Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/qzMo16nmO71L2QshypR-MMDDoCo.roa
File: qzMo16nmO71L2QshypR-MMDDoCo.roa (raw, json)
Hash identifier: l9OxB1GKfb3RigjCep1J7ekawkvlh+mNfXTsSVv2Rdo=
Subject key identifier: AB:33:28:D7:A9:E6:3B:BD:4B:D9:0B:21:CA:94:7E:30:C0:C3:A0:2A
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019C8B3672DC2D1E07FCEDD6BF03E17F9B9B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/qzMo16nmO71L2QshypR-MMDDoCo.roa
Signing time: Mon 23 Feb 2026 15:55:27 +0000
ROA not before: Mon 23 Feb 2026 15:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200195
IP address blocks: 45.89.61.0/24 maxlen: 24
2a0e:4005::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:36:72:dc:2d:1e:07:fc:ed:d6:bf:03:e1:7f:9b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Feb 23 15:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab3328d7a9e63bbd4bd90b21ca947e30c0c3a02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:4b:e9:24:cc:7d:af:3c:f8:20:fd:db:b0:
32:e2:74:0f:04:69:3c:5a:af:62:a1:e6:b3:9b:ae:
9a:7a:44:7c:d8:11:02:76:e3:3d:ac:7c:e6:21:76:
62:0e:5a:fb:03:ec:0a:95:e0:b3:ff:bd:79:d6:f3:
4d:87:44:af:f1:5f:aa:22:1c:52:77:94:d5:c8:e2:
ec:60:5b:f9:84:c5:30:7e:9a:7d:e1:00:4e:de:5b:
8f:52:5b:dd:eb:2f:96:72:f2:dc:aa:83:ee:2f:84:
e7:b3:55:d4:70:f5:45:9d:19:59:e4:d1:a4:26:e9:
cb:8f:5f:a3:7c:9d:d6:48:79:fa:d4:31:53:20:6f:
82:ea:5c:36:bd:77:23:fa:3a:70:23:02:cf:0c:f2:
be:2a:70:9b:17:b5:4c:b8:6b:58:f4:87:71:54:5d:
3d:9b:b9:be:9d:f9:8d:50:32:c8:ae:66:3a:35:7e:
b1:71:77:86:36:26:d5:45:2d:b3:ae:6e:5d:3d:3f:
43:fe:61:d5:e5:58:d0:d2:f4:49:b5:62:82:8e:ac:
db:c0:0c:b6:e3:92:65:4a:38:4c:20:2f:a4:85:65:
be:cf:40:d3:74:97:b8:e3:03:cc:b7:0d:fe:cf:0e:
f7:15:2b:b6:da:53:db:eb:6c:db:a2:4d:72:dd:3b:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:33:28:D7:A9:E6:3B:BD:4B:D9:0B:21:CA:94:7E:30:C0:C3:A0:2A
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/qzMo16nmO71L2QshypR-MMDDoCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.61.0/24
IPv6:
2a0e:4005::/32
Signature Algorithm: sha256WithRSAEncryption
e6:ce:7c:22:13:c6:a6:59:38:f2:dd:61:35:36:1b:c9:7a:a1:
9b:c2:c4:de:72:9e:a0:f7:18:15:cf:58:83:a4:17:fb:46:d7:
ab:8e:a9:07:a0:e9:df:bb:4b:b8:51:bd:be:4a:98:73:25:e9:
27:8a:dc:34:38:cb:30:7c:e9:34:31:46:cd:b7:d5:52:57:1e:
c5:70:02:f0:53:6a:73:cb:47:84:e9:4d:01:f8:97:fc:e6:a5:
08:87:88:a8:ec:2a:72:4b:c4:bc:d8:06:8c:42:b3:be:c6:08:
7f:99:e7:52:30:46:34:38:21:d1:11:82:42:1f:24:94:2a:be:
ed:ba:56:74:8f:4c:65:7c:28:6e:0a:e8:de:44:bc:6d:1f:9c:
bd:cc:f9:6c:0f:92:0d:2f:e8:5b:3c:3d:a9:0c:fa:9b:4e:90:
bf:e4:da:4d:b0:ee:20:5e:19:fc:35:d5:df:ff:92:89:94:1e:
d6:6e:67:fa:8a:b8:c5:aa:5a:bc:0f:7e:f9:0c:ce:59:c0:f3:
ec:e9:93:16:93:40:bc:c1:9a:7c:f5:b6:45:d8:ee:79:3b:ba:
60:6f:db:82:2f:97:9f:58:06:66:58:43:73:0f:4e:36:4c:d4:
61:a6:b8:ba:7c:0d:c6:01:9a:1d:8b:e4:15:b6:fd:3a:a2:17:
05:9f:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:52 2026 by rpki-client