:1a:8e:f4:74:
45:0f:85:c2:cf:0c:fc:78:3f:5d:af:34:76:7e:df:
d2:f8:f6:55:34:01:d5:2c:b1:86:15:9a:38:12:02:
89:9a:aa:ec:ea:93:2c:47:1c:2f:14:c7:b6:35:8f:
ed:88:2e:e9:7a:bf:28:58:0e:77:a6:5f:8f:06:2b:
c3:99:37:9f:d9:73:d3:58:8d:7c:81:6b:d0:05:bd:
9a:f0:ef:fb:e0:e1:bc:72:56:ed:a0:51:b9:90:d7:
00:e0:45:0d:39:bf:1a:cb:38:48:f7:3a:6c:82:c2:
1b:bb:5f:02:f2:c7:4f:fb:cd:b2:60:e9:e3:83:55:
d9:16:73:25:9b:e4:84:bb:27:9c:f6:38:e5:a3:08:
7a:0f:6e:64:a6:17:91:56:28:e2:7c:ea:e0:58:7e:
bc:8e:c2:2a:5e:c6:8f:ba:0d:38:4e:ff:09:e0:69:
4b:65:0b:e8:f4:b2:9a:4c:20:e4:55:95:ef:6c:2d:
8a:9d:66:d1:ec:e4:59:9a:0e:80:b5:3b:25:3b:f2:
b6:93:0d:3f:85:d7:ca:80:d1:4b:e4:55:45:58:66:
e3:11:45:37:9d:87:b8:32:5b:b6:52:e7:f6:85:c0:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:0F:68:54:D0:66:2B:3F:32:C4:1E:20:7D:B6:58:3C:0D:99:B1
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/QxMPaFTQZis_MsQeIH22WDwNmbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0/22
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
27:a0:a6:c6:b5:1e:87:1e:14:c1:dc:f0:b3:fb:f9:34:bb:a8:
3d:c6:97:78:e3:4b:9b:0c:e9:4b:35:d3:82:e0:c9:a2:06:1e:
10:30:65:1c:63:55:95:e6:35:7f:3b:56:5a:5d:9b:b8:30:1c:
c0:9f:7c:49:c2:dc:57:b5:c3:5f:5f:85:dc:aa:15:84:72:8a:
0c:1a:62:41:ae:ca:d5:7c:25:d6:79:b4:ed:de:b4:4d:02:7f:
35:e9:13:48:0d:3b:fe:ae:2e:ae:79:dd:be:3e:26:21:b8:2a:
2c:cc:ce:52:f1:81:67:2b:4b:13:f9:23:a6:80:17:23:1d:1f:
66:2f:a8:a1:ec:14:5d:16:21:06:e2:78:f6:ad:d2:2c:28:7d:
d3:4e:57:05:e2:5d:c0:d9:0c:39:63:f8:dc:55:62:24:f9:09:
91:74:15:25:4b:c6:96:2c:41:94:1f:cf:34:57:e5:10:40:44:
ce:cf:96:ac:ed:4e:f0:5a:d5:ee:d9:2b:15:8e:8a:26:7e:dd:
57:47:f1:ec:f8:89:50:35:74:e0:40:92:92:85:c5:50:3e:86:
00:9c:af:8d:43:71:76:24:d3:76:2e:5d:1d:62:09:49:3b:ad:
0f:d1:90:11:56:c9:3b:70:2b:1d:8e:57:ad:81:7d:df:08:90:
ce:02:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:48 2026 by rpki-client