Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/QdTsVn5Ud_WIzrrjLlrpKx5BpqY.roa
File: QdTsVn5Ud_WIzrrjLlrpKx5BpqY.roa (raw, json)
Hash identifier: TeDMNSDTDqGDusI2CZzneM+AwlXX+Qo0gdAHUm9BzRs=
Subject key identifier: 41:D4:EC:56:7E:54:77:F5:88:CE:BA:E3:2E:5A:E9:2B:1E:41:A6:A6
Certificate issuer: /CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Certificate serial: 019B7758C08E7409EA3072279CD34177DB3E
Authority key identifier: 18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/QdTsVn5Ud_WIzrrjLlrpKx5BpqY.roa
Signing time: Thu 01 Jan 2026 02:17:43 +0000
ROA not before: Thu 01 Jan 2026 02:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15466
IP address blocks: 45.150.28.0/22 maxlen: 22
45.150.28.0/24 maxlen: 24
45.150.29.0/24 maxlen: 24
45.150.30.0/24 maxlen: 24
45.150.31.0/24 maxlen: 24
217.169.224.0/20 maxlen: 20
217.169.224.0/24 maxlen: 24
217.169.225.0/24 maxlen: 24
217.169.226.0/24 maxlen: 24
217.169.227.0/24 maxlen: 24
217.169.228.0/24 maxlen: 24
217.169.229.0/24 maxlen: 24
217.169.230.0/24 maxlen: 24
217.169.231.0/24 maxlen: 24
217.169.232.0/24 maxlen: 24
217.169.233.0/24 maxlen: 24
217.169.234.0/24 maxlen: 24
217.169.235.0/24 maxlen: 24
217.169.236.0/24 maxlen: 24
217.169.237.0/24 maxlen: 24
217.169.238.0/24 maxlen: 24
217.169.239.0/24 maxlen: 24
2a04:8f80:2000::/36 maxlen: 36
2a04:8f80:2007::/48 maxlen: 48
2a04:8f80:2011::/48 maxlen: 48
2a04:8f80:2105::/48 maxlen: 48
2a04:8f80:2107::/48 maxlen: 48
2a04:8f80:2111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:c0:8e:74:09:ea:30:72:27:9c:d3:41:77:db:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Validity
Not Before: Jan 1 02:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41d4ec567e5477f588cebae32e5ae92b1e41a6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:e6:83:16:33:66:b1:0c:53:fe:2c:48:2a:
e4:d4:a5:b1:ee:47:ce:66:22:94:d5:58:7b:55:91:
d2:bf:f6:96:db:24:c5:9b:e2:61:f3:53:bd:29:99:
4a:51:77:db:7d:93:f0:c5:2c:5a:d2:f3:b5:57:9f:
f5:f7:ea:99:cb:3e:7e:5c:48:d1:c6:24:94:11:09:
4d:01:e2:90:4e:ce:2e:69:72:71:34:08:35:f4:12:
0a:9a:3c:50:59:1e:07:7f:f3:ce:ab:ba:cc:44:27:
fc:51:e6:9e:76:62:1c:8e:7c:6b:0a:16:8e:5b:aa:
49:05:cf:c1:b5:a6:7c:2d:71:2b:4d:88:2f:1f:13:
cb:41:c6:cf:c5:e4:a9:e8:02:e2:f9:d2:d3:f1:41:
de:c1:27:72:9e:5a:df:d6:5d:e0:a0:ea:95:6b:c4:
13:6d:cd:28:8d:ec:ae:2d:3f:f4:75:24:a4:6c:6f:
69:44:1e:39:bd:9f:58:ae:f9:ac:1a:3c:a1:89:a1:
0f:ee:38:33:8a:f7:92:cf:df:a5:25:7a:d9:08:75:
1c:dc:0c:e7:bb:a1:95:91:e9:e3:73:16:97:7f:fe:
59:c8:b1:32:b0:92:13:8e:35:e8:18:fc:1d:44:37:
78:05:01:05:5c:04:8c:a6:f6:12:87:cd:20:42:9e:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D4:EC:56:7E:54:77:F5:88:CE:BA:E3:2E:5A:E9:2B:1E:41:A6:A6
X509v3 Authority Key Identifier:
keyid:18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/QdTsVn5Ud_WIzrrjLlrpKx5BpqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.28.0/22
217.169.224.0/20
IPv6:
2a04:8f80:2000::/36
Signature Algorithm: sha256WithRSAEncryption
25:bd:4f:ed:3c:91:59:5f:3c:e1:48:fc:f2:de:ff:56:c5:78:
93:d9:26:a1:b8:c9:ed:3f:bb:26:b1:88:bd:49:65:a6:9e:3e:
55:b8:60:bf:3c:82:6b:4b:1d:a4:90:8f:0f:3f:1b:2d:43:2e:
65:0b:a0:b4:04:e9:03:c6:cf:b8:20:ee:63:8a:bf:c9:72:69:
3f:14:65:bd:e7:e9:83:20:7d:93:55:d6:94:85:9c:ec:f1:33:
90:29:dd:ce:e3:32:07:f1:07:c7:a6:96:47:aa:08:9a:1e:24:
11:dd:37:91:1f:c4:01:f9:1c:3c:8a:f0:74:0f:16:b0:dc:b3:
83:cb:b6:a7:0c:f4:fe:b3:31:05:85:cd:75:20:7d:dd:e2:dc:
3f:99:92:87:81:e3:25:a5:81:cb:f0:d9:9b:2e:65:e6:02:eb:
00:8f:5d:37:d5:5d:f3:23:73:f0:ae:ea:5b:06:4b:da:e5:37:
12:c3:86:33:d0:6e:78:9c:fd:b8:44:a3:75:88:3b:41:15:73:
45:07:e9:5e:97:f4:3e:dc:15:30:c6:35:67:50:39:fe:dc:87:
f4:ca:3e:be:71:27:05:85:89:4a:f4:dc:7f:d1:4d:c2:e8:2f:
d9:71:9f:1a:58:e8:8c:24:d1:4c:55:13:22:21:9d:12:4b:21:
d1:02:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:58 2026 by rpki-client