Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qNO7sCH6LmWc6a9g6hPsY3KohOs.roa
File: qNO7sCH6LmWc6a9g6hPsY3KohOs.roa (raw, json)
Hash identifier: xcVG0SX89O4Vigx29bm0UM/Dg1147nwhLTWuig9Rohw=
Subject key identifier: A8:D3:BB:B0:21:FA:2E:65:9C:E9:AF:60:EA:13:EC:63:72:A8:84:EB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019A26CA9A5D5A99ED47FDD07340DFFC02C4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qNO7sCH6LmWc6a9g6hPsY3KohOs.roa
Signing time: Mon 27 Oct 2025 17:50:03 +0000
ROA not before: Mon 27 Oct 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213122
IP address blocks: 5.226.52.0/22 maxlen: 24
43.225.88.0/23 maxlen: 24
45.139.6.0/23 maxlen: 24
46.249.97.0/24 maxlen: 24
155.254.96.0/22 maxlen: 24
178.173.232.0/22 maxlen: 24
178.173.236.0/22 maxlen: 24
178.173.242.0/23 maxlen: 24
178.173.244.0/22 maxlen: 24
185.215.246.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
188.253.28.0/22 maxlen: 24
188.253.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:ca:9a:5d:5a:99:ed:47:fd:d0:73:40:df:fc:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 27 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8d3bbb021fa2e659ce9af60ea13ec6372a884eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:72:6b:80:66:60:ac:cc:1d:47:ca:82:22:
30:36:6d:f7:cb:81:ba:4a:41:18:1e:17:95:ec:b2:
0c:15:fa:25:52:7d:89:ff:61:75:8a:0a:04:b5:50:
b8:48:6b:f2:35:66:6a:0b:69:e5:c9:4e:1e:82:d1:
90:e9:47:71:69:5e:cd:4c:f8:50:a9:1b:ec:6f:1b:
66:ee:8c:13:4a:1f:18:8b:c6:7e:f4:0c:b5:85:a7:
48:4f:d3:f8:73:72:1f:be:21:53:71:5a:54:0e:65:
e4:3f:74:3c:4d:66:9b:28:67:ed:9e:8a:b3:16:51:
2e:22:e9:55:78:30:5c:6f:0a:35:3a:fc:61:40:fc:
3f:63:c3:54:eb:4d:57:b5:30:05:be:a7:01:5d:ed:
fd:94:2d:94:6e:d6:7d:0f:2a:20:69:8a:aa:87:33:
dd:ff:5d:80:65:2a:c4:ca:cd:4e:ab:c4:32:4c:e5:
b8:1c:b6:f5:68:bb:98:ad:60:c7:3e:b6:e8:80:be:
29:a6:3d:a4:ba:45:0d:1e:64:37:3c:75:9d:00:2d:
93:1a:3d:ba:39:47:90:28:22:9a:28:9c:fa:c0:4f:
b2:0f:7d:11:9c:7f:15:0b:c8:cc:d5:a8:d7:1d:05:
80:80:92:68:44:0a:69:c1:ee:7a:8a:78:eb:7b:59:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:BB:B0:21:FA:2E:65:9C:E9:AF:60:EA:13:EC:63:72:A8:84:EB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qNO7sCH6LmWc6a9g6hPsY3KohOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.52.0/22
43.225.88.0/23
45.139.6.0/23
46.249.97.0/24
155.254.96.0/22
178.173.232.0/21
178.173.242.0-178.173.247.255
185.215.246.0/24
188.209.156.0/22
188.253.28.0/22
188.253.104.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:77:35:16:ae:d6:fc:28:54:ba:e9:df:4c:02:12:0b:ee:d4:
e0:d7:8b:7c:e4:bf:9e:05:03:53:a3:85:c1:10:16:ab:a8:9b:
dd:6a:70:6a:31:6b:54:b0:8e:ee:b8:db:49:e9:c9:7d:51:df:
28:07:41:fb:06:98:1c:fe:df:7e:60:01:72:ce:fa:e7:cf:cf:
a3:70:13:14:c9:9e:f8:89:07:13:e1:8e:1c:e8:dd:13:7f:81:
e4:cf:44:ed:d7:bf:49:ad:95:a9:cd:b6:4a:e0:7c:bf:97:1f:
25:8e:2c:15:cc:d2:c2:7d:dc:0a:28:ab:54:d6:c8:50:a5:7b:
69:fb:1f:85:77:d1:0e:5f:0e:cf:d8:8f:25:47:79:f4:a0:0d:
08:f6:d2:5f:e2:97:83:4f:8f:f5:05:9d:c4:75:b7:a8:dc:17:
50:f9:41:51:59:e6:eb:06:f3:ce:1b:1f:42:af:35:3e:a4:79:
cd:79:9c:22:44:1a:87:98:67:e2:01:ec:c3:96:ee:c3:d2:8c:
ed:24:9c:5d:d4:4e:0d:4a:94:7b:6c:e1:bd:64:3b:dc:f6:aa:
e8:c0:74:de:14:ce:4a:b4:57:02:08:14:a8:c8:e2:1a:ff:76:
71:9a:a3:46:79:28:ca:53:99:6a:96:69:01:46:0f:79:58:31:
b4:18:63:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:57 2025 by rpki-client