Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/QZRSb6flvYeThtRQPRvlAMzxMf8.roa
File: QZRSb6flvYeThtRQPRvlAMzxMf8.roa (raw, json)
Hash identifier: y17c4/ue/zMkeJxlT781POtDMuRcBAC+63i1pzV9JTM=
Subject key identifier: 41:94:52:6F:A7:E5:BD:87:93:86:D4:50:3D:1B:E5:00:CC:F1:31:FF
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 01A1876729E1DE0EC7F63C580AB88D557BB2
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/QZRSb6flvYeThtRQPRvlAMzxMf8.roa
Signing time: Thu 29 Oct 2026 11:24:07 +0000
ROA not before: Thu 29 Oct 2026 11:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48854
IP address blocks: 46.36.204.0/22 maxlen: 22
46.36.208.0/21 maxlen: 21
77.243.128.0/20 maxlen: 20
80.70.0.0/23 maxlen: 23
80.70.2.0/24 maxlen: 24
80.70.7.0/24 maxlen: 24
81.95.240.0/20 maxlen: 20
81.95.249.0/24 maxlen: 24
89.188.72.0/21 maxlen: 21
89.188.79.0/24 maxlen: 24
91.197.248.0/22 maxlen: 22
91.217.201.0/24 maxlen: 24
93.191.152.0/21 maxlen: 21
93.191.152.0/22 maxlen: 22
93.191.156.0/24 maxlen: 24
93.191.157.0/24 maxlen: 24
93.191.158.0/24 maxlen: 24
94.137.128.0/20 maxlen: 20
94.143.8.0/21 maxlen: 21
94.231.96.0/20 maxlen: 20
94.231.103.0/24 maxlen: 24
109.71.56.0/21 maxlen: 21
178.251.0.0/21 maxlen: 21
178.251.1.0/24 maxlen: 24
185.20.204.0/22 maxlen: 22
185.20.205.0/24 maxlen: 24
185.20.206.0/23 maxlen: 23
185.21.40.0/22 maxlen: 22
185.21.40.0/24 maxlen: 24
185.25.140.0/24 maxlen: 24
185.25.141.0/24 maxlen: 24
185.25.142.0/24 maxlen: 24
185.25.143.0/24 maxlen: 24
185.134.28.0/22 maxlen: 22
185.154.240.0/22 maxlen: 22
185.204.248.0/22 maxlen: 22
185.221.36.0/22 maxlen: 22
185.223.24.0/22 maxlen: 22
185.235.52.0/22 maxlen: 22
185.235.52.0/24 maxlen: 24
193.223.248.0/22 maxlen: 22
193.239.96.0/22 maxlen: 22
194.150.112.0/22 maxlen: 22
195.69.128.0/22 maxlen: 22
195.178.14.0/23 maxlen: 23
212.97.132.0/22 maxlen: 22
212.97.140.0/22 maxlen: 22
212.97.140.0/24 maxlen: 24
212.97.141.0/24 maxlen: 24
212.97.142.0/24 maxlen: 24
212.97.143.0/24 maxlen: 24
212.237.248.0/23 maxlen: 23
217.61.237.0/24 maxlen: 24
217.61.238.0/24 maxlen: 24
2a02:2338::/32 maxlen: 48
2a02:2339::/36 maxlen: 36
2a02:2339:4000::/34 maxlen: 48
2a03:2740::/48 maxlen: 48
2a06:eac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:67:29:e1:de:0e:c7:f6:3c:58:0a:b8:8d:55:7b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Oct 29 11:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4194526fa7e5bd879386d4503d1be500ccf131ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:b1:2f:3f:85:21:14:3d:7e:97:95:07:c5:
0a:b1:90:6c:28:4f:fe:b5:b0:be:e4:54:8c:6b:ae:
92:8f:71:2e:62:2f:9d:04:29:1b:db:c5:d2:b5:74:
df:1f:0f:aa:19:f6:88:a0:16:58:6d:d0:a8:4f:cb:
27:81:e4:4c:cd:9b:07:f2:f2:ab:1b:16:5c:2d:b7:
6e:35:8b:5e:30:8b:ac:e5:cc:c0:5b:6f:35:20:9d:
39:0b:d7:e8:4b:bb:6f:6d:c5:0a:88:04:05:60:3d:
6a:7d:91:93:d5:b4:dc:b9:49:00:ab:e5:be:a0:eb:
6a:c0:5a:56:dd:94:6d:44:e5:2d:88:da:3a:d4:99:
df:c5:ca:53:96:26:23:8c:3c:57:a0:2e:6a:7d:80:
17:99:b3:31:e0:2d:3b:47:82:43:8a:f1:2c:70:08:
19:ff:3b:ce:a9:6f:2b:ed:10:2e:cf:18:69:ff:45:
21:41:8a:22:0c:23:32:81:98:39:25:d4:d9:be:43:
94:d0:32:0b:c2:b6:bf:87:c9:53:53:c2:0f:d2:78:
55:bd:f2:03:42:93:69:db:96:1a:0e:93:a3:f1:3d:
5b:51:b5:45:c6:09:58:c8:cf:06:ef:08:87:c6:32:
2c:03:02:d1:69:80:e4:70:e4:9d:02:77:95:dd:4b:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:52:6F:A7:E5:BD:87:93:86:D4:50:3D:1B:E5:00:CC:F1:31:FF
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/QZRSb6flvYeThtRQPRvlAMzxMf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.204.0-46.36.215.255
77.243.128.0/20
80.70.0.0-80.70.2.255
80.70.7.0/24
81.95.240.0/20
89.188.72.0/21
91.197.248.0/22
91.217.201.0/24
93.191.152.0/21
94.137.128.0/20
94.143.8.0/21
94.231.96.0/20
109.71.56.0/21
178.251.0.0/21
185.20.204.0/22
185.21.40.0/22
185.25.140.0/22
185.134.28.0/22
185.154.240.0/22
185.204.248.0/22
185.221.36.0/22
185.223.24.0/22
185.235.52.0/22
193.223.248.0/22
193.239.96.0/22
194.150.112.0/22
195.69.128.0/22
195.178.14.0/23
212.97.132.0/22
212.97.140.0/22
212.237.248.0/23
217.61.237.0-217.61.238.255
IPv6:
2a02:2338::-2a02:2339:fff:ffff:ffff:ffff:ffff:ffff
2a02:2339:4000::/34
2a03:2740::/48
2a06:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
62:b0:1e:ba:90:83:b6:b1:15:e0:18:06:34:d7:3e:14:bc:fb:
28:e1:c1:78:16:59:b4:22:15:f5:29:58:69:a9:eb:f9:3c:bc:
9f:e6:dd:84:e9:7f:01:0a:51:1f:41:5e:3d:30:a8:5e:49:f3:
49:2a:c1:cb:fb:c8:30:b9:1b:7a:ac:3e:6b:8a:5a:a5:c9:06:
aa:0b:0b:dd:bd:0b:f1:db:5b:06:96:1e:1d:fc:ae:b1:94:71:
79:60:9f:6f:14:6a:30:f3:de:0e:db:f6:da:98:a1:01:4b:0e:
76:0a:06:b2:a2:dc:8f:3d:08:49:df:ab:51:39:3e:5b:79:65:
57:19:3d:a9:13:ab:ae:76:98:8c:56:3c:dd:6c:9e:d1:e4:f2:
04:d0:b7:c1:77:38:5a:19:ac:51:6e:32:05:3f:bf:4e:79:db:
f6:68:5f:fb:1f:34:1a:40:30:2a:86:43:51:78:66:af:fa:47:
3e:68:29:8b:a3:ef:0e:1c:73:2a:1d:e5:6f:26:f3:6b:ad:69:
ae:58:a1:5b:e4:58:c4:34:ad:89:b2:74:fe:3e:02:40:cb:5c:
df:72:e7:a1:c8:16:e5:dd:9a:db:0f:18:67:1f:e4:db:1c:9d:
a0:ec:96:9d:92:d2:e8:84:97:4b:b2:d2:54:0a:0f:b3:c2:fd:
fd:be:c8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:59:57 2026 by rpki-client