Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QUf8DuJ6BkOGMFPsvFgKLuIceBE.roa
File: QUf8DuJ6BkOGMFPsvFgKLuIceBE.roa (raw, json)
Hash identifier: XNn98pYP3RgELtpV7y0Y7es1yy6HtnbRa/0KtGKklP4=
Subject key identifier: 41:47:FC:0E:E2:7A:06:43:86:30:53:EC:BC:58:0A:2E:E2:1C:78:11
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1C4F33B5A32C58CFDCCEBD1D202C3E43D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QUf8DuJ6BkOGMFPsvFgKLuIceBE.roa
Signing time: Tue 10 Nov 2026 10:13:57 +0000
ROA not before: Tue 10 Nov 2026 10:13:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 45.137.85.0/24 maxlen: 24
45.149.146.0/24 maxlen: 24
84.21.191.0/24 maxlen: 24
103.114.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:f3:3b:5a:32:c5:8c:fd:cc:eb:d1:d2:02:c3:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 10 10:13:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4147fc0ee27a0643863053ecbc580a2ee21c7811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:ce:92:8a:fe:e1:c8:a8:f1:e7:ed:e1:52:
06:4f:c4:40:ef:ae:9f:48:61:82:f2:ee:f9:13:99:
e4:08:db:2e:2b:5d:6e:cb:29:8f:86:d7:9b:20:46:
26:78:ec:d6:45:c2:fb:7f:f7:66:4e:c7:df:88:96:
96:32:4c:55:df:93:2b:49:47:20:b0:cc:26:3f:b7:
a5:f0:a2:2c:d5:7b:21:a2:3e:1a:ef:2d:b7:33:89:
f9:67:33:2e:18:b5:50:ef:86:85:6e:6a:c3:f5:bb:
27:f8:6d:38:53:85:5c:e0:08:92:6f:11:85:a8:7d:
5e:be:96:ca:74:53:ed:d7:c9:7f:d0:3d:db:a3:56:
00:da:73:9e:67:5b:19:ff:1e:c0:33:90:fc:2f:68:
b4:b8:a1:0e:ea:6c:94:e7:e5:17:99:70:ad:3d:b4:
96:87:37:3c:a6:5f:d6:56:55:98:e6:ce:a2:73:49:
66:a5:44:ae:00:10:90:87:4e:e4:10:eb:c2:05:b0:
a4:f8:31:ae:1f:a8:87:45:0c:98:76:73:a9:26:0e:
90:de:1d:15:d6:6a:6c:c2:d8:1b:be:25:ad:cd:ce:
df:af:b8:f9:a1:fb:ac:da:10:fb:e5:39:22:b3:ee:
c7:a6:7e:01:2f:41:b2:d1:25:25:b9:20:7d:40:2b:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:47:FC:0E:E2:7A:06:43:86:30:53:EC:BC:58:0A:2E:E2:1C:78:11
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QUf8DuJ6BkOGMFPsvFgKLuIceBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.85.0/24
45.149.146.0/24
84.21.191.0/24
103.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b1:e8:ef:c3:e0:e6:4f:dc:c1:42:c7:13:58:8c:4c:e7:fd:
8f:e9:bf:16:9a:55:a9:84:31:31:b2:31:59:ed:d5:53:e4:89:
71:d2:f7:0e:a8:6c:7b:1d:7c:ad:bd:a5:bb:6a:08:14:fe:30:
b7:8c:e1:a0:f7:05:37:9f:de:09:f3:03:27:89:5a:44:e3:21:
cd:26:6a:46:e1:12:ab:a4:13:2a:5a:8f:33:a2:31:7b:f6:f0:
c2:9a:78:ba:85:fc:00:f9:14:19:15:3b:59:21:8e:5c:e3:18:
12:ab:71:73:03:2c:9a:d7:6e:98:ec:24:dc:51:76:f8:65:76:
32:66:f2:34:e6:9e:9f:02:d4:ea:c2:63:e7:16:7a:40:b4:47:
f8:ea:27:39:26:3b:ad:d9:dd:2f:a4:2f:5b:27:7b:e3:37:cd:
d5:30:1c:41:7d:3f:1e:37:d0:7c:14:d6:d4:73:2d:68:8d:5c:
1f:cd:97:c7:d9:76:e0:53:f3:f5:18:f8:16:0c:5b:d0:f5:a3:
4d:d6:69:e8:1f:2e:5e:b7:86:2d:f5:62:e8:f8:70:88:d3:1a:
54:5e:5f:4e:e9:73:bf:f4:a7:34:5d:3f:42:10:47:9d:a5:40:
92:bf:3e:ad:c7:f7:a9:29:94:7f:87:e1:7f:f3:08:4c:8a:bd:
17:3d:a9:c0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaHE8ztaMsWM/czr0dICw+Q9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYxMTEwMTAxMzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTQ3ZmMwZWUyN2EwNjQzODYzMDUzZWNiYzU4MGEyZWUyMWM3ODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcjOkor+4cio8eft4VIGT8RA766f
SGGC8u75E5nkCNsuK11uyymPhtebIEYmeOzWRcL7f/dmTsffiJaWMkxV35MrSUcg
sMwmP7el8KIs1Xshoj4a7y23M4n5ZzMuGLVQ74aFbmrD9bsn+G04U4Vc4AiSbxGF
qH1evpbKdFPt18l/0D3bo1YA2nOeZ1sZ/x7AM5D8L2i0uKEO6myU5+UXmXCtPbSW
hzc8pl/WVlWY5s6ic0lmpUSuABCQh07kEOvCBbCk+DGuH6iHRQyYdnOpJg6Q3h0V
1mpswtgbviWtzc7fr7j5ofus2hD75Tkis+7Hpn4BL0Gy0SUluSB9QCvLlQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEFH/A7iegZDhjBT7LxYCi7iHHgRMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUVVmOER1SjZCa09HTUZQc3ZGZ0tMdUljZUJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYlVAwQA
LZWSAwQAVBW/AwQAZ3IoMA0GCSqGSIb3DQEBCwUAA4IBAQA1sejvw+DmT9zBQscT
WIxM5/2P6b8WmlWphDExsjFZ7dVT5Ilx0vcOqGx7HXytvaW7aggU/jC3jOGg9wU3
n94J8wMniVpE4yHNJmpG4RKrpBMqWo8zojF79vDCmni6hfwA+RQZFTtZIY5c4xgS
q3FzAyya126Y7CTcUXb4ZXYyZvI05p6fAtTqwmPnFnpAtEf46ic5Jjut2d0vpC9b
J3vjN83VMBxBfT8eN9B8FNbUcy1ojVwfzZfH2XbgU/P1GPgWDFvQ9aNN1mnoHy5e
t4Yt9WLo+HCI0xpUXl9O6XO/9Kc0XT9CEEedpUCSvz6tx/epKZR/h+F/8whMir0X
PanA
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:44 2026 by rpki-client