Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Qzo_UPCg7aWzC6sSJl5Jv-8wtjI.roa
File: Qzo_UPCg7aWzC6sSJl5Jv-8wtjI.roa (raw, json)
Hash identifier: 3qA7xr2MenAh216vvUcjFmiIC+dZyqmwPi/fSProy9s=
Subject key identifier: 43:3A:3F:50:F0:A0:ED:A5:B3:0B:AB:12:26:5E:49:BF:EF:30:B6:32
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019D8B209021B1B6A55BB35284CF4BDECF9A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Qzo_UPCg7aWzC6sSJl5Jv-8wtjI.roa
Signing time: Tue 14 Apr 2026 08:34:20 +0000
ROA not before: Tue 14 Apr 2026 08:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 45.134.26.0/24 maxlen: 24
80.64.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:20:90:21:b1:b6:a5:5b:b3:52:84:cf:4b:de:cf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 14 08:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=433a3f50f0a0eda5b30bab12265e49bfef30b632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:40:be:f2:0a:02:17:9d:38:83:7e:69:9b:
a1:4a:34:1c:89:0d:bf:af:a3:d3:f1:e3:1a:59:fc:
b6:66:30:ee:3f:3e:84:45:18:08:44:3a:12:2e:33:
c3:07:68:4c:71:85:0c:e6:3b:27:a2:17:18:1e:88:
ba:9c:d0:f7:a7:34:36:16:94:dc:c2:0c:73:22:30:
ad:39:11:3d:ce:77:70:a2:56:86:db:81:a5:58:25:
85:1f:10:87:bb:55:bd:bc:f4:e3:5a:09:72:76:be:
84:13:fd:43:d6:39:e7:85:d3:77:4a:58:08:55:62:
e9:29:1a:12:94:7e:b1:6c:18:c4:40:61:4d:11:73:
ac:b5:4b:2d:26:2f:02:1c:18:11:34:50:7a:4c:5a:
f3:e1:98:07:a8:a9:21:39:99:81:00:07:fa:9b:8e:
06:57:4b:37:c7:77:0a:45:22:ce:5b:fa:6c:48:3a:
9c:1f:a9:87:dc:4f:7f:ab:46:b1:9f:2b:bb:21:13:
76:d0:02:31:74:30:87:bb:89:41:fc:d6:45:b2:03:
42:ce:16:9b:2d:55:5c:1e:8b:23:4a:67:85:43:e5:
1e:6b:43:d8:e1:8d:ea:6d:31:9d:f8:d3:4d:98:ad:
f6:8c:64:db:be:72:27:1d:d2:7c:16:ff:15:80:05:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3A:3F:50:F0:A0:ED:A5:B3:0B:AB:12:26:5E:49:BF:EF:30:B6:32
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Qzo_UPCg7aWzC6sSJl5Jv-8wtjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.26.0/24
80.64.27.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6e:b7:55:98:7b:5b:0c:8b:f7:64:e1:04:2d:7e:ee:a7:f4:
40:c9:ae:09:b0:23:de:8d:12:bf:bc:68:34:b5:cd:57:00:8d:
5c:60:be:f4:fc:75:d1:28:ab:4f:ad:86:1a:ff:0d:fc:5b:1d:
f7:8f:fa:42:66:3d:24:3f:a9:08:92:84:53:7a:a4:cf:d8:c1:
9f:88:2e:c8:c6:4d:b2:1a:df:57:52:be:a4:9f:ae:34:81:6e:
09:69:f4:fe:e0:2f:47:6e:df:24:20:ec:98:9c:9f:da:54:4d:
6e:9d:d3:77:76:11:a3:90:33:b6:61:52:4f:b1:59:8b:67:54:
36:7b:08:6f:c0:ae:f1:ea:9c:1d:a2:a1:10:84:7b:58:a0:10:
e0:3c:06:d5:45:b8:f9:41:51:77:66:a9:b0:75:00:7e:95:50:
99:7b:78:1d:f9:2a:ff:a4:23:2b:23:cd:de:61:7f:c3:9b:92:
7f:d1:52:c2:e8:75:73:5b:24:83:79:00:71:cf:68:3e:16:b4:
3d:fd:8b:0f:4d:40:eb:8a:4a:76:5d:c3:5b:d1:dd:02:4b:b1:
5a:fa:ad:a1:94:6f:d0:79:e3:ae:ea:fc:e1:ec:fe:91:97:f9:
b0:2a:07:57:22:93:59:ee:ec:44:58:12:0c:1e:73:e5:b9:68:
44:f3:4f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:34:36 2026 by rpki-client