Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/QDB-WwI_A7YLaTKacUaS7kzAmQI.roa
File: QDB-WwI_A7YLaTKacUaS7kzAmQI.roa (raw, json)
Hash identifier: V+inkfVPY8Vf6gmTww6Y4pQHfSUABMRswJmA/f4J6b0=
Subject key identifier: 40:30:7E:5B:02:3F:03:B6:0B:69:32:9A:71:46:92:EE:4C:C0:99:02
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0198CEBD39BA9E94609ECAEDD60A658993B8
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/QDB-WwI_A7YLaTKacUaS7kzAmQI.roa
Signing time: Thu 21 Aug 2025 22:26:04 +0000
ROA not before: Thu 21 Aug 2025 22:26:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16589
IP address blocks: 31.187.92.0/22 maxlen: 22
77.223.192.0/21 maxlen: 21
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
91.210.80.0/22 maxlen: 22
94.26.110.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
192.109.205.0/24 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:bd:39:ba:9e:94:60:9e:ca:ed:d6:0a:65:89:93:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 21 22:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40307e5b023f03b60b69329a714692ee4cc09902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:8a:42:5c:71:53:72:bc:6e:7b:ee:02:b5:
a6:49:81:ff:ef:d8:d8:9f:f2:9d:85:45:b5:2b:35:
0f:f6:30:23:64:36:87:90:ce:4d:38:76:ef:85:65:
48:62:80:7d:1d:5f:57:cd:7d:a9:82:43:d0:ec:a3:
77:22:f1:e5:9d:f2:b0:10:3a:44:d5:3c:2e:06:27:
06:48:78:84:fb:b6:c6:b2:fb:38:e4:72:80:27:0a:
98:40:60:95:29:0a:d0:ff:40:09:b6:1d:40:48:d9:
b7:5a:e1:f5:39:13:c6:8c:25:50:4f:da:c6:ce:7d:
db:35:8e:53:31:69:99:8f:92:56:f2:f4:68:87:62:
97:03:af:91:7f:d9:3b:18:d2:74:8a:9e:de:4e:4c:
63:db:90:34:d8:3c:89:28:a1:b0:5f:72:60:b8:e7:
f1:4e:10:af:20:eb:a2:4e:de:61:ad:b0:64:f1:8e:
dd:19:e4:97:6f:b4:3a:6e:75:23:f9:02:ee:26:a8:
48:57:15:59:73:51:ce:b8:66:20:37:a3:19:c7:d5:
30:8c:ff:5e:be:b9:0d:24:82:c1:4d:3a:da:a8:9d:
cc:16:34:e6:55:41:3d:58:aa:09:7c:84:d7:42:22:
00:26:cb:35:e6:68:00:f4:e7:ed:79:07:14:60:d3:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:7E:5B:02:3F:03:B6:0B:69:32:9A:71:46:92:EE:4C:C0:99:02
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/QDB-WwI_A7YLaTKacUaS7kzAmQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.92.0/22
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
91.210.80.0/22
94.26.110.0/23
94.101.103.0/24
176.222.48.0/22
178.216.184.0/21
192.109.205.0/24
198.14.16.0/20
198.145.112.0/22
205.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:22:ac:87:f8:70:b6:44:da:9b:96:69:63:e8:7b:f1:3e:25:
9e:22:ba:f7:28:56:4d:ba:b6:6e:b0:71:30:14:67:3c:cb:2d:
cf:c5:9d:79:cd:65:ec:d4:f0:44:b2:8e:da:2c:a3:88:7d:1a:
55:e0:82:fa:0a:13:5b:2f:e9:85:03:48:20:9b:1d:e8:cb:2e:
16:20:9c:f9:e4:53:1e:fb:f9:e2:4d:90:3e:25:63:be:55:70:
65:74:06:17:ca:d3:65:8e:85:51:b5:79:61:f9:e7:a9:56:7c:
5e:40:15:a7:d4:e1:e4:27:0b:d4:89:9c:e9:e2:39:38:26:7a:
bc:43:54:19:2c:a9:2a:93:71:1a:b1:aa:ee:f6:18:80:f4:32:
5f:2c:b1:95:33:6e:5c:b0:15:e4:1b:ff:fd:0f:f3:b4:14:cb:
22:03:03:c8:e6:1f:7d:d3:b8:51:5e:5a:8e:2a:0a:ca:db:43:
c9:da:98:8f:52:6d:70:ca:cd:67:5e:05:84:cc:b8:ca:4b:09:
3d:b9:c2:26:1d:21:a6:79:a1:16:2e:cd:87:d2:f6:c3:c3:a1:
6d:59:79:d4:35:49:2b:0c:41:a5:55:7f:63:aa:71:3c:a1:0e:
28:a1:9b:79:1b:c1:70:43:89:8a:c4:1e:fc:1f:b1:cc:fa:48:
ca:a8:d3:d3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZjOvTm6npRgnsrt1gpliZO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjUwODIxMjIyNjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDMwN2U1YjAyM2YwM2I2MGI2OTMyOWE3MTQ2OTJlZTRjYzA5OTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4SKQlxxU3K8bnvuArWmSYH/79jY
n/KdhUW1KzUP9jAjZDaHkM5NOHbvhWVIYoB9HV9XzX2pgkPQ7KN3IvHlnfKwEDpE
1TwuBicGSHiE+7bGsvs45HKAJwqYQGCVKQrQ/0AJth1ASNm3WuH1ORPGjCVQT9rG
zn3bNY5TMWmZj5JW8vRoh2KXA6+Rf9k7GNJ0ip7eTkxj25A02DyJKKGwX3JguOfx
ThCvIOuiTt5hrbBk8Y7dGeSXb7Q6bnUj+QLuJqhIVxVZc1HOuGYgN6MZx9UwjP9e
vrkNJILBTTraqJ3MFjTmVUE9WKoJfITXQiIAJss15mgA9OfteQcUYNONAQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFEAwflsCPwO2C2kymnFGku5MwJkCMB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvUURCLVd3SV9BN1lMYVRLYWNVYVM3a3pBbVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQCH7tcMAwD
BAZN38ADBAFN38gDBAFPi0ADBANTjsgDBAJb0lADBAFeGm4DBABeZWcDBAKw3jAD
BAOy2LgDBADAbc0DBATGDhADBALGkXADBALNhvQwDQYJKoZIhvcNAQELBQADggEB
AF0irIf4cLZE2puWaWPoe/E+JZ4iuvcoVk26tm6wcTAUZzzLLc/FnXnNZezU8ESy
jtoso4h9GlXggvoKE1sv6YUDSCCbHejLLhYgnPnkUx77+eJNkD4lY75VcGV0BhfK
02WOhVG1eWH556lWfF5AFafU4eQnC9SJnOniOTgmerxDVBksqSqTcRqxqu72GID0
Ml8ssZUzblywFeQb//0P87QUyyIDA8jmH33TuFFeWo4qCsrbQ8namI9SbXDKzWde
BYTMuMpLCT25wiYdIaZ5oRYuzYfS9sPDoW1ZedQ1SSsMQaVVf2OqcTyhDiihm3kb
wXBDiYrEHvwfscz6SMqo09M=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:57 2025 by rpki-client