Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/qW5f3-NQ7cmWiEG3LR0VDLphatA.roa
File: qW5f3-NQ7cmWiEG3LR0VDLphatA.roa (raw, json)
Hash identifier: wRf9lFUkF9L7c4EbX9oow3w/gPvK/nj3bBgdLqiTPYk=
Subject key identifier: A9:6E:5F:DF:E3:50:ED:C9:96:88:41:B7:2D:1D:15:0C:BA:61:6A:D0
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 019FD71744D2649EE70B508C1DAA2CE45851
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/qW5f3-NQ7cmWiEG3LR0VDLphatA.roa
Signing time: Thu 06 Aug 2026 12:40:54 +0000
ROA not before: Thu 06 Aug 2026 12:40:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41722
IP address blocks: 91.142.80.0/24 maxlen: 24
91.142.81.0/24 maxlen: 24
91.142.82.0/24 maxlen: 24
91.142.83.0/24 maxlen: 24
91.142.84.0/24 maxlen: 24
91.142.85.0/24 maxlen: 24
91.142.86.0/24 maxlen: 24
91.142.87.0/24 maxlen: 24
91.142.88.0/24 maxlen: 24
91.142.89.0/24 maxlen: 24
91.142.90.0/24 maxlen: 24
91.142.91.0/24 maxlen: 24
91.142.92.0/24 maxlen: 24
91.142.93.0/24 maxlen: 24
91.142.94.0/24 maxlen: 24
91.142.95.0/24 maxlen: 24
178.249.68.0/24 maxlen: 24
178.249.69.0/24 maxlen: 24
178.249.70.0/24 maxlen: 24
178.249.71.0/24 maxlen: 24
178.250.152.0/24 maxlen: 24
178.250.153.0/24 maxlen: 24
178.250.154.0/24 maxlen: 24
178.250.155.0/24 maxlen: 24
185.53.20.0/24 maxlen: 24
185.53.21.0/24 maxlen: 24
185.53.22.0/24 maxlen: 24
185.53.23.0/24 maxlen: 24
185.73.212.0/24 maxlen: 24
185.73.213.0/24 maxlen: 24
185.73.214.0/24 maxlen: 24
185.73.215.0/24 maxlen: 24
185.147.80.0/24 maxlen: 24
185.147.81.0/24 maxlen: 24
185.147.82.0/24 maxlen: 24
185.147.83.0/24 maxlen: 24
185.162.92.0/24 maxlen: 24
185.162.93.0/24 maxlen: 24
185.162.94.0/24 maxlen: 24
185.162.95.0/24 maxlen: 24
185.174.164.0/24 maxlen: 24
185.174.165.0/24 maxlen: 24
185.174.166.0/24 maxlen: 24
2a03:21c0::/32 maxlen: 32
2a07:a500::/32 maxlen: 32
2a07:a501::/32 maxlen: 32
2a07:a502::/32 maxlen: 32
2a07:a503::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 12:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:17:44:d2:64:9e:e7:0b:50:8c:1d:aa:2c:e4:58:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Aug 6 12:40:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a96e5fdfe350edc9968841b72d1d150cba616ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:03:05:eb:ae:70:11:7f:d0:65:f7:90:c2:
a5:f9:a9:ec:21:68:8f:3f:f4:22:d9:64:67:32:b2:
af:cc:7a:2e:42:58:1e:90:00:f2:ec:8e:36:83:9e:
5a:2e:88:18:f7:76:8d:54:dc:0e:aa:ab:4a:6f:ee:
ac:20:00:9f:02:84:ea:ec:65:08:50:54:52:50:df:
66:a6:47:60:e7:0d:fb:fd:1d:9c:8a:63:54:33:88:
29:14:99:b6:05:a2:c5:f8:fb:f7:00:5a:dc:e7:72:
34:4e:0c:bb:8c:6d:da:c0:81:c6:73:97:47:a9:00:
22:39:db:47:55:1c:7c:27:38:14:c8:05:65:23:a5:
90:d4:96:e1:24:7c:d5:0e:19:53:41:04:2d:24:17:
93:4e:05:c1:b2:6f:2d:d4:62:f3:be:83:cf:5f:3b:
b3:87:3f:3d:d0:24:ae:11:41:07:f9:3d:53:61:e9:
8a:33:19:48:09:3f:cc:47:63:ec:92:69:ba:53:89:
3e:af:75:41:d6:b1:8e:fa:d8:b6:25:8c:5a:d4:b9:
43:5c:d7:62:02:94:7d:bf:e6:c4:02:59:96:8c:16:
23:95:c6:3b:7a:40:6d:1f:a9:28:ae:76:3a:2a:f3:
e4:b0:cf:00:c4:d0:85:41:5a:0d:e7:26:89:07:8b:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:5F:DF:E3:50:ED:C9:96:88:41:B7:2D:1D:15:0C:BA:61:6A:D0
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/qW5f3-NQ7cmWiEG3LR0VDLphatA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.80.0/20
178.249.68.0/22
178.250.152.0/22
185.53.20.0/22
185.73.212.0/22
185.147.80.0/22
185.162.92.0/22
185.174.164.0-185.174.166.255
IPv6:
2a03:21c0::/32
2a07:a500::/30
Signature Algorithm: sha256WithRSAEncryption
10:a1:1f:75:a4:67:e9:d5:9a:26:89:94:32:57:28:4e:4f:b5:
d8:87:1b:15:31:fa:5b:00:f1:66:5a:68:37:23:ac:c1:2a:13:
43:6e:99:7f:f6:e1:98:c2:ac:88:ea:f5:97:1b:12:f3:ef:ef:
07:b2:97:8e:f7:4b:ae:64:70:fb:1e:0c:3f:6f:87:32:cf:2e:
bc:68:67:96:a2:95:69:a3:7a:b5:bd:1d:1e:4d:8e:8e:c5:49:
e5:03:76:b8:ae:30:bd:f3:48:1f:9d:97:b5:54:16:24:87:33:
4a:ad:38:dc:16:25:32:ce:37:9b:98:66:e0:3b:2c:55:df:d3:
ce:fb:e8:a9:39:85:b3:8e:6e:9e:08:c0:0b:21:2e:70:b2:6b:
bf:7a:7b:71:4e:34:fb:bb:87:fa:45:18:ef:33:47:1f:3a:96:
b5:c5:7c:6b:a9:8f:b4:5a:c9:37:75:f6:20:a5:b4:6f:01:88:
d7:36:5a:df:3b:89:b6:ac:4b:e3:0b:ba:28:28:98:b4:f8:eb:
b2:69:1e:23:42:07:7f:65:a1:d6:27:c0:4b:af:12:f5:94:30:
66:51:c6:1d:aa:72:5b:f1:3c:bf:7e:4a:00:d3:ec:02:56:08:
38:99:db:c1:b2:41:6f:f8:71:16:04:de:f5:70:6a:67:78:47:
e2:40:6f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:19:38 2026 by rpki-client