Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/qyU0MJIzv-ff-Bxj5-q7jAWykPw.roa
File: qyU0MJIzv-ff-Bxj5-q7jAWykPw.roa (raw, json)
Hash identifier: mKzVuMDbcXakj4yC/plNfj2k2aXpZSe3ypz4iPD8zzE=
Subject key identifier: AB:25:34:30:92:33:BF:E7:DF:F8:1C:63:E7:EA:BB:8C:05:B2:90:FC
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019C576612D1AABDB60E74781522FADEE4BC
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/qyU0MJIzv-ff-Bxj5-q7jAWykPw.roa
Signing time: Fri 13 Feb 2026 14:27:13 +0000
ROA not before: Fri 13 Feb 2026 14:27:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207710
IP address blocks: 185.81.174.0/24 maxlen: 24
185.81.184.0/24 maxlen: 24
185.81.187.0/24 maxlen: 24
185.89.104.0/23 maxlen: 24
185.89.108.0/22 maxlen: 24
185.95.101.0/24 maxlen: 24
185.95.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:66:12:d1:aa:bd:b6:0e:74:78:15:22:fa:de:e4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 13 14:27:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab2534309233bfe7dff81c63e7eabb8c05b290fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:50:ba:f7:8b:b0:46:94:da:36:86:24:a2:
ec:65:49:e8:a6:f5:b3:63:ae:ad:ff:5c:f5:1f:76:
98:e5:47:b3:70:a4:d0:18:94:d0:42:b4:8c:15:91:
7f:55:63:24:ce:5a:d1:e4:bb:15:f5:a4:bf:aa:29:
cd:6f:7e:12:3c:5d:b2:6b:30:b4:a7:7b:a8:a9:de:
48:f3:1a:15:3f:cd:2a:39:49:3f:da:aa:bc:ed:d4:
86:3f:fb:c6:60:09:78:08:35:36:9d:92:3c:60:7c:
04:ce:09:b6:14:09:a2:2d:eb:44:17:46:15:ba:ce:
c2:9e:2a:89:07:c4:cf:37:ea:f4:fb:5b:10:98:db:
ca:77:99:9a:ba:1f:7b:fe:5c:00:1e:8d:2a:1a:69:
cd:5f:61:4e:19:30:6d:83:58:b2:79:d5:f1:a4:f7:
7b:46:25:99:0b:6d:00:fb:60:88:b6:e1:b8:6c:71:
8a:d4:5f:c0:1a:ab:67:da:f1:3b:18:23:7f:e6:e4:
6a:65:73:7e:c1:55:b7:ec:8c:bd:b8:78:c5:88:36:
16:87:02:37:a5:2d:56:63:31:91:61:8e:6e:ea:9b:
53:8c:33:c5:19:42:81:8f:c1:16:a0:b8:7a:64:07:
aa:a4:09:50:99:36:8b:cd:72:bb:42:37:0d:35:d3:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:34:30:92:33:BF:E7:DF:F8:1C:63:E7:EA:BB:8C:05:B2:90:FC
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/qyU0MJIzv-ff-Bxj5-q7jAWykPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.174.0/24
185.81.184.0/24
185.81.187.0/24
185.89.104.0/23
185.89.108.0/22
185.95.101.0-185.95.103.255
Signature Algorithm: sha256WithRSAEncryption
98:03:5b:36:87:19:fb:10:00:1d:09:27:71:3c:62:10:e1:f8:
fa:69:87:df:8f:08:f1:f7:5c:dc:40:f0:6d:22:85:e1:66:a2:
38:25:df:95:0e:b1:6b:35:1d:9c:a6:fc:85:be:d6:28:67:ba:
5a:da:0c:4e:55:27:bf:ec:7e:ee:f3:26:b2:f7:05:82:ff:2b:
6f:54:2f:81:c9:32:b2:53:ee:4e:19:f8:e3:e7:23:0f:4a:1a:
48:49:8a:43:0a:2b:75:93:cc:3a:bc:0a:c6:7b:4a:ef:a7:4a:
cf:68:d4:e8:63:b3:a0:d7:ee:b1:29:be:9e:21:ef:a7:d1:c7:
e9:68:d6:72:96:c8:4e:13:85:f5:ed:63:6f:3e:53:6d:bf:ad:
c9:ea:5a:98:cc:57:d9:e1:f5:8b:9b:8c:68:be:c5:2a:59:66:
b4:74:a4:6e:f8:45:04:f8:9b:81:19:24:a1:04:51:53:4b:f5:
09:83:06:14:60:36:22:24:e1:fc:20:39:9c:da:eb:f7:d4:58:
4f:ef:f8:78:7d:1b:03:3f:2f:84:a4:7f:91:d8:44:63:08:9c:
9e:21:2f:b0:5f:3f:8c:36:89:c5:ce:8a:3d:94:42:18:18:26:
11:3e:97:7e:2f:b3:45:7c:29:e6:7e:67:cd:d2:27:6b:22:cd:
5a:af:84:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:25 2026 by rpki-client