Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/qABofJud5u1thFUHFuMgR1s31kI.roa
File: qABofJud5u1thFUHFuMgR1s31kI.roa (raw, json)
Hash identifier: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=
Subject key identifier: A8:00:68:7C:9B:9D:E6:ED:6D:84:55:07:16:E3:20:47:5B:37:D6:42
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 019C896386764918F1CE0228AFA841A10DA3
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/qABofJud5u1thFUHFuMgR1s31kI.roa
Signing time: Mon 23 Feb 2026 07:25:26 +0000
ROA not before: Mon 23 Feb 2026 07:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 45.85.244.0/23 maxlen: 24
45.85.246.0/24 maxlen: 24
45.85.247.0/24 maxlen: 24
62.68.64.0/24 maxlen: 24
62.68.72.0/24 maxlen: 24
91.212.122.0/24 maxlen: 24
91.229.5.0/24 maxlen: 24
193.110.161.0/24 maxlen: 24
193.201.202.0/24 maxlen: 24
194.55.128.0/24 maxlen: 24
195.60.170.0/24 maxlen: 24
217.8.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:63:86:76:49:18:f1:ce:02:28:af:a8:41:a1:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Feb 23 07:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a800687c9b9de6ed6d84550716e320475b37d642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:f9:2e:92:41:30:96:dc:72:62:3c:c1:a8:
49:f6:fb:57:86:89:35:f8:b2:4d:b0:5f:4e:b6:ad:
af:42:16:9d:13:50:4b:47:42:55:07:00:65:57:7c:
ad:0e:63:09:51:72:4e:71:9a:45:a7:0b:75:5a:cc:
9e:26:88:ba:41:57:42:8e:52:e5:97:a6:9f:c7:2f:
59:90:d6:80:e4:b7:fb:55:87:a7:05:da:15:97:4a:
71:7f:c9:0e:d2:d9:4f:54:fa:5f:57:fa:f7:51:bb:
da:20:e1:0b:ba:bb:c5:68:55:f3:43:6f:c8:5a:b5:
0f:e3:e8:8a:c6:4a:8b:00:0d:f8:09:58:89:84:c5:
12:f6:5f:fb:87:85:a4:e7:d1:87:b2:b0:a2:d0:66:
87:87:a9:0d:01:dd:74:c4:da:fe:3c:e3:99:58:c1:
52:f5:00:6b:df:ef:2d:75:5f:69:c5:a9:b5:67:34:
13:a9:93:26:0c:b1:78:52:a4:4d:39:50:fc:24:02:
8b:9c:02:b6:55:7f:ba:40:90:28:b0:d4:44:b4:13:
99:12:fb:4b:c4:db:fd:7a:68:0b:fa:1f:81:e9:1b:
47:60:04:24:8f:b1:da:79:ce:8e:30:ed:67:48:41:
ca:75:f1:66:83:2a:15:a1:a2:34:61:fb:a9:6a:4b:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:00:68:7C:9B:9D:E6:ED:6D:84:55:07:16:E3:20:47:5B:37:D6:42
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/qABofJud5u1thFUHFuMgR1s31kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.244.0/22
62.68.64.0/24
62.68.72.0/24
91.212.122.0/24
91.229.5.0/24
193.110.161.0/24
193.201.202.0/24
194.55.128.0/24
195.60.170.0/24
217.8.116.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ac:69:74:b5:b7:d3:f7:17:a2:86:29:be:f6:a3:2b:19:57:
3a:2d:be:e2:2c:17:a6:10:2d:a1:a2:10:68:a5:6f:66:f0:23:
06:82:39:e2:99:66:09:b9:b4:8a:45:ab:b4:98:b1:3e:c2:17:
cd:54:5a:12:93:c3:c3:db:b6:29:16:03:90:ef:cc:74:ee:7f:
95:3d:b7:09:9c:cd:40:15:fa:fe:1c:0f:41:fc:d1:68:24:06:
ce:26:68:b2:3f:5c:bc:85:e8:a8:a2:5e:e2:ff:76:8f:53:2c:
c4:ee:ef:41:96:ce:ce:c2:dd:34:18:f8:9e:52:b0:20:20:c9:
c5:71:ec:b1:a4:4e:9b:e5:3c:dc:84:99:a9:3b:52:c8:af:86:
c3:88:cd:13:7d:0e:80:ec:d8:12:08:ff:f6:37:5e:81:77:40:
78:1c:66:f7:16:53:2e:89:c3:88:cf:2b:d6:d3:34:42:4e:9a:
f0:1a:59:43:0c:17:fc:80:87:ba:fd:fd:12:8c:87:ef:f3:2d:
13:72:bd:26:a5:9d:38:e6:ec:4f:b5:f8:85:92:58:d0:80:35:
f6:5a:8d:46:48:57:ab:c9:10:93:f0:9b:1c:ec:52:9f:49:cf:
db:b2:bc:5a:bb:68:6f:a1:11:ca:78:0b:cf:5a:bd:c8:31:ad:
66:f9:4c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:22 2026 by rpki-client