Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Qvf-cGZGcp4WTMy-Md6iLfRAlXc.roa
File: Qvf-cGZGcp4WTMy-Md6iLfRAlXc.roa (raw, json)
Hash identifier: 2o2wD+6zqQU4h+8umILSLiGBbQiSI7gKKewOHFmwhk0=
Subject key identifier: 42:F7:FE:70:66:46:72:9E:16:4C:CC:BE:31:DE:A2:2D:F4:40:95:77
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D2A0D754C387D54A6D0B6806D6E8A18C5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Qvf-cGZGcp4WTMy-Md6iLfRAlXc.roa
Signing time: Thu 26 Mar 2026 12:10:18 +0000
ROA not before: Thu 26 Mar 2026 12:10:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 45.90.236.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.121.13.0/24 maxlen: 24
185.121.14.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.202.207.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.204.0/24 maxlen: 24
185.236.24.0/24 maxlen: 24
185.239.141.0/24 maxlen: 24
185.239.142.0/24 maxlen: 24
185.250.181.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
194.48.140.0/23 maxlen: 24
194.48.143.0/24 maxlen: 24
194.124.210.0/24 maxlen: 24
194.124.211.0/24 maxlen: 24
194.146.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:0d:75:4c:38:7d:54:a6:d0:b6:80:6d:6e:8a:18:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 26 12:10:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42f7fe706646729e164cccbe31dea22df4409577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:f0:00:f5:e4:05:9f:45:89:7c:65:22:80:
13:42:7f:0b:90:ce:ea:d4:a7:d5:97:06:eb:28:a1:
3b:08:37:1e:6b:e5:c5:8c:c1:8e:4d:89:97:5a:d7:
a1:61:4f:44:1f:f5:f4:ca:16:64:a6:84:34:80:dd:
2c:7b:f8:5a:a8:67:49:46:76:65:72:e5:39:b0:7e:
64:d7:1e:24:3d:d2:8d:d4:a8:be:0e:b1:3b:25:a1:
b1:88:9f:e7:5e:49:b5:26:98:7c:47:db:07:9f:59:
08:83:0a:5d:a8:dd:13:ed:f4:5d:67:de:2b:26:47:
6b:38:0f:85:37:40:3d:34:ea:00:25:84:6a:00:8c:
a2:17:e7:0f:49:a2:7b:c1:9a:c8:7f:50:24:90:3d:
c4:2e:36:64:4b:ea:3c:49:cf:5a:6d:2e:0a:5c:15:
1b:5e:80:7c:56:6f:db:9a:a3:5b:c7:03:01:86:85:
1b:6d:df:ee:fc:3c:aa:bd:bc:5c:82:bd:53:b4:79:
6e:ba:f0:ea:28:c4:fd:6c:a5:d4:de:12:06:ce:51:
61:43:f3:d8:56:e9:c5:ad:39:05:4e:fc:73:30:b4:
6c:8a:f9:8b:99:26:18:8b:4b:83:fe:56:ad:ed:f4:
4b:19:dc:7c:77:da:b8:bc:f3:03:d6:db:07:73:14:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F7:FE:70:66:46:72:9E:16:4C:CC:BE:31:DE:A2:2D:F4:40:95:77
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Qvf-cGZGcp4WTMy-Md6iLfRAlXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/24
45.131.135.0/24
185.121.13.0-185.121.14.255
185.196.41.0/24
185.202.207.0/24
185.218.17.0/24
185.218.19.0/24
185.227.144.0/24
185.230.67.0/24
185.232.204.0/24
185.236.24.0/24
185.239.141.0-185.239.142.255
185.250.181.0/24
185.254.158.0/24
193.17.182.0/24
194.48.140.0/23
194.48.143.0/24
194.124.210.0/23
194.146.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:63:8f:8c:6d:a0:21:63:ec:dc:9e:a7:49:18:63:b8:4e:bd:
19:32:83:67:31:88:39:d4:bf:a0:f8:b0:98:44:62:1f:bc:35:
0d:3e:fa:b9:2d:87:7e:56:fc:59:37:69:eb:5a:0b:59:ed:4b:
da:56:21:67:99:f6:97:a3:ec:a7:0b:a0:2a:c1:34:78:1a:f6:
d9:5c:52:7e:8c:c1:67:45:b9:df:93:2d:58:79:1b:16:0a:69:
a6:c9:9f:b6:9e:81:f6:07:37:6d:6b:ac:6b:78:ad:05:22:73:
34:ac:49:44:27:76:21:52:49:51:04:f7:ad:81:d3:8b:c8:01:
b1:d4:ec:79:f9:d4:38:d3:95:b1:2f:fa:03:8d:b7:7f:7e:95:
ed:21:c3:71:20:1a:23:0b:c0:77:c2:9d:9d:9f:3a:0f:e6:a5:
f8:c2:a0:1e:b3:68:a4:65:96:70:a9:e2:29:2f:2b:6c:f5:bb:
c2:e7:e3:9f:1c:7f:81:07:d8:ae:72:23:4c:74:68:49:e8:07:
6c:55:26:6a:7c:cf:85:0d:9f:58:00:75:d1:67:ee:a3:7f:cb:
64:5d:c4:4e:7d:8b:1b:a4:eb:81:26:27:59:dc:f6:72:9d:7c:
17:20:b1:0b:57:0a:84:79:a1:b2:b0:36:08:e5:cd:64:64:77:
32:68:d7:56
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZ0qDXVMOH1UptC2gG1uihjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwMzI2MTIxMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmY3ZmU3MDY2NDY3MjllMTY0Y2NjYmUzMWRlYTIyZGY0NDA5NTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DDwAPXkBZ9FiXxlIoATQn8LkM7q
1KfVlwbrKKE7CDcea+XFjMGOTYmXWtehYU9EH/X0yhZkpoQ0gN0se/haqGdJRnZl
cuU5sH5k1x4kPdKN1Ki+DrE7JaGxiJ/nXkm1Jph8R9sHn1kIgwpdqN0T7fRdZ94r
JkdrOA+FN0A9NOoAJYRqAIyiF+cPSaJ7wZrIf1AkkD3ELjZkS+o8Sc9abS4KXBUb
XoB8Vm/bmqNbxwMBhoUbbd/u/Dyqvbxcgr1TtHluuvDqKMT9bKXU3hIGzlFhQ/PY
VunFrTkFTvxzMLRsivmLmSYYi0uD/lat7fRLGdx8d9q4vPMD1tsHcxS3rQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFEL3/nBmRnKeFkzMvjHeoi30QJV3MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvUXZmLWNHWkdjcDRXVE15LU1kNmlMZlJBbFhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBAAt
WuwDBAAtg4cwDAMEALl5DQMEALl5DgMEALnEKQMEALnKzwMEALnaEQMEALnaEwME
ALnjkAMEALnmQwMEALnozAMEALnsGDAMAwQAue+NAwQAue+OAwQAufq1AwQAuf6e
AwQAwRG2AwQBwjCMAwQAwjCPAwQBwnzSAwQAwpLfMA0GCSqGSIb3DQEBCwUAA4IB
AQAqY4+MbaAhY+zcnqdJGGO4Tr0ZMoNnMYg51L+g+LCYRGIfvDUNPvq5LYd+VvxZ
N2nrWgtZ7UvaViFnmfaXo+ynC6AqwTR4GvbZXFJ+jMFnRbnfky1YeRsWCmmmyZ+2
noH2Bzdta6xreK0FInM0rElEJ3YhUklRBPetgdOLyAGx1Ox5+dQ405WxL/oDjbd/
fpXtIcNxIBojC8B3wp2dnzoP5qX4wqAes2ikZZZwqeIpLyts9bvC5+OfHH+BB9iu
ciNMdGhJ6AdsVSZqfM+FDZ9YAHXRZ+6jf8tkXcROfYsbpOuBJidZ3PZynXwXILEL
VwqEeaGysDYI5c1kZHcyaNdW
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:21 2026 by rpki-client