Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/QgQXQMMUXekeUk2K2CZ-GNcgk1U.roa
File: QgQXQMMUXekeUk2K2CZ-GNcgk1U.roa (raw, json)
Hash identifier: +CFE16M5b21n1GPbvu994yavFbrXPCuK3yCugE8tfEY=
Subject key identifier: 42:04:17:40:C3:14:5D:E9:1E:52:4D:8A:D8:26:7E:18:D7:20:93:55
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 01A14443776464D16094FC6D22BDBE60E3AE
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/QgQXQMMUXekeUk2K2CZ-GNcgk1U.roa
Signing time: Fri 16 Oct 2026 10:30:34 +0000
ROA not before: Fri 16 Oct 2026 10:30:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 80.81.192.0/21 maxlen: 21
80.81.202.0/24 maxlen: 24
80.81.203.0/24 maxlen: 24
185.0.4.0/24 maxlen: 24
185.0.5.0/24 maxlen: 24
185.0.6.0/24 maxlen: 24
185.0.7.0/24 maxlen: 24
185.0.8.0/24 maxlen: 24
185.0.17.0/24 maxlen: 24
185.0.33.0/24 maxlen: 24
185.0.35.0/24 maxlen: 24
185.1.8.0/24 maxlen: 24
185.1.46.0/24 maxlen: 24
185.1.47.0/24 maxlen: 24
185.1.48.0/24 maxlen: 24
185.1.119.0/24 maxlen: 24
185.1.131.0/24 maxlen: 24
185.1.170.0/23 maxlen: 23
185.1.172.0/24 maxlen: 24
185.1.176.0/24 maxlen: 24
185.1.182.0/24 maxlen: 24
185.1.183.0/24 maxlen: 24
185.1.187.0/24 maxlen: 24
185.1.192.0/23 maxlen: 23
185.1.197.0/24 maxlen: 24
185.1.204.0/24 maxlen: 24
185.1.208.0/23 maxlen: 23
185.1.210.0/23 maxlen: 23
185.1.220.0/24 maxlen: 24
185.1.244.0/24 maxlen: 24
185.1.245.0/24 maxlen: 24
185.1.246.0/24 maxlen: 24
185.1.248.0/24 maxlen: 24
185.1.252.0/24 maxlen: 24
185.1.253.0/24 maxlen: 24
185.176.192.0/24 maxlen: 24
193.34.199.128/26 maxlen: 26
2001:7f8::/48 maxlen: 48
2001:7f8:32::/48 maxlen: 48
2001:7f8:36::/48 maxlen: 48
2001:7f8:3d::/48 maxlen: 48
2001:7f8:3f::/48 maxlen: 48
2001:7f8:44::/48 maxlen: 48
2001:7f8:73::/48 maxlen: 48
2001:7f8:9e::/48 maxlen: 48
2001:7f8:a0::/48 maxlen: 48
2001:7f8:d5::/48 maxlen: 48
2001:7f8:df::/48 maxlen: 48
2001:7f8:f5::/48 maxlen: 48
2001:7f8:106::/48 maxlen: 48
2001:7f8:10a::/48 maxlen: 48
2001:7f8:139::/48 maxlen: 48
2001:7f8:13a::/48 maxlen: 48
2001:7f8:13b::/48 maxlen: 48
2001:7f8:13c::/48 maxlen: 48
2001:7f8:13e::/48 maxlen: 48
2001:7f8:143::/48 maxlen: 48
2001:7f8:14e::/48 maxlen: 48
2a02:c50:4000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:43:77:64:64:d1:60:94:fc:6d:22:bd:be:60:e3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Oct 16 10:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42041740c3145de91e524d8ad8267e18d7209355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:17:58:cd:21:24:cf:05:02:76:df:36:7c:
1c:59:02:4c:b2:c9:83:b9:6b:51:03:b0:bf:a4:d1:
f1:84:1d:da:22:e7:d5:bd:52:e3:51:77:e9:1e:53:
97:31:4f:4f:71:0e:d1:39:de:79:f3:ca:4f:61:10:
b3:d6:a7:e2:e4:99:73:92:32:f4:c5:0c:5a:ab:29:
af:97:89:79:a6:f6:3f:44:52:1c:db:74:f5:bf:82:
29:6a:35:2a:35:77:50:1a:28:73:7f:d5:c3:9e:19:
29:74:2d:11:2b:7e:bf:09:d6:7a:5b:b7:83:a3:11:
58:96:19:9d:ea:a3:ff:d6:3b:82:a6:51:4c:c9:e6:
0a:55:a2:2f:60:6f:79:86:37:b6:36:05:66:c0:c4:
dd:e6:9b:55:06:73:bb:dd:78:26:b9:1e:09:a9:de:
69:81:08:c1:54:65:06:d4:44:eb:7c:51:41:ec:55:
f4:e1:5c:d3:f3:2a:08:87:29:69:b5:f1:7d:99:71:
41:29:30:74:b2:ad:24:ef:12:28:de:81:61:48:fb:
b8:44:f4:94:61:6b:b1:be:88:1e:e2:e9:f5:ac:fa:
59:dd:87:d9:a2:05:4f:65:ec:ba:c6:ad:36:52:ea:
f3:34:82:a7:45:a5:8d:43:5c:2d:26:d2:f2:40:bd:
50:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:17:40:C3:14:5D:E9:1E:52:4D:8A:D8:26:7E:18:D7:20:93:55
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/QgQXQMMUXekeUk2K2CZ-GNcgk1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.192.0/21
80.81.202.0/23
185.0.4.0-185.0.8.255
185.0.17.0/24
185.0.33.0/24
185.0.35.0/24
185.1.8.0/24
185.1.46.0-185.1.48.255
185.1.119.0/24
185.1.131.0/24
185.1.170.0-185.1.172.255
185.1.176.0/24
185.1.182.0/23
185.1.187.0/24
185.1.192.0/23
185.1.197.0/24
185.1.204.0/24
185.1.208.0/22
185.1.220.0/24
185.1.244.0-185.1.246.255
185.1.248.0/24
185.1.252.0/23
185.176.192.0/24
193.34.199.128/26
IPv6:
2001:7f8::/48
2001:7f8:32::/48
2001:7f8:36::/48
2001:7f8:3d::/48
2001:7f8:3f::/48
2001:7f8:44::/48
2001:7f8:73::/48
2001:7f8:9e::/48
2001:7f8:a0::/48
2001:7f8:d5::/48
2001:7f8:df::/48
2001:7f8:f5::/48
2001:7f8:106::/48
2001:7f8:10a::/48
2001:7f8:139::-2001:7f8:13c:ffff:ffff:ffff:ffff:ffff
2001:7f8:13e::/48
2001:7f8:143::/48
2001:7f8:14e::/48
2a02:c50:4000::/44
Signature Algorithm: sha256WithRSAEncryption
28:3e:f7:c3:25:2f:20:52:2d:77:68:c4:66:f7:8c:53:8f:4a:
b5:f5:c4:7b:6e:63:2c:b7:2f:18:f4:f3:97:f9:0b:eb:1f:88:
25:47:fd:d3:6c:e5:f0:8c:56:73:0e:98:cd:c9:f2:c5:88:ab:
2c:7e:cd:bc:21:98:51:1f:b2:8c:ab:e2:63:5d:72:45:84:7d:
46:c3:5e:d6:9c:0f:04:3d:9b:dd:f5:4c:65:ba:e4:c4:f2:99:
ef:2c:2d:00:78:d1:43:fd:12:3f:ab:ab:da:42:3b:76:2a:30:
94:5c:3c:f8:1c:af:00:f2:f9:e1:f4:5b:c4:1c:59:59:3d:82:
8d:5e:07:c8:62:61:a5:83:11:e6:18:39:b6:29:b8:f1:f0:a3:
f2:cb:bd:cf:ae:23:d0:0d:1c:7d:98:b2:26:ad:df:de:fc:dc:
8e:c0:47:42:21:95:d0:9f:29:2e:aa:54:ad:b5:1e:7d:71:f3:
10:d1:37:67:c0:34:8c:69:cc:eb:3a:f9:cf:1a:32:c5:92:6a:
d1:de:9a:55:41:42:d4:38:cb:c5:f7:5a:ea:07:fc:a9:1f:34:
9b:df:6c:a4:70:e0:ea:6d:0c:dc:00:cf:56:0f:19:1b:29:4d:
54:7b:b5:81:46:1d:30:63:ed:87:46:5c:18:7d:08:66:17:19:
5b:6c:9b:f8
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgISAaFEQ3dkZNFglPxtIr2+YOOuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl
YmU4ZTYwHhcNMjYxMDE2MTAzMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjA0MTc0MGMzMTQ1ZGU5MWU1MjRkOGFkODI2N2UxOGQ3MjA5MzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dQXWM0hJM8FAnbfNnwcWQJMssmD
uWtRA7C/pNHxhB3aIufVvVLjUXfpHlOXMU9PcQ7ROd5588pPYRCz1qfi5JlzkjL0
xQxaqymvl4l5pvY/RFIc23T1v4IpajUqNXdQGihzf9XDnhkpdC0RK36/CdZ6W7eD
oxFYlhmd6qP/1juCplFMyeYKVaIvYG95hje2NgVmwMTd5ptVBnO73XgmuR4Jqd5p
gQjBVGUG1ETrfFFB7FX04VzT8yoIhylptfF9mXFBKTB0sq0k7xIo3oFhSPu4RPSU
YWuxvoge4un1rPpZ3YfZogVPZey6xq02UurzNIKnRaWNQ1wtJtLyQL1QvwIDAQAB
o4IDfDCCA3gwHQYDVR0OBBYEFEIEF0DDFF3pHlJNitgmfhjXIJNVMB8GA1UdIwQY
MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt
MjY1ZjJiZDBmOGYzLzEvUWdRWFFNTVVYZWtlVWsySzJDWi1HTmNnazFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz
LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBkAYIKwYBBQUHAQcBAf8EggF/MIIBezCBuAQCAAEwgbED
BANQUcADBAFQUcowDAMEArkABAMEALkACAMEALkAEQMEALkAIQMEALkAIwMEALkB
CDAMAwQBuQEuAwQAuQEwAwQAuQF3AwQAuQGDMAwDBAG5AaoDBAC5AawDBAC5AbAD
BAG5AbYDBAC5AbsDBAG5AcADBAC5AcUDBAC5AcwDBAK5AdADBAC5AdwwDAMEArkB
9AMEALkB9gMEALkB+AMEAbkB/AMEALmwwAMFBsEix4Awgb0EAgACMIG2AwcAIAEH
+AAAAwcAIAEH+AAyAwcAIAEH+AA2AwcAIAEH+AA9AwcAIAEH+AA/AwcAIAEH+ABE
AwcAIAEH+ABzAwcAIAEH+ACeAwcAIAEH+ACgAwcAIAEH+ADVAwcAIAEH+ADfAwcA
IAEH+AD1AwcAIAEH+AEGAwcAIAEH+AEKMBIDBwAgAQf4ATkDBwAgAQf4ATwDBwAg
AQf4AT4DBwAgAQf4AUMDBwAgAQf4AU4DBwQqAgxQQAAwDQYJKoZIhvcNAQELBQAD
ggEBACg+98MlLyBSLXdoxGb3jFOPSrX1xHtuYyy3Lxj085f5C+sfiCVH/dNs5fCM
VnMOmM3J8sWIqyx+zbwhmFEfsoyr4mNdckWEfUbDXtacDwQ9m931TGW65MTyme8s
LQB40UP9Ej+rq9pCO3YqMJRcPPgcrwDy+eH0W8QcWVk9go1eB8hiYaWDEeYYObYp
uPHwo/LLvc+uI9ANHH2Ysiat39783I7AR0IhldCfKS6qVK21Hn1x8xDRN2fANIxp
zOs6+c8aMsWSatHemlVBQtQ4y8X3WuoH/KkfNJvfbKRw4OptDNwAz1YPGRspTVR7
tYFGHTBj7YdGXBh9CGYXGVtsm/g=
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:55:17 2026 by rpki-client