Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/QuTPUlEcIwWgZQe38qhPrXI1i-8.roa
File: QuTPUlEcIwWgZQe38qhPrXI1i-8.roa (raw, json)
Hash identifier: QAWnvJn2ubxaiN5uvbxAkWgxGzTqcxDpmzVHUMbV8hA=
Subject key identifier: 42:E4:CF:52:51:1C:23:05:A0:65:07:B7:F2:A8:4F:AD:72:35:8B:EF
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 01A0A969062F123DC14FB7BE6C154D5CF1A9
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/QuTPUlEcIwWgZQe38qhPrXI1i-8.roa
Signing time: Wed 16 Sep 2026 08:50:27 +0000
ROA not before: Wed 16 Sep 2026 08:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21107
IP address blocks: 62.101.144.0/21 maxlen: 21
81.93.92.0/24 maxlen: 24
89.111.225.0/24 maxlen: 24
89.111.240.0/24 maxlen: 24
94.250.37.0/24 maxlen: 24
94.250.38.0/23 maxlen: 23
94.250.38.0/24 maxlen: 24
94.250.40.0/22 maxlen: 22
94.250.44.0/22 maxlen: 22
94.250.48.0/21 maxlen: 24
94.250.56.0/22 maxlen: 24
94.250.64.0/20 maxlen: 20
94.250.64.0/24 maxlen: 24
94.250.65.0/24 maxlen: 24
94.250.66.0/24 maxlen: 24
94.250.67.0/24 maxlen: 24
94.250.68.0/22 maxlen: 22
94.250.68.0/24 maxlen: 24
94.250.69.0/24 maxlen: 24
94.250.70.0/24 maxlen: 24
94.250.71.0/24 maxlen: 24
94.250.72.0/21 maxlen: 21
94.250.80.0/22 maxlen: 22
94.250.80.0/23 maxlen: 23
94.250.82.0/23 maxlen: 23
94.250.88.0/21 maxlen: 24
94.250.96.0/20 maxlen: 20
94.250.96.0/24 maxlen: 24
94.250.97.0/24 maxlen: 24
94.250.98.0/24 maxlen: 24
94.250.99.0/24 maxlen: 24
94.250.100.0/24 maxlen: 24
94.250.101.0/24 maxlen: 24
94.250.102.0/24 maxlen: 24
94.250.103.0/24 maxlen: 24
94.250.104.0/24 maxlen: 24
94.250.105.0/24 maxlen: 24
94.250.106.0/24 maxlen: 24
94.250.107.0/24 maxlen: 24
94.250.112.0/24 maxlen: 24
94.250.113.0/24 maxlen: 24
94.250.114.0/24 maxlen: 24
94.250.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:69:06:2f:12:3d:c1:4f:b7:be:6c:15:4d:5c:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Sep 16 08:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42e4cf52511c2305a06507b7f2a84fad72358bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:1a:d2:96:0c:5d:9f:33:bc:92:c9:22:9a:
68:d8:ff:d7:18:64:9e:e8:97:cd:20:d5:5c:1e:92:
91:0d:b6:8a:66:e1:47:8c:c3:36:a6:94:38:0d:66:
ee:8c:39:ec:d5:6e:e2:38:5b:90:15:85:1a:af:0e:
4b:9a:c7:a6:5a:46:1c:5f:c7:f8:57:78:66:ff:02:
3a:58:c0:07:d3:79:4d:47:59:a2:89:d1:63:8c:6b:
59:77:b0:67:90:92:70:31:9d:1a:60:e1:1d:16:7b:
1c:0e:71:b6:f3:bb:f3:b6:7b:fb:fc:0d:0e:1a:16:
9b:d7:92:e6:c8:07:92:f9:ce:90:ce:9a:1a:0d:e7:
c7:2b:26:ca:18:0a:e6:4b:20:83:90:b4:4b:47:ca:
e5:e6:14:cc:fb:c7:aa:f3:f8:7e:9b:fd:1d:ff:53:
e3:d0:31:31:72:66:8d:60:b0:54:59:59:41:dc:86:
73:07:45:31:61:d6:5a:e1:67:f3:b1:0b:da:b0:cb:
7c:05:7e:6a:aa:8a:15:15:dc:4a:ce:9f:04:20:f1:
ff:55:87:b4:23:54:97:ae:3a:18:e2:89:fb:18:ca:
bf:41:58:bb:71:65:7b:8b:16:fc:29:ed:fc:0e:e7:
cf:8a:42:75:55:dc:10:14:3c:19:7e:44:06:de:14:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E4:CF:52:51:1C:23:05:A0:65:07:B7:F2:A8:4F:AD:72:35:8B:EF
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/QuTPUlEcIwWgZQe38qhPrXI1i-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.144.0/21
81.93.92.0/24
89.111.225.0/24
89.111.240.0/24
94.250.37.0-94.250.59.255
94.250.64.0-94.250.83.255
94.250.88.0-94.250.115.255
Signature Algorithm: sha256WithRSAEncryption
c5:83:70:7d:e8:0d:db:88:6f:26:a4:d5:c2:db:eb:95:43:9c:
06:d6:52:89:e3:fd:9c:12:46:ed:2a:2d:54:82:cc:a5:7a:cb:
af:16:20:e8:40:a6:3b:d0:c2:1e:29:79:5a:10:18:06:44:ea:
ef:37:2b:43:9b:74:51:33:07:24:c7:bf:db:56:44:93:72:71:
c5:fe:ad:ae:c7:cc:0b:89:5e:bb:ca:58:f4:03:6f:32:62:c3:
8d:16:6a:17:58:3d:6d:98:c3:de:d3:40:76:a9:89:3a:bf:14:
bd:74:41:6d:c2:7d:a7:b0:37:1f:c8:7d:09:f7:1d:3a:e7:eb:
6e:80:b0:b1:3d:34:bf:a4:fe:75:23:46:85:20:af:3f:11:a2:
6b:9a:75:2a:6b:0d:80:75:7c:77:88:2d:18:4d:42:b3:eb:d5:
52:c3:4d:4b:82:f5:30:61:e5:31:70:5e:86:5d:f1:5f:90:5b:
3c:b8:27:85:e3:68:fc:b6:82:bc:22:31:1a:dc:49:b2:70:c8:
5f:9d:87:06:68:00:03:ac:87:2b:eb:ad:30:3e:c4:a0:33:e1:
d0:fa:71:78:dd:d3:43:0c:48:46:b6:74:82:75:70:04:58:4a:
64:20:33:72:9e:fc:a9:1a:6c:16:aa:b7:30:f4:0f:0d:79:22:
af:03:a9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:59:14 2026 by rpki-client