Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/PQmZGdLaHEnq_VA_WaIJhBCllzw.roa
File: PQmZGdLaHEnq_VA_WaIJhBCllzw.roa (raw, json)
Hash identifier: msKFFd75Ii7SQGyNHduha6GJ+oyOsZeJqgi+9OI13LY=
Subject key identifier: 3D:09:99:19:D2:DA:1C:49:EA:FD:50:3F:59:A2:09:84:10:A5:97:3C
Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial: 01A0CD3B8D90C788CEF67733FAEFA8FAEC9C
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/PQmZGdLaHEnq_VA_WaIJhBCllzw.roa
Signing time: Wed 23 Sep 2026 07:47:07 +0000
ROA not before: Wed 23 Sep 2026 07:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31042
IP address blocks: 24.135.0.0/16 maxlen: 17
46.17.144.0/21 maxlen: 21
46.240.128.0/17 maxlen: 17
80.93.224.0/19 maxlen: 19
82.117.192.0/19 maxlen: 24
82.117.195.0/24 maxlen: 24
87.116.128.0/18 maxlen: 24
87.116.128.0/19 maxlen: 19
87.116.140.0/24 maxlen: 24
87.116.141.0/24 maxlen: 24
87.116.160.0/19 maxlen: 21
89.216.0.0/16 maxlen: 24
91.143.208.0/20 maxlen: 20
94.189.128.0/17 maxlen: 18
94.230.176.0/20 maxlen: 20
95.180.0.0/17 maxlen: 22
178.148.0.0/15 maxlen: 16
188.2.0.0/16 maxlen: 17
188.246.32.0/19 maxlen: 19
213.244.224.0/22 maxlen: 24
2a00:1dd8::/29 maxlen: 29
2a00:1dd8::/32 maxlen: 32
2a03:87c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:3b:8d:90:c7:88:ce:f6:77:33:fa:ef:a8:fa:ec:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
Validity
Not Before: Sep 23 07:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d099919d2da1c49eafd503f59a2098410a5973c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:52:17:b0:2e:bd:9e:f9:2f:2c:16:79:77:
b8:9d:e2:a2:10:10:54:17:f1:45:96:bf:d1:c4:3f:
d9:b4:d4:c9:fc:32:27:45:3d:e5:16:b4:d1:8e:e5:
b2:43:19:c2:7b:52:c4:5e:13:ce:f3:a9:61:e4:db:
eb:68:ed:55:9b:44:0c:c4:8a:4e:35:ec:3b:1a:eb:
27:bc:1c:6d:55:c0:7e:84:54:94:57:a2:e1:34:9a:
40:f5:2a:bc:50:30:38:5a:a8:62:84:a1:ad:1f:27:
34:a6:f9:76:89:5f:e8:cb:82:15:be:6c:f6:8e:2c:
3d:95:6a:72:e6:9e:8e:aa:5c:0e:f6:7c:c4:f6:c5:
02:3e:f2:e1:f2:e5:42:c7:69:70:37:9c:0f:27:4e:
ad:29:ff:c9:d3:34:0e:6e:dd:9f:a2:1d:da:56:01:
04:bf:4c:ea:28:6a:ba:21:71:51:f2:3d:66:29:9e:
7a:fb:51:ab:d2:a5:65:95:ac:bd:37:1a:0e:32:41:
56:96:01:51:7f:68:c6:fb:ca:28:31:24:bb:75:08:
b1:21:fd:e1:56:a0:d1:8a:dc:c5:63:d8:fa:bb:2b:
89:0b:bc:cc:6f:37:b4:f0:70:a7:1c:5c:01:9a:f4:
79:18:38:47:17:30:fb:48:8f:5a:10:0b:69:66:8d:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:09:99:19:D2:DA:1C:49:EA:FD:50:3F:59:A2:09:84:10:A5:97:3C
X509v3 Authority Key Identifier:
keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/PQmZGdLaHEnq_VA_WaIJhBCllzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.135.0.0/16
46.17.144.0/21
46.240.128.0/17
80.93.224.0/19
82.117.192.0/19
87.116.128.0/18
89.216.0.0/16
91.143.208.0/20
94.189.128.0/17
94.230.176.0/20
95.180.0.0/17
178.148.0.0/15
188.2.0.0/16
188.246.32.0/19
213.244.224.0/22
IPv6:
2a00:1dd8::/29
2a03:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:ca:11:c0:b2:b0:19:6b:5d:5b:94:1b:cf:92:f9:9e:95:3e:
a8:0c:4e:41:11:0c:d6:f2:5e:83:42:78:58:66:d3:c5:8f:c0:
fd:67:ff:1f:d0:10:77:0b:fc:86:2d:ec:95:73:24:b6:71:35:
f8:73:1e:87:49:76:99:b5:ef:ad:c9:08:08:df:b6:e9:e9:ac:
a7:ea:02:f0:9d:c6:da:2a:62:29:05:dd:76:c0:f6:1e:d3:cf:
54:e9:70:80:bb:bf:c5:72:42:e5:80:1f:41:32:fa:3d:d2:c0:
f5:5b:22:bb:76:c1:ba:e7:01:7a:e8:29:b8:54:30:b2:4c:5e:
8a:5a:fb:69:c5:81:5f:cb:cf:58:92:c5:8b:f2:7d:82:4a:b1:
89:f0:ec:ad:e3:8b:98:03:ed:69:25:1a:1b:03:9d:fa:6a:ba:
c2:0f:b1:8e:e9:b9:d7:eb:2f:f8:55:d5:1f:86:ef:21:55:c8:
fc:ce:04:4e:29:5a:08:53:fb:e8:06:5e:7f:dd:d5:ad:ae:f2:
3c:12:d6:88:18:99:6d:02:7c:59:91:ae:4a:89:30:f3:93:8c:
2a:7d:04:f2:fd:1f:3d:2e:36:0d:62:a4:e3:88:35:1a:ae:61:
bd:2d:c7:b9:e3:04:c9:9e:42:bf:d1:e5:67:2d:87:88:4b:f6:
12:f6:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:07:03 2026 by rpki-client