Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/QH0Ckf1IFXXT7GTwHnMKeeAHS84.roa
File: QH0Ckf1IFXXT7GTwHnMKeeAHS84.roa (raw, json)
Hash identifier: /SUNtPswPkHftByhz39cUVhjXBVat8rShXG+3RG15gA=
Subject key identifier: 40:7D:02:91:FD:48:15:75:D3:EC:64:F0:1E:73:0A:79:E0:07:4B:CE
Certificate issuer: /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial: 01A1A933AB79C359AB54E4B5E4525C92FE15
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/QH0Ckf1IFXXT7GTwHnMKeeAHS84.roa
Signing time: Thu 05 Nov 2026 00:54:58 +0000
ROA not before: Thu 05 Nov 2026 00:54:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36231
IP address blocks: 64.52.81.0/24 maxlen: 24
104.152.141.0/24 maxlen: 24
104.152.142.0/24 maxlen: 24
104.152.143.0/24 maxlen: 24
141.193.68.0/24 maxlen: 24
163.123.193.0/24 maxlen: 24
163.123.195.0/24 maxlen: 24
172.111.33.0/24 maxlen: 24
172.111.35.0/24 maxlen: 24
199.231.233.0/24 maxlen: 24
205.178.177.0/24 maxlen: 24
205.178.182.0/24 maxlen: 24
209.127.214.0/24 maxlen: 24
209.237.141.0/24 maxlen: 24
216.126.207.0/24 maxlen: 24
2a03:e680::/48 maxlen: 48
2a03:e680:1::/48 maxlen: 48
2a03:e680:3::/48 maxlen: 48
2a03:e680:4::/48 maxlen: 48
2a03:e680:5::/48 maxlen: 48
2a03:e680:6::/48 maxlen: 48
2a03:e680:7::/48 maxlen: 48
2a03:e680:8::/48 maxlen: 48
2a03:e680:9::/48 maxlen: 48
2a03:e680:a::/48 maxlen: 48
2a03:e680:b::/48 maxlen: 48
2a03:e680:c::/48 maxlen: 48
2a03:e680:d::/48 maxlen: 48
2a03:e680:e::/48 maxlen: 48
2a03:e687:fffc::/48 maxlen: 48
2a03:e687:fffd::/48 maxlen: 48
2a03:e687:fffe::/48 maxlen: 48
2a03:e687:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:33:ab:79:c3:59:ab:54:e4:b5:e4:52:5c:92:fe:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Validity
Not Before: Nov 5 00:54:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=407d0291fd481575d3ec64f01e730a79e0074bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:60:5f:7b:2a:bf:9c:80:21:3e:ea:98:0e:
14:7a:48:a5:82:05:78:01:ce:d5:39:9d:f6:91:0b:
cc:cd:78:35:65:c1:10:33:a4:65:5b:00:8e:ba:5e:
24:fa:77:fb:49:bc:d4:62:f2:5a:ad:e4:48:28:49:
f2:9f:fc:aa:39:e9:40:06:b7:a1:4d:c5:d3:f2:85:
46:59:ec:6c:a5:7e:10:44:42:b2:aa:bd:c3:e6:9e:
7e:1b:a3:8d:5a:55:7f:06:12:26:fa:61:bf:b4:6e:
67:2b:08:d9:ee:8b:4f:71:88:c7:8b:04:51:07:dd:
da:d4:08:a8:c4:96:b9:d6:99:97:33:1e:15:c7:e3:
bd:d5:2e:2e:69:e9:c8:93:62:8e:5d:88:15:68:76:
bf:e4:0c:76:f7:6b:a6:73:5e:5f:49:ce:dc:6a:7e:
d4:d2:6d:ff:13:bc:59:68:de:43:99:44:d2:9f:a5:
92:fe:7f:4c:f5:50:53:8e:40:89:13:5b:8a:08:b7:
c3:96:05:87:50:46:06:c9:2b:5c:31:9e:81:21:bc:
dc:21:06:04:8f:08:de:01:46:49:07:bc:09:c8:35:
a2:4f:9d:80:a6:f8:c9:47:e1:f1:51:f8:a5:7a:0f:
4a:30:93:e0:a2:63:f1:c4:57:66:21:f9:93:63:86:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:02:91:FD:48:15:75:D3:EC:64:F0:1E:73:0A:79:E0:07:4B:CE
X509v3 Authority Key Identifier:
keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/QH0Ckf1IFXXT7GTwHnMKeeAHS84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.52.81.0/24
104.152.141.0-104.152.143.255
141.193.68.0/24
163.123.193.0/24
163.123.195.0/24
172.111.33.0/24
172.111.35.0/24
199.231.233.0/24
205.178.177.0/24
205.178.182.0/24
209.127.214.0/24
209.237.141.0/24
216.126.207.0/24
IPv6:
2a03:e680::/47
2a03:e680:3::-2a03:e680:e:ffff:ffff:ffff:ffff:ffff
2a03:e687:fffc::/46
Signature Algorithm: sha256WithRSAEncryption
1b:c8:3e:79:af:7b:bd:b3:81:2c:31:e4:42:b9:2a:ad:21:87:
c1:86:ce:98:a8:df:5c:6f:e1:6f:78:11:cd:b8:12:94:8a:51:
c5:ef:e6:4a:51:eb:93:a2:ed:13:d4:70:f8:44:1c:a6:d7:36:
77:2b:f8:fa:fa:94:05:4c:bb:50:ba:5e:a8:49:7f:94:70:5c:
ca:33:09:f9:3b:9c:e7:0a:d8:aa:39:dd:79:f7:4d:c8:e4:a7:
3f:db:d4:68:54:94:a4:86:1b:f4:69:3a:2e:9b:33:79:ab:3b:
54:fb:40:3a:90:12:ec:6a:cb:70:c3:d0:e4:70:97:6f:48:3a:
e5:cd:3c:5b:ac:e4:36:96:e2:7c:d5:97:d3:60:b7:80:fe:8f:
ed:bf:e5:ac:6e:7b:bb:8b:a3:2b:1a:c8:8e:b8:2b:d2:75:6c:
22:d0:98:09:2b:8d:be:83:1e:33:55:d8:6e:af:65:72:ed:b3:
7a:88:d5:87:3b:cc:1d:32:bf:94:98:0f:3b:b4:8f:db:9e:b7:
7e:bb:1f:ab:6b:f3:ee:67:e6:c8:0f:8e:01:8b:ed:0a:4b:a5:
4b:9c:01:83:c9:40:c5:dd:21:09:8f:73:89:66:29:fd:f0:63:
b9:ed:b1:f8:25:db:fd:7d:07:2e:d4:02:21:63:cc:13:c2:62:
3a:b1:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:39:43 2026 by rpki-client