Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/QpiOjtqqn3KLmCsEJyklJCGXtrE.roa
File: QpiOjtqqn3KLmCsEJyklJCGXtrE.roa (raw, json)
Hash identifier: FMtgXOF3ndtdUEWRQlHxouObzXHzScpjOr9+4JvRDuQ=
Subject key identifier: 42:98:8E:8E:DA:AA:9F:72:8B:98:2B:04:27:29:25:24:21:97:B6:B1
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019C75EA44889EFFC28E7A1CE1A54CB9EFAA
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/QpiOjtqqn3KLmCsEJyklJCGXtrE.roa
Signing time: Thu 19 Feb 2026 12:40:13 +0000
ROA not before: Thu 19 Feb 2026 12:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 77.105.131.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
91.193.43.0/24 maxlen: 24
185.80.91.0/24 maxlen: 24
194.117.80.0/24 maxlen: 24
2a00:f9a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:ea:44:88:9e:ff:c2:8e:7a:1c:e1:a5:4c:b9:ef:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Feb 19 12:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42988e8edaaa9f728b982b04272925242197b6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:46:c2:3f:b1:46:72:e8:50:65:f2:bb:f9:
b6:a0:72:56:8a:d1:f9:87:a5:f4:78:d0:b6:5a:6a:
56:9e:ee:6a:35:7e:3b:d5:65:d9:35:f5:16:ff:26:
d0:08:a0:c9:e1:a7:a8:4b:e4:3d:de:18:c1:95:5f:
cb:2a:38:d9:ec:fa:49:d0:0d:22:52:67:70:1b:8f:
d2:7a:59:ed:02:42:37:60:d7:ab:85:0c:c6:a4:7a:
13:65:94:35:e4:01:d5:66:69:6e:68:e5:a3:aa:39:
f0:ff:88:2c:b7:2f:57:93:c1:b4:dc:08:1e:cb:f4:
45:cd:3a:2e:99:39:cb:b3:02:41:9d:49:9d:5a:81:
b6:b7:d8:9d:62:89:6f:25:3e:26:3f:17:e8:a2:42:
7f:29:4d:df:9b:2e:84:77:23:1a:07:a2:96:c4:07:
47:4b:ee:cf:5d:e7:5a:db:2a:d5:1f:fe:d0:0f:b9:
79:6b:c8:bb:92:f7:fd:d7:75:91:48:21:d2:52:95:
7e:f0:63:d2:34:e3:29:a5:32:c2:75:81:c0:c2:0d:
a6:43:29:c8:35:b8:bc:c8:ed:1f:15:2b:6e:b7:af:
2e:a0:97:3c:a5:50:f2:38:a2:f5:30:2c:b8:67:37:
07:f7:9b:48:47:e0:d7:91:99:1b:55:42:9c:75:f5:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:98:8E:8E:DA:AA:9F:72:8B:98:2B:04:27:29:25:24:21:97:B6:B1
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/QpiOjtqqn3KLmCsEJyklJCGXtrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.131.0/24
77.105.133.0/24
77.105.144.0/24
91.193.43.0/24
185.80.91.0/24
194.117.80.0/24
IPv6:
2a00:f9a0::/32
Signature Algorithm: sha256WithRSAEncryption
32:16:bb:95:75:ae:96:05:49:0e:f7:e8:a8:85:d8:87:45:77:
bc:b1:1a:01:9e:db:46:55:ca:7c:34:32:f5:e6:72:3d:b0:db:
9c:bb:7a:a9:c5:bb:42:76:de:8f:17:98:0d:f2:31:f4:50:dc:
46:33:6a:3b:46:8d:73:14:95:7f:19:e1:fc:36:91:66:38:9a:
6a:cc:35:b8:b3:0d:2c:28:72:ba:a2:db:09:c2:0e:fc:b3:73:
8c:8a:76:16:4d:ea:bd:d0:b5:5a:da:49:24:c2:ff:79:3a:60:
ab:26:fd:c3:4f:82:ab:f0:a0:cd:db:e1:2a:73:c6:9f:96:73:
22:10:20:49:51:90:b6:11:b8:15:fa:bf:28:e7:b1:96:a0:cf:
54:61:7d:4f:a3:fc:13:a5:f9:24:5d:43:1a:10:e8:1c:a8:3c:
03:4a:97:8d:18:37:45:b7:1b:1a:ac:cd:f7:db:35:3b:a7:69:
bc:b6:01:75:32:9b:b4:3e:af:d0:0b:cc:6e:c6:02:d7:22:82:
81:a3:ce:ab:42:95:7c:80:06:86:98:2b:44:6e:db:8b:d5:2e:
ff:94:d0:02:76:d5:40:d2:df:93:03:9d:ea:39:43:5f:3f:ce:
01:24:5a:d7:e0:3b:1f:46:dd:e5:b5:71:9d:84:44:6a:c4:33:
89:c9:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:25 2026 by rpki-client