Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/QoSldck7JuNQZZNum-VAZuQLAsE.roa
File: QoSldck7JuNQZZNum-VAZuQLAsE.roa (raw, json)
Hash identifier: BhLiuJKGAUIK/3IE4lS7ceagXck8UETCu/pPkUpva/Q=
Subject key identifier: 42:84:A5:75:C9:3B:26:E3:50:65:93:6E:9B:E5:40:66:E4:0B:02:C1
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019C8B6D6211E3F41BFA89B6849FE07E2107
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/QoSldck7JuNQZZNum-VAZuQLAsE.roa
Signing time: Mon 23 Feb 2026 16:55:27 +0000
ROA not before: Mon 23 Feb 2026 16:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 83.147.192.0/24 maxlen: 24
83.147.216.0/24 maxlen: 24
83.147.252.0/24 maxlen: 24
83.147.253.0/24 maxlen: 24
83.147.254.0/24 maxlen: 24
83.147.255.0/24 maxlen: 24
91.186.212.0/24 maxlen: 24
91.186.213.0/24 maxlen: 24
91.186.216.0/24 maxlen: 24
91.186.217.0/24 maxlen: 24
91.186.218.0/24 maxlen: 24
91.186.219.0/24 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:6d:62:11:e3:f4:1b:fa:89:b6:84:9f:e0:7e:21:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Feb 23 16:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4284a575c93b26e35065936e9be54066e40b02c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:be:89:df:d1:8c:29:be:e6:b8:67:59:0c:
05:54:29:79:98:61:c1:10:75:43:0e:6e:cc:d9:8b:
ab:16:ee:30:93:12:34:77:17:b8:87:a2:92:aa:43:
ae:0a:c1:04:d4:8b:6a:02:8e:61:9c:da:97:95:16:
27:9a:f6:2d:29:03:70:7b:0f:a8:ed:d9:f1:f5:a5:
d3:c4:c5:bc:ed:84:b1:90:12:dc:5a:92:72:0b:cc:
e8:fb:1b:68:76:58:f0:32:23:3e:55:64:8c:8a:25:
60:d1:02:8f:26:36:b3:ef:4d:f3:6c:4c:c2:28:0c:
68:c9:7e:a6:87:c3:f5:27:bb:15:15:48:fd:27:35:
90:ee:16:27:e7:44:47:99:ba:86:a3:33:0e:8b:81:
e9:39:ed:24:86:21:2c:e0:fc:41:45:3d:04:37:8a:
0c:57:f8:6c:92:69:0f:89:bf:9d:a9:09:b5:c4:78:
54:99:f4:08:86:c0:08:18:c7:39:6d:c7:ea:e1:3c:
93:66:ae:8c:71:13:fe:44:a2:2c:a2:89:56:1c:46:
be:50:44:14:8a:43:c4:b1:cc:97:82:59:2d:7f:ba:
68:68:9c:78:f0:7d:9c:44:05:50:48:61:68:be:cc:
64:a9:14:3a:9e:f8:36:b9:f6:7f:e1:95:5d:ed:3b:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:A5:75:C9:3B:26:E3:50:65:93:6E:9B:E5:40:66:E4:0B:02:C1
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/QoSldck7JuNQZZNum-VAZuQLAsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0/24
83.147.216.0/24
83.147.252.0/22
91.186.212.0/23
91.186.216.0/22
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:02:e3:70:eb:4b:dd:e1:44:67:34:99:d0:2c:79:f7:52:ef:
f8:8a:ee:4a:f9:54:02:ef:a2:64:b1:21:5a:76:4c:81:04:60:
e4:5e:99:51:29:d5:19:49:7b:f1:6b:35:fb:81:bd:74:3a:50:
1a:ed:8c:0d:ce:9e:47:28:c4:b4:00:a9:e0:aa:1b:65:7e:da:
14:c6:7f:3f:9f:7d:50:9b:80:0a:34:19:ab:f4:f4:10:f0:8e:
95:51:36:56:18:e7:0f:de:fb:54:8d:54:c8:b6:7a:9f:49:67:
11:87:f6:ef:9a:5c:b4:7e:50:e2:eb:f9:47:0a:cb:e8:20:80:
d4:cb:c5:d1:27:a9:8d:d4:a8:8f:0a:1b:91:cb:fd:f2:aa:cd:
cb:d2:f9:1e:f9:db:49:27:c9:17:e1:35:e4:ac:b0:8b:55:96:
3a:ae:89:f6:98:29:b8:5d:1d:31:c8:ee:c7:44:b2:84:0b:df:
53:6c:bb:44:50:fb:35:4b:96:62:ed:12:e0:75:75:05:6a:f4:
5f:a8:e5:aa:37:77:92:61:aa:3e:41:50:ff:92:2e:08:7e:a6:
1c:44:8d:c4:4b:c9:30:47:9b:93:96:4a:49:1f:56:8d:a3:10:
ec:84:ff:ff:9d:a7:98:1b:01:18:7c:78:c2:d4:8d:64:fc:e7:
48:c1:a3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:02 2026 by rpki-client