Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/qaGOw5tg7bMHtrf6lsqkfxEXJtY.roa
File: qaGOw5tg7bMHtrf6lsqkfxEXJtY.roa (raw, json)
Hash identifier: x93uK5ZsmhOfQ67hVWjyRY1KnkWPXsujyHPBtnzn/n8=
Subject key identifier: A9:A1:8E:C3:9B:60:ED:B3:07:B6:B7:FA:96:CA:A4:7F:11:17:26:D6
Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial: 0199A6B8A4B0D48852192A87887732D5A365
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/qaGOw5tg7bMHtrf6lsqkfxEXJtY.roa
Signing time: Thu 02 Oct 2025 20:59:02 +0000
ROA not before: Thu 02 Oct 2025 20:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49765
IP address blocks: 5.226.56.0/21 maxlen: 21
5.226.56.0/24 maxlen: 24
5.226.57.0/24 maxlen: 24
5.226.58.0/23 maxlen: 23
5.226.60.0/24 maxlen: 24
5.226.61.0/24 maxlen: 24
5.226.62.0/24 maxlen: 24
5.226.63.0/24 maxlen: 24
91.102.56.0/21 maxlen: 21
91.102.56.0/24 maxlen: 24
91.102.57.0/24 maxlen: 24
91.102.58.0/23 maxlen: 23
91.102.60.0/22 maxlen: 22
91.102.60.0/24 maxlen: 24
91.102.61.0/24 maxlen: 24
91.102.62.0/23 maxlen: 23
94.136.224.0/19 maxlen: 19
94.136.224.0/23 maxlen: 23
94.136.226.0/24 maxlen: 24
94.136.227.0/24 maxlen: 24
94.136.228.0/24 maxlen: 24
94.136.229.0/24 maxlen: 24
94.136.230.0/24 maxlen: 24
94.136.232.0/24 maxlen: 24
94.136.233.0/24 maxlen: 24
94.136.234.0/24 maxlen: 24
94.136.235.0/24 maxlen: 24
94.136.236.0/23 maxlen: 23
94.136.238.0/23 maxlen: 23
94.136.244.0/24 maxlen: 24
94.136.245.0/24 maxlen: 24
94.136.246.0/24 maxlen: 24
94.136.247.0/24 maxlen: 24
94.136.248.0/24 maxlen: 24
94.136.249.0/24 maxlen: 24
94.136.250.0/24 maxlen: 24
94.136.251.0/24 maxlen: 24
94.136.252.0/24 maxlen: 24
94.136.253.0/24 maxlen: 24
94.136.254.0/24 maxlen: 24
109.72.16.0/20 maxlen: 20
109.72.16.0/24 maxlen: 24
109.72.17.0/24 maxlen: 24
109.72.18.0/24 maxlen: 24
109.72.19.0/24 maxlen: 24
109.72.20.0/24 maxlen: 24
109.72.21.0/24 maxlen: 24
109.72.22.0/24 maxlen: 24
109.72.23.0/24 maxlen: 24
109.72.24.0/24 maxlen: 24
109.72.25.0/24 maxlen: 24
109.72.26.0/24 maxlen: 24
109.72.27.0/24 maxlen: 24
109.72.28.0/24 maxlen: 24
109.72.30.0/24 maxlen: 24
109.72.31.0/24 maxlen: 24
137.221.0.0/20 maxlen: 20
137.221.0.0/23 maxlen: 23
137.221.2.0/24 maxlen: 24
137.221.3.0/24 maxlen: 24
137.221.4.0/24 maxlen: 24
137.221.5.0/24 maxlen: 24
137.221.6.0/24 maxlen: 24
137.221.7.0/24 maxlen: 24
137.221.8.0/24 maxlen: 24
137.221.9.0/24 maxlen: 24
137.221.10.0/23 maxlen: 23
137.221.12.0/24 maxlen: 24
137.221.13.0/24 maxlen: 24
137.221.14.0/24 maxlen: 24
137.221.15.0/24 maxlen: 24
137.221.16.0/21 maxlen: 21
137.221.16.0/24 maxlen: 24
137.221.17.0/24 maxlen: 24
137.221.18.0/24 maxlen: 24
137.221.19.0/24 maxlen: 24
137.221.20.0/24 maxlen: 24
137.221.21.0/24 maxlen: 24
137.221.22.0/24 maxlen: 24
137.221.23.0/24 maxlen: 24
185.48.108.0/24 maxlen: 24
185.48.109.0/24 maxlen: 24
185.48.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a6:b8:a4:b0:d4:88:52:19:2a:87:88:77:32:d5:a3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Validity
Not Before: Oct 2 20:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9a18ec39b60edb307b6b7fa96caa47f111726d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:99:96:02:69:07:88:b1:e9:2d:83:f1:f6:
53:47:03:2f:db:09:e6:93:96:9f:18:14:1c:39:0e:
78:1a:0a:1d:26:30:bb:5d:88:fc:1d:5c:42:93:5b:
9f:2f:a2:8d:b7:10:ca:d0:f5:5b:2c:d3:0f:e0:19:
dc:fb:40:6c:da:82:36:37:b2:42:7a:de:f9:1b:43:
a2:17:14:6d:c7:ce:51:bc:62:8e:9a:35:83:2c:49:
95:eb:85:d3:84:2b:f9:42:74:92:24:03:a2:4b:9b:
7e:b6:3d:2b:0c:a6:9f:56:55:78:7a:19:b3:8c:91:
98:d7:d6:6f:ad:88:dc:27:f3:6f:1c:b8:9c:70:ef:
e3:df:82:a2:5c:16:2d:e5:de:72:47:4e:04:da:96:
a2:a6:d9:ea:ae:26:c4:c7:60:a8:52:d7:4c:9c:d3:
3d:47:e7:70:f9:56:7e:36:bf:9c:bb:34:54:b0:b7:
69:10:3d:52:01:ca:42:47:de:89:c6:f5:9c:00:26:
c7:6e:a6:8c:9a:75:fa:a7:2d:8d:d9:bb:44:33:86:
bf:1c:27:1b:7d:bd:f0:5d:b5:b3:9e:bb:0d:d1:46:
17:67:36:b4:6b:f1:86:05:09:c8:ee:cd:18:3d:e4:
75:16:5c:e7:cc:09:b9:43:2c:02:76:46:b6:7c:e5:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A1:8E:C3:9B:60:ED:B3:07:B6:B7:FA:96:CA:A4:7F:11:17:26:D6
X509v3 Authority Key Identifier:
keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/qaGOw5tg7bMHtrf6lsqkfxEXJtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.56.0/21
91.102.56.0/21
94.136.224.0/19
109.72.16.0/20
137.221.0.0-137.221.23.255
185.48.108.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d5:e5:f0:76:6f:c1:6f:ae:3e:c4:a3:f4:23:20:26:a0:37:
8d:ab:9e:64:d5:ac:70:c9:bb:1b:1c:54:1a:e1:d7:de:42:23:
d1:4d:a4:26:94:d0:dd:e3:48:ec:3b:6c:61:4e:08:05:d1:28:
3a:fa:72:ff:b3:49:54:b2:e8:91:2e:7a:d2:de:25:01:da:89:
76:bf:56:ed:15:01:04:3d:7e:f9:38:f5:c6:f2:0c:fa:b7:f3:
4f:a5:69:30:29:2b:91:5a:32:0a:4e:bd:82:04:15:45:5d:7a:
5d:d9:6a:54:88:7c:7b:fa:6d:54:df:50:62:93:47:f2:4c:02:
e7:fd:80:41:5e:2c:3d:aa:51:df:3c:5a:3a:9b:f6:28:b5:66:
6c:18:ba:2b:5b:f8:3a:80:bd:33:04:ef:e1:66:d5:2e:5e:7f:
a7:e1:c2:13:3c:db:f6:a3:4b:d6:24:cb:fd:35:7c:da:08:fc:
de:8c:6a:e1:d1:5b:6b:c6:2d:51:01:1d:e8:27:99:44:05:cf:
b2:15:99:70:ac:09:49:3d:c4:e2:99:19:bb:be:01:19:21:a8:
64:c7:9c:0a:4c:f7:6b:99:88:f6:01:e2:57:0c:82:a9:10:58:
5f:03:40:7f:6b:32:d7:9f:c2:d1:8b:85:b7:68:43:15:ac:ee:
40:c0:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:56:00 2025 by rpki-client