Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qJwVINuJoYcGiM-pnH_QvWzm7f4.roa
File: qJwVINuJoYcGiM-pnH_QvWzm7f4.roa (raw, json)
Hash identifier: jFsHTZLUseSW06KMDrxXGbd8NHDDwGYy6PoufZ8TfDg=
Subject key identifier: A8:9C:15:20:DB:89:A1:87:06:88:CF:A9:9C:7F:D0:BD:6C:E6:ED:FE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EABDB89BC0BB558CBC12E62D9638CFC35
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qJwVINuJoYcGiM-pnH_QvWzm7f4.roa
Signing time: Tue 09 Jun 2026 10:09:12 +0000
ROA not before: Tue 09 Jun 2026 10:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 82.108.10.0/23 maxlen: 23
82.108.48.0/23 maxlen: 23
82.108.62.0/23 maxlen: 23
82.108.64.0/22 maxlen: 22
82.108.96.0/23 maxlen: 23
82.108.136.0/23 maxlen: 23
82.108.192.0/23 maxlen: 23
87.82.200.0/22 maxlen: 22
87.82.204.0/23 maxlen: 23
87.82.208.0/23 maxlen: 23
87.82.211.0/24 maxlen: 24
87.83.37.0/24 maxlen: 24
87.83.38.0/24 maxlen: 24
87.83.40.0/24 maxlen: 24
87.83.42.0/23 maxlen: 23
87.83.76.0/22 maxlen: 22
87.84.50.0/23 maxlen: 23
87.84.72.0/24 maxlen: 24
87.84.74.0/23 maxlen: 23
87.84.136.0/24 maxlen: 24
87.84.138.0/24 maxlen: 24
87.84.148.0/23 maxlen: 23
87.84.181.0/24 maxlen: 24
87.84.184.0/23 maxlen: 23
87.85.254.0/24 maxlen: 24
87.86.6.0/23 maxlen: 23
87.86.15.0/24 maxlen: 24
87.86.26.0/24 maxlen: 24
87.86.94.0/24 maxlen: 24
195.40.3.0/24 maxlen: 24
195.40.14.0/23 maxlen: 23
195.40.64.0/23 maxlen: 23
195.40.66.0/23 maxlen: 23
195.40.68.0/23 maxlen: 23
195.40.79.0/24 maxlen: 24
195.40.81.0/24 maxlen: 24
195.40.84.0/24 maxlen: 24
195.40.90.0/24 maxlen: 24
195.40.93.0/24 maxlen: 24
195.40.98.0/23 maxlen: 23
195.40.102.0/23 maxlen: 23
195.40.124.0/23 maxlen: 23
195.40.126.0/23 maxlen: 23
195.40.164.0/23 maxlen: 23
195.40.168.0/23 maxlen: 23
195.40.170.0/23 maxlen: 23
195.40.172.0/23 maxlen: 23
195.40.174.0/23 maxlen: 23
195.40.190.0/23 maxlen: 23
195.172.126.0/23 maxlen: 23
195.172.132.0/23 maxlen: 23
195.172.146.0/23 maxlen: 23
195.172.148.0/23 maxlen: 23
195.172.208.0/23 maxlen: 23
212.134.206.0/24 maxlen: 24
212.135.14.0/23 maxlen: 23
212.135.176.0/23 maxlen: 24
212.135.182.0/23 maxlen: 23
212.135.184.0/23 maxlen: 23
212.135.186.0/23 maxlen: 23
212.135.188.0/24 maxlen: 24
212.135.216.0/23 maxlen: 23
212.135.224.0/23 maxlen: 23
212.135.226.0/23 maxlen: 23
212.135.229.0/24 maxlen: 24
212.135.230.0/23 maxlen: 23
212.135.232.0/23 maxlen: 23
212.135.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:db:89:bc:0b:b5:58:cb:c1:2e:62:d9:63:8c:fc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 9 10:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a89c1520db89a1870688cfa99c7fd0bd6ce6edfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:3d:7b:60:18:a9:db:94:62:2a:c8:d5:a9:
b5:19:a7:f9:14:de:e8:56:1c:b2:40:4a:59:9b:da:
93:9f:f3:41:17:b3:56:1d:c9:26:4d:9b:83:8a:5a:
50:49:e5:20:6b:a1:29:0d:95:03:b0:7b:58:e1:7e:
6a:76:8f:39:b7:fa:31:09:aa:50:18:4b:5a:81:85:
c0:da:37:fc:46:eb:71:ff:51:6b:e9:95:db:09:bf:
88:8c:c9:d4:5a:da:f8:8c:ed:b5:c6:3c:33:e8:79:
35:65:93:25:4b:91:88:8e:32:12:1b:09:ac:17:14:
8a:df:27:a0:4d:3b:da:21:2d:81:1c:19:a5:82:a7:
93:e0:95:1a:66:ea:90:34:01:e5:fc:fe:c4:39:67:
63:ef:0d:8e:4d:fb:42:9b:13:38:d5:23:32:87:8f:
9b:23:4e:0f:36:a6:b7:da:7e:3f:92:5f:fb:c6:3d:
b6:bc:f9:f0:41:3c:c8:68:ec:09:95:1e:b0:c8:7f:
10:1a:95:0f:4d:05:a0:fd:19:bc:66:0b:06:dc:75:
71:0c:d3:ee:fc:92:c2:19:e5:14:05:b2:8c:6d:23:
46:76:e1:5f:b0:37:66:60:3f:08:67:25:6c:eb:c4:
57:a2:54:4f:2e:d3:d7:6e:28:ef:ff:3e:33:df:71:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:15:20:DB:89:A1:87:06:88:CF:A9:9C:7F:D0:BD:6C:E6:ED:FE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qJwVINuJoYcGiM-pnH_QvWzm7f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.10.0/23
82.108.48.0/23
82.108.62.0-82.108.67.255
82.108.96.0/23
82.108.136.0/23
82.108.192.0/23
87.82.200.0-87.82.205.255
87.82.208.0/23
87.82.211.0/24
87.83.37.0-87.83.38.255
87.83.40.0/24
87.83.42.0/23
87.83.76.0/22
87.84.50.0/23
87.84.72.0/24
87.84.74.0/23
87.84.136.0/24
87.84.138.0/24
87.84.148.0/23
87.84.181.0/24
87.84.184.0/23
87.85.254.0/24
87.86.6.0/23
87.86.15.0/24
87.86.26.0/24
87.86.94.0/24
195.40.3.0/24
195.40.14.0/23
195.40.64.0-195.40.69.255
195.40.79.0/24
195.40.81.0/24
195.40.84.0/24
195.40.90.0/24
195.40.93.0/24
195.40.98.0/23
195.40.102.0/23
195.40.124.0/22
195.40.164.0/23
195.40.168.0/21
195.40.190.0/23
195.172.126.0/23
195.172.132.0/23
195.172.146.0-195.172.149.255
195.172.208.0/23
212.134.206.0/24
212.135.14.0/23
212.135.176.0/23
212.135.182.0-212.135.188.255
212.135.216.0/23
212.135.224.0/22
212.135.229.0-212.135.233.255
212.135.238.0/23
Signature Algorithm: sha256WithRSAEncryption
38:20:a4:20:0a:5d:c2:83:41:68:21:09:ac:c3:b2:74:95:a6:
fc:30:5f:90:89:11:7a:c0:71:c3:36:de:9c:b9:ff:07:8e:29:
c1:73:cb:cd:03:5c:3a:95:5e:c2:fe:85:58:c3:76:43:09:12:
b8:c1:a9:17:da:0e:47:45:fe:95:51:bd:68:06:0b:06:48:95:
5a:0a:cc:5d:fa:57:c2:71:17:35:79:00:84:94:c3:20:90:ab:
00:d7:58:c6:db:f2:17:cc:e8:36:9e:00:ab:4f:9a:01:ca:4c:
b8:86:5c:7c:b2:a1:85:b3:40:b2:05:99:24:fb:24:24:27:43:
45:ca:2e:0c:3f:c2:e1:03:f9:4f:d8:57:9d:7d:ad:40:a3:b3:
bd:2e:47:0b:8d:ba:64:1c:df:dc:44:4b:0e:01:8b:81:c0:46:
7a:8b:ec:79:f0:8d:e4:9d:3c:3d:16:d1:0f:17:2a:e9:5c:cd:
86:49:3a:d7:eb:7f:c8:a9:d7:c2:18:62:8d:48:fb:4b:10:9b:
47:97:ea:3b:a7:c5:db:af:6b:71:d7:37:ee:1b:84:c5:e4:55:
cd:0d:7c:fa:30:2b:49:7f:41:d9:f7:3e:7b:b2:1a:a3:7e:43:
58:ca:6d:06:ef:c5:18:a3:ec:98:8b:34:60:30:00:f5:40:ec:
09:ee:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:02 2026 by rpki-client