Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qznpLKfCnKDvLX8s9L9D6BYHuY4.roa
File: qznpLKfCnKDvLX8s9L9D6BYHuY4.roa (raw, json)
Hash identifier: Ktbjs5D2hJgEQRvzuWFG3YLZcedNXr4LMquWoINaqAY=
Subject key identifier: AB:39:E9:2C:A7:C2:9C:A0:EF:2D:7F:2C:F4:BF:43:E8:16:07:B9:8E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019D7093B13E66A0A693AC06CF976BA86114
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qznpLKfCnKDvLX8s9L9D6BYHuY4.roa
Signing time: Thu 09 Apr 2026 04:50:20 +0000
ROA not before: Thu 09 Apr 2026 04:50:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.37.119.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.2.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
93.114.74.0/24 maxlen: 24
93.114.75.0/24 maxlen: 24
93.114.76.0/24 maxlen: 24
93.114.77.0/24 maxlen: 24
93.114.78.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:93:b1:3e:66:a0:a6:93:ac:06:cf:97:6b:a8:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 9 04:50:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab39e92ca7c29ca0ef2d7f2cf4bf43e81607b98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e0:01:a0:67:9d:c2:df:89:bb:43:01:6a:80:
36:21:f5:61:ae:6a:17:c7:34:4a:c7:95:61:c5:76:
85:c1:96:4e:f2:0f:f8:6f:18:f2:e3:d1:bb:df:69:
81:83:55:89:34:db:03:d0:4a:9c:88:82:08:f1:0f:
a4:62:e9:ee:50:21:3a:3f:88:32:0d:7e:08:f6:16:
fb:93:e1:14:7d:bf:b8:73:3e:6f:fd:0b:08:5b:6b:
0d:c5:fd:ba:10:bd:ff:d5:05:3e:de:2f:52:e6:9a:
b4:e2:8e:4c:eb:7e:aa:c8:12:b5:11:2a:82:38:70:
9a:f6:dc:ba:63:2f:22:da:4a:dc:ef:1c:83:3f:b7:
25:7d:ac:f0:49:5a:63:0f:6f:9d:bc:d7:d5:f2:eb:
0f:ec:11:b0:39:4a:f6:e3:4d:e8:16:64:e1:3a:01:
d2:28:0a:44:7a:61:79:47:42:c8:b9:b5:49:a0:d5:
8f:d0:5d:0d:ba:92:36:f5:01:58:11:fa:be:c4:db:
22:dc:9f:d9:d8:3b:2c:43:64:41:2d:03:2b:09:8b:
63:aa:1e:95:e2:d3:3f:5c:b5:df:de:47:bc:bb:22:
e0:3d:9e:e5:60:a6:c3:29:38:bc:c4:7e:99:b8:40:
7e:97:78:83:88:30:51:86:b3:8c:f3:2b:7f:ff:3f:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:39:E9:2C:A7:C2:9C:A0:EF:2D:7F:2C:F4:BF:43:E8:16:07:B9:8E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qznpLKfCnKDvLX8s9L9D6BYHuY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.34.231.0/24
89.37.119.0/24
89.38.228.0/23
89.40.82.0/24
89.42.80.0-89.42.82.255
89.42.86.0/24
89.43.140.0/24
89.43.143.0/24
89.46.2.0/23
89.47.99.0/24
89.47.115.0/24
89.47.117.0/24
89.47.119.0/24
89.47.125.0-89.47.126.255
93.113.181.0/24
93.114.74.0-93.114.79.255
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d6:52:b4:1d:2e:c4:0a:7f:bd:0f:6f:f6:0d:7a:c5:95:fc:
34:04:80:b7:1b:4d:e2:a5:cb:4a:e0:40:ec:a3:e7:04:84:89:
09:80:36:e9:f0:49:e6:5f:7e:c3:5c:36:a2:33:09:a1:ba:5c:
0b:72:fd:b6:d4:93:1d:82:0b:db:8b:49:de:41:c7:f4:92:06:
6e:08:4c:10:31:63:81:c4:eb:ef:3a:a3:af:db:2e:90:6a:4d:
db:97:22:7c:8f:1a:32:9b:69:da:15:d3:80:22:b3:66:a6:5a:
bd:8b:34:37:4e:6a:b7:2e:78:ed:fa:84:fe:b6:fc:04:dd:28:
44:5c:22:30:68:d3:a4:33:9a:67:6b:d7:96:39:00:14:a5:f1:
12:31:ba:9b:0b:be:92:7b:2d:a0:03:3c:f8:fb:07:e9:83:55:
2c:1d:83:e8:43:8a:1d:d3:5c:39:0a:90:bf:20:ec:99:85:86:
c7:1e:06:4b:0e:75:f7:1a:f0:3e:7f:57:9f:3e:8d:62:de:d2:
04:fa:b9:4d:ed:5f:13:8a:cf:77:8d:15:94:ec:93:c9:7d:f7:
7f:c4:78:e2:f3:ed:0d:a7:be:c0:fd:60:8c:72:b4:29:e9:57:
4a:57:16:c1:ff:11:fe:4a:d5:09:b4:d8:f3:d4:75:ba:e6:91:
ca:9c:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:30 2026 by rpki-client