Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/QB6IjG25mOKNaxsVjuB38lmC2hs.roa
File: QB6IjG25mOKNaxsVjuB38lmC2hs.roa (raw, json)
Hash identifier: R3eK+TP7VbOaPSIht9zdm6FFs2zJ4wqUGZxjbXUn4oM=
Subject key identifier: 40:1E:88:8C:6D:B9:98:E2:8D:6B:1B:15:8E:E0:77:F2:59:82:DA:1B
Certificate issuer: /CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Certificate serial: 019B79112E012F0CDF6495ADE8CB4BB1F81F
Authority key identifier: 15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/QB6IjG25mOKNaxsVjuB38lmC2hs.roa
Signing time: Thu 01 Jan 2026 10:18:47 +0000
ROA not before: Thu 01 Jan 2026 10:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210086
IP address blocks: 85.117.248.0/24 maxlen: 24
85.117.249.0/24 maxlen: 24
85.117.250.0/24 maxlen: 24
85.117.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:2e:01:2f:0c:df:64:95:ad:e8:cb:4b:b1:f8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Validity
Not Before: Jan 1 10:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=401e888c6db998e28d6b1b158ee077f25982da1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ba:f9:79:1f:50:3b:9b:0b:38:bf:f6:6b:a4:
f7:06:ff:e3:f8:70:13:12:8c:7f:ff:0a:e4:49:df:
d4:18:eb:a2:9a:c9:7e:98:06:66:a2:8d:20:33:5a:
19:e7:cb:0e:b2:bc:0e:3d:43:bd:5c:39:9b:4d:a8:
4b:42:e9:8c:83:71:b0:aa:f3:5a:18:4c:c6:c9:8f:
98:38:d2:d8:b2:e9:f0:64:93:17:08:68:28:cf:61:
b6:c6:60:69:ae:cc:23:35:eb:90:bf:a0:b7:7d:8d:
fe:4d:1d:6c:09:55:6b:20:1b:80:ce:8a:b3:ce:24:
ac:94:1b:47:8c:1e:ab:5b:85:c5:a4:76:26:49:05:
a9:47:5b:50:44:d6:87:13:94:39:60:86:db:6d:b4:
bb:ca:b9:95:1c:73:7f:21:82:e8:7f:46:99:1f:b4:
ab:48:60:29:b8:aa:6a:40:0c:b8:30:74:83:65:cb:
ea:be:5c:91:a3:10:fc:c3:19:2b:0f:ab:e4:3f:09:
c7:56:1b:de:ae:71:16:74:e1:e6:1f:64:c3:1f:fd:
15:94:6a:40:3a:5d:5d:f6:85:ca:ea:f3:12:1f:44:
c5:61:1a:7f:91:ce:e9:79:67:49:e7:99:40:c5:d0:
dd:d9:7b:7d:70:99:a7:d9:1d:43:5b:de:3a:f4:1e:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:88:8C:6D:B9:98:E2:8D:6B:1B:15:8E:E0:77:F2:59:82:DA:1B
X509v3 Authority Key Identifier:
keyid:15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/QB6IjG25mOKNaxsVjuB38lmC2hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.248.0/22
Signature Algorithm: sha256WithRSAEncryption
76:9c:ec:97:f5:1e:f5:79:8f:cd:77:6b:10:3c:0e:44:63:ad:
9e:cf:02:85:02:46:3f:c3:eb:9a:ca:43:6a:3a:01:79:20:7b:
6d:9c:32:a1:7c:f4:c9:1a:22:e3:df:1d:c8:ac:20:57:5f:8b:
05:ac:03:34:18:1c:21:2d:96:29:e2:6a:47:c5:72:cd:9f:df:
4a:70:32:75:0f:d8:bd:53:db:27:0f:90:4b:31:94:26:54:ba:
e9:a3:73:c7:67:ac:31:9e:f7:03:8b:d5:20:0f:58:f5:ad:17:
b0:df:49:73:2e:39:0b:9d:aa:34:87:85:6f:dd:07:b8:30:3b:
6e:ad:3a:c0:c0:5b:77:e7:61:bd:b6:b2:f7:8a:13:bc:5c:02:
ce:7c:d1:1f:27:f9:8f:21:da:26:6d:f2:14:ff:50:ec:fd:ed:
60:59:e9:95:8f:98:f3:40:da:e2:02:69:f3:05:90:4a:b9:78:
12:e0:e4:ac:b9:74:02:4d:b3:09:5f:07:10:f1:50:19:30:bb:
09:f0:84:2d:a1:a9:b3:00:1b:d0:a9:2c:fb:16:06:f9:2f:a8:
7a:98:0b:ec:19:7a:56:37:83:a8:09:c2:10:e6:12:f4:37:2d:
7a:8d:87:d0:58:62:4d:0a:14:27:78:00:ff:09:25:35:95:78:
56:c4:c5:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ES4BLwzfZJWt6MtLsfgfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjVjNDI3YjUwZWI5ZTJhYWY3YzVhY2MxYjIyODk2MzNh
YjUzNTMwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDFlODg4YzZkYjk5OGUyOGQ2YjFiMTU4ZWUwNzdmMjU5ODJkYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+br5eR9QO5sLOL/2a6T3Bv/j+HAT
Eox//wrkSd/UGOuimsl+mAZmoo0gM1oZ58sOsrwOPUO9XDmbTahLQumMg3GwqvNa
GEzGyY+YONLYsunwZJMXCGgoz2G2xmBprswjNeuQv6C3fY3+TR1sCVVrIBuAzoqz
ziSslBtHjB6rW4XFpHYmSQWpR1tQRNaHE5Q5YIbbbbS7yrmVHHN/IYLof0aZH7Sr
SGApuKpqQAy4MHSDZcvqvlyRoxD8wxkrD6vkPwnHVhvernEWdOHmH2TDH/0VlGpA
Ol1d9oXK6vMSH0TFYRp/kc7peWdJ55lAxdDd2Xt9cJmn2R1DW9469B5yGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEAeiIxtuZjijWsbFY7gd/JZgtobMB8GA1UdIwQY
MBaAFBX1xCe1DrniqvfFrMGyKJYzq1NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mMmQ1ZTEtYzk5Ny00NmM0LThlNjAt
YTVkMjM0NTg2ZDkwLzEvUUI2SWpHMjVtT0tOYXhzVmp1QjM4bG1DMmhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mMmQ1ZTEtYzk5Ny00NmM0LThlNjAtYTVkMjM0NTg2ZDkw
LzEvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVXX4MA0G
CSqGSIb3DQEBCwUAA4IBAQB2nOyX9R71eY/Nd2sQPA5EY62ezwKFAkY/w+uaykNq
OgF5IHttnDKhfPTJGiLj3x3IrCBXX4sFrAM0GBwhLZYp4mpHxXLNn99KcDJ1D9i9
U9snD5BLMZQmVLrpo3PHZ6wxnvcDi9UgD1j1rRew30lzLjkLnao0h4Vv3Qe4MDtu
rTrAwFt352G9trL3ihO8XALOfNEfJ/mPIdombfIU/1Ds/e1gWemVj5jzQNriAmnz
BZBKuXgS4OSsuXQCTbMJXwcQ8VAZMLsJ8IQtoamzABvQqSz7Fgb5L6h6mAvsGXpW
N4OoCcIQ5hL0Ny16jYfQWGJNChQneAD/CSU1lXhWxMXY
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:38 2026 by rpki-client