Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/qIrPTvkJoKHOpyB7wnhzahJKcVM.roa
File: qIrPTvkJoKHOpyB7wnhzahJKcVM.roa (raw, json)
Hash identifier: P67wuJBItbnZh+zC9ZR4+mPtRz9kxlpY/Ao75oEVWZ4=
Subject key identifier: A8:8A:CF:4E:F9:09:A0:A1:CE:A7:20:7B:C2:78:73:6A:12:4A:71:53
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 019D8B9894002D563DDF74484CECFE88A8B6
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/qIrPTvkJoKHOpyB7wnhzahJKcVM.roa
Signing time: Tue 14 Apr 2026 10:45:25 +0000
ROA not before: Tue 14 Apr 2026 10:45:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47377
IP address blocks: 62.88.0.0/17 maxlen: 21
62.88.0.0/19 maxlen: 19
62.88.32.0/19 maxlen: 19
62.88.80.0/21 maxlen: 21
85.10.64.0/18 maxlen: 24
91.86.0.0/15 maxlen: 20
91.86.0.0/16 maxlen: 16
91.87.0.0/19 maxlen: 19
91.87.32.0/19 maxlen: 19
91.87.64.0/19 maxlen: 19
91.87.96.0/19 maxlen: 19
91.87.128.0/19 maxlen: 19
91.87.160.0/19 maxlen: 19
94.104.0.0/13 maxlen: 23
94.104.0.0/24 maxlen: 24
94.104.16.0/23 maxlen: 23
94.104.17.0/24 maxlen: 24
94.104.24.0/21 maxlen: 21
94.104.32.0/19 maxlen: 19
94.104.64.0/19 maxlen: 19
94.104.96.0/19 maxlen: 19
94.104.128.0/21 maxlen: 21
94.104.144.0/20 maxlen: 20
94.104.160.0/19 maxlen: 19
94.104.192.0/19 maxlen: 19
94.104.240.0/21 maxlen: 21
94.104.248.0/22 maxlen: 22
94.104.252.0/22 maxlen: 22
94.105.48.0/20 maxlen: 20
94.105.64.0/19 maxlen: 19
94.106.128.0/17 maxlen: 17
94.107.0.0/17 maxlen: 17
94.107.128.0/18 maxlen: 18
94.107.192.0/18 maxlen: 18
94.107.246.0/24 maxlen: 24
94.110.0.0/19 maxlen: 19
94.110.32.0/19 maxlen: 19
94.110.64.0/19 maxlen: 19
94.110.96.0/19 maxlen: 19
94.110.128.0/19 maxlen: 19
94.110.160.0/19 maxlen: 19
94.110.192.0/19 maxlen: 19
94.110.224.0/19 maxlen: 19
94.111.0.0/19 maxlen: 19
94.111.32.0/19 maxlen: 19
94.111.64.0/19 maxlen: 19
94.111.96.0/19 maxlen: 19
94.111.128.0/19 maxlen: 19
94.111.160.0/19 maxlen: 19
94.111.192.0/19 maxlen: 19
94.111.224.0/19 maxlen: 19
178.50.0.0/15 maxlen: 19
178.51.0.0/16 maxlen: 16
178.51.0.0/17 maxlen: 17
178.51.128.0/17 maxlen: 17
185.65.72.0/22 maxlen: 24
212.53.0.0/20 maxlen: 24
212.65.32.0/19 maxlen: 19
212.87.96.0/19 maxlen: 24
212.224.128.0/17 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:98:94:00:2d:56:3d:df:74:48:4c:ec:fe:88:a8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Apr 14 10:45:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a88acf4ef909a0a1cea7207bc278736a124a7153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:da:44:cb:7a:55:16:ef:c3:32:c8:34:ae:
91:6c:ff:f4:2b:69:fe:53:da:b9:9f:a4:c6:7a:e1:
93:f6:c4:ae:a1:c1:b4:3f:77:25:c2:a1:14:f3:f1:
4d:70:d0:f0:07:0d:ba:68:b9:2d:c2:1d:9a:42:43:
a6:74:15:1a:9a:6d:af:73:e5:73:40:03:a5:55:75:
df:82:5d:9f:a7:4e:1b:e0:73:0b:aa:64:19:2b:a4:
b9:f0:70:39:08:aa:5a:89:f2:c4:2e:ff:f5:ca:aa:
a2:6e:13:20:2e:b2:d1:25:4a:2f:1d:c8:7f:82:d7:
72:7d:90:d1:52:e0:fe:c3:b4:ae:6a:45:f5:54:29:
50:c8:e8:b0:62:6e:e2:af:af:ff:34:51:c4:84:6f:
d5:f1:ac:8a:0f:7f:4f:dd:6c:e8:ad:95:a0:b7:90:
f6:df:4b:ed:ce:82:95:bf:6e:8a:30:25:78:1e:f8:
06:17:a5:1b:c7:54:06:5b:26:a2:be:a8:3f:30:72:
1e:b1:75:e2:16:f0:15:b5:62:65:e6:51:a7:75:82:
57:62:c5:bf:3f:d4:fa:41:9c:b2:9b:ab:db:3d:bf:
cb:13:ab:0e:66:9e:41:15:22:0f:c5:62:b3:b3:b0:
50:91:f4:ba:46:23:61:e3:c8:8c:25:81:9d:76:e0:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8A:CF:4E:F9:09:A0:A1:CE:A7:20:7B:C2:78:73:6A:12:4A:71:53
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/qIrPTvkJoKHOpyB7wnhzahJKcVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.88.0.0/17
85.10.64.0/18
91.86.0.0/15
94.104.0.0/13
178.50.0.0/15
185.65.72.0/22
212.53.0.0/20
212.65.32.0/19
212.87.96.0/19
212.224.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8a:f4:62:6a:8b:22:8d:2e:a5:39:46:d0:cb:58:09:dc:a2:bd:
56:3e:16:4e:d4:97:ea:00:b6:f3:84:fb:60:93:bf:63:9f:d3:
c0:1d:1b:b3:18:e8:d4:a8:40:92:94:a2:41:d3:d2:8e:99:d9:
f6:ac:79:59:68:04:64:ee:5f:c0:08:49:75:77:e6:53:85:5a:
8d:6f:0e:59:d8:98:39:39:a4:b2:f0:3e:b1:5b:2f:3b:29:4a:
7d:59:43:b6:0d:b8:bd:33:41:e7:98:3f:21:ff:f8:b2:4e:4d:
64:f3:f0:f3:8b:d8:98:fe:65:e2:aa:0b:e2:b0:dd:85:c8:13:
24:6a:f2:75:da:27:41:33:c4:63:f3:c3:3f:52:bb:06:15:a7:
82:a1:74:ef:a3:79:8a:3c:76:51:69:3b:25:7c:f0:7f:0a:d0:
6d:a2:2b:eb:f2:97:5f:6e:af:26:86:f4:81:51:63:02:4f:5e:
9a:da:79:c9:20:f5:8e:d9:9c:73:5c:52:ee:2a:cd:82:17:06:
15:2c:36:c6:41:b1:c2:8c:f6:df:32:0c:e5:67:fb:26:de:45:
9d:a4:4a:bd:f8:b4:c6:8f:e7:c2:cf:0b:23:44:d8:4e:27:75:
dc:5d:c7:4a:67:ca:de:99:2b:e0:ea:8f:90:5f:23:02:98:c7:
13:37:06:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:49 2026 by rpki-client