Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/qZTFDchkILhj7kGV1ckQbjm6EM8.roa
File: qZTFDchkILhj7kGV1ckQbjm6EM8.roa (raw, json)
Hash identifier: t3O4AqRrM3ioDjFfkL8yzXf/zjvA7R8cp1XCSm0ZDY8=
Subject key identifier: A9:94:C5:0D:C8:64:20:B8:63:EE:41:95:D5:C9:10:6E:39:BA:10:CF
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 019FA918FAE229C82EF365FFB45F5C441633
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/qZTFDchkILhj7kGV1ckQbjm6EM8.roa
Signing time: Tue 28 Jul 2026 14:20:14 +0000
ROA not before: Tue 28 Jul 2026 14:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29180
IP address blocks: 82.132.128.0/22 maxlen: 24
82.132.132.0/22 maxlen: 24
82.132.136.0/23 maxlen: 24
82.132.140.0/23 maxlen: 24
82.132.142.0/23 maxlen: 24
82.132.144.0/21 maxlen: 24
82.132.152.0/21 maxlen: 24
82.132.160.0/20 maxlen: 24
82.132.188.0/23 maxlen: 24
82.132.190.0/23 maxlen: 24
82.132.192.0/21 maxlen: 24
82.132.192.0/23 maxlen: 24
82.132.194.0/23 maxlen: 24
82.132.196.0/23 maxlen: 24
82.132.200.0/21 maxlen: 24
82.132.200.0/23 maxlen: 24
82.132.202.0/23 maxlen: 24
82.132.204.0/23 maxlen: 24
82.132.206.0/23 maxlen: 24
82.132.208.0/23 maxlen: 24
82.132.250.0/23 maxlen: 24
82.132.252.0/23 maxlen: 23
82.132.254.0/23 maxlen: 24
185.238.16.0/23 maxlen: 24
185.238.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:18:fa:e2:29:c8:2e:f3:65:ff:b4:5f:5c:44:16:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Jul 28 14:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a994c50dc86420b863ee4195d5c9106e39ba10cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:4b:4a:3e:78:16:1a:ac:1c:e0:39:3d:39:
f2:24:9b:21:98:7f:81:0d:01:b7:10:d2:72:91:ce:
97:ae:e1:d8:80:07:0e:0d:98:e3:fb:8b:cc:72:d9:
c3:69:f0:b7:b9:31:f0:6d:61:d3:1b:38:ba:be:eb:
7d:00:8e:4f:90:33:eb:bb:b1:72:2d:e7:53:81:6a:
22:7b:83:b6:f6:48:a3:6f:2d:7a:ac:27:22:a8:55:
6c:d0:2e:8a:73:24:1c:b7:6c:d6:c1:60:c4:16:bc:
04:44:b7:9e:5a:8f:e7:4f:9b:dc:90:38:fd:59:ca:
b5:8f:46:33:06:12:50:46:f3:83:17:b8:12:d0:cb:
e7:91:12:4b:33:3f:95:b2:e2:38:cc:b5:78:11:14:
6d:30:68:05:43:88:1c:fa:45:e1:a8:29:01:49:ba:
58:ba:0c:c2:be:46:18:a0:62:4b:95:cc:9e:13:c5:
a8:f4:d1:d6:dc:7c:26:df:05:77:7c:5f:3e:83:18:
d3:ce:99:b8:b8:fd:61:2b:88:c1:b2:7b:71:16:8c:
c0:01:ad:25:e3:73:a5:a6:ff:ea:a2:4b:1b:9b:4d:
5c:ea:d4:ad:ca:5f:5c:af:99:a3:86:bb:b8:27:d5:
7c:5b:f2:ee:ca:95:87:37:e8:de:ce:33:4b:9e:34:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:C5:0D:C8:64:20:B8:63:EE:41:95:D5:C9:10:6E:39:BA:10:CF
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/qZTFDchkILhj7kGV1ckQbjm6EM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.132.128.0-82.132.137.255
82.132.140.0-82.132.175.255
82.132.188.0-82.132.209.255
82.132.250.0-82.132.255.255
185.238.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:c0:c1:4e:51:50:96:c0:2b:a5:e2:cf:47:34:47:f7:35:03:
95:40:5e:c3:f3:2f:7d:12:07:94:d3:55:4e:fb:91:96:13:49:
e8:ab:d9:68:73:4b:db:e1:f9:56:98:16:96:2b:6e:73:44:26:
37:2f:a3:0c:73:1c:f7:6c:5d:b2:da:bc:43:1e:98:0e:44:f7:
82:f2:94:c2:62:ff:01:60:b3:0f:15:8d:9b:37:1d:9f:71:45:
55:15:f2:81:64:ea:75:14:69:ae:15:6a:05:7b:e0:64:ab:e7:
d7:0a:49:b7:46:aa:2f:56:bc:23:1f:a8:a0:89:7c:0d:0a:49:
88:85:71:34:bb:0a:9a:21:19:26:bd:e8:0e:c1:7b:82:af:a7:
53:6c:ed:77:a4:fe:34:d1:90:ee:23:a8:5c:08:3f:16:b8:fe:
01:c8:1d:5f:0a:f8:82:a4:e9:51:ce:b8:c2:d5:da:1a:94:f1:
fd:ab:0f:b1:79:54:1e:13:5c:6a:71:39:34:ab:d7:c7:65:90:
00:b0:8a:4b:0c:58:39:e9:80:b1:e9:cb:cd:75:90:1b:87:a3:
b6:81:88:db:98:24:58:b9:7d:fe:6f:e6:76:25:51:b9:a8:b9:
f9:6b:fb:ec:2d:9b:d8:07:68:93:17:47:47:f9:d7:be:d7:c2:
34:c8:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:54:19 2026 by rpki-client