Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/x4Q6m1wv-pITHe_a1P4urL0ZUiw.roa
File: x4Q6m1wv-pITHe_a1P4urL0ZUiw.roa (raw, json)
Hash identifier: x7gVtcZwC0I0NghhHmCNDfc+CMJd3ZnBxs/oev4hA3E=
Subject key identifier: C7:84:3A:9B:5C:2F:FA:92:13:1D:EF:DA:D4:FE:2E:AC:BD:19:52:2C
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019C2D76999CB0328E2498360F89B99BDADA
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/x4Q6m1wv-pITHe_a1P4urL0ZUiw.roa
Signing time: Thu 05 Feb 2026 11:01:13 +0000
ROA not before: Thu 05 Feb 2026 11:01:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13194
IP address blocks: 80.81.61.0/24 maxlen: 24
85.254.71.0/24 maxlen: 24
85.254.73.0/24 maxlen: 24
85.254.74.0/23 maxlen: 23
85.254.74.0/24 maxlen: 24
85.254.75.0/24 maxlen: 24
85.254.76.0/22 maxlen: 22
85.254.76.0/24 maxlen: 24
85.254.80.0/22 maxlen: 22
85.254.84.0/23 maxlen: 23
85.254.92.0/22 maxlen: 22
85.254.92.0/23 maxlen: 23
85.254.92.0/24 maxlen: 24
85.254.93.0/24 maxlen: 24
85.254.94.0/24 maxlen: 24
85.254.95.0/24 maxlen: 24
85.254.96.0/22 maxlen: 22
85.254.96.0/23 maxlen: 23
85.254.98.0/23 maxlen: 23
85.254.100.0/24 maxlen: 24
85.254.101.0/24 maxlen: 24
85.254.102.0/24 maxlen: 24
85.254.124.0/23 maxlen: 23
85.254.141.0/24 maxlen: 24
85.254.149.0/24 maxlen: 24
85.254.151.0/24 maxlen: 24
85.254.152.0/22 maxlen: 22
85.254.159.0/24 maxlen: 24
85.254.161.0/24 maxlen: 24
85.254.168.0/24 maxlen: 24
85.254.169.0/24 maxlen: 24
85.254.170.0/24 maxlen: 24
85.254.176.0/23 maxlen: 23
91.190.45.0/24 maxlen: 24
91.190.48.0/24 maxlen: 24
91.190.49.0/24 maxlen: 24
159.148.73.0/24 maxlen: 24
159.148.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:76:99:9c:b0:32:8e:24:98:36:0f:89:b9:9b:da:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Feb 5 11:01:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7843a9b5c2ffa92131defdad4fe2eacbd19522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:1d:e3:28:b7:45:c8:ad:c2:8a:42:fd:45:
6a:4b:9a:9b:14:9a:96:4b:be:79:0f:be:16:f3:25:
99:3f:22:d8:2e:6e:15:9a:84:6f:e8:d9:c9:97:f8:
3b:8f:18:59:ec:ce:6a:9c:3c:94:4f:c6:13:93:34:
4f:df:1e:d5:d1:42:8b:77:e9:8b:e3:81:ed:92:c6:
14:e6:51:59:c4:66:a9:40:40:0d:d8:72:59:eb:46:
c6:3d:eb:9d:b4:76:1f:82:70:7c:3b:2e:46:9d:12:
a5:86:d5:f1:f9:66:9a:9d:ca:fe:ae:fb:d4:53:ee:
77:d0:bb:ab:98:77:7a:d7:d6:c1:08:da:bd:ad:1d:
97:ad:25:06:0d:f9:88:21:83:ef:37:91:61:5b:ab:
56:39:1a:a2:b8:fb:cd:9e:af:23:3f:73:2f:57:9e:
97:49:17:37:3b:75:34:52:1b:09:5e:39:fb:f7:be:
04:a0:d9:4e:d9:16:3b:42:8b:66:ac:2b:0a:5e:95:
45:9d:f0:d9:61:3f:83:6e:9e:2d:0b:a7:3b:7b:2d:
8d:9e:71:06:98:d9:6d:b5:27:35:76:b9:ed:84:ff:
5c:ef:d6:f5:98:9b:70:62:18:9b:70:9e:95:04:73:
26:fe:f4:f5:91:ef:50:11:ec:2b:d5:3d:41:cc:60:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:3A:9B:5C:2F:FA:92:13:1D:EF:DA:D4:FE:2E:AC:BD:19:52:2C
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/x4Q6m1wv-pITHe_a1P4urL0ZUiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.61.0/24
85.254.71.0/24
85.254.73.0-85.254.85.255
85.254.92.0-85.254.102.255
85.254.124.0/23
85.254.141.0/24
85.254.149.0/24
85.254.151.0-85.254.155.255
85.254.159.0/24
85.254.161.0/24
85.254.168.0-85.254.170.255
85.254.176.0/23
91.190.45.0/24
91.190.48.0/23
159.148.73.0/24
159.148.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:10:26:b6:db:57:6d:ae:d3:52:fa:68:18:a1:b1:17:f1:73:
46:5c:3f:04:7e:7f:68:c6:75:56:f1:22:ed:df:9e:8b:fd:26:
2d:9c:b0:33:d4:6e:80:48:db:d9:21:10:08:c2:08:1f:0b:fa:
8c:41:ac:d1:ed:44:54:db:bb:36:40:5e:dc:aa:b9:8a:14:d5:
57:3b:0b:4f:fe:f8:2e:ae:13:19:94:8b:98:68:38:e6:b6:b8:
8b:20:a5:4e:07:c1:8a:0d:bd:8c:40:68:e0:00:a9:20:30:98:
da:d3:e8:3c:20:42:d4:60:6a:91:f9:9d:88:19:2c:67:bd:6f:
69:cd:9f:9e:05:de:c9:2a:74:c9:af:fc:cb:63:dd:97:b7:44:
cd:a7:08:6f:b4:e9:d1:2c:5b:d2:bc:cb:c0:25:86:66:7f:cb:
1e:cd:0f:31:fe:7c:23:fe:b6:11:b2:37:1c:d8:d8:ea:d9:9a:
bd:5a:f7:4b:4a:b3:ef:58:83:ff:5b:5d:29:8d:75:f8:dc:47:
b8:19:44:04:14:69:a6:40:4b:55:21:5d:09:f4:cd:d4:c2:d1:
f4:d6:a9:c2:79:57:75:53:e8:30:bd:91:51:fe:d0:dd:96:ad:
0b:ca:58:fb:d8:32:8a:3e:b0:2a:bb:2b:5c:ce:35:ba:7e:88:
8c:ab:ed:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:09 2026 by rpki-client