Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/qLlkVW88V5PBegH_90cR2KF7_xI.roa
File: qLlkVW88V5PBegH_90cR2KF7_xI.roa (raw, json)
Hash identifier: FkgU7aRp19Haw31aWCRlRZvTAOJ47Up6IijdLGyXvAQ=
Subject key identifier: A8:B9:64:55:6F:3C:57:93:C1:7A:01:FF:F7:47:11:D8:A1:7B:FF:12
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 01A03C90F521178D118DB19A65BE2CD93ED4
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/qLlkVW88V5PBegH_90cR2KF7_xI.roa
Signing time: Wed 26 Aug 2026 05:35:27 +0000
ROA not before: Wed 26 Aug 2026 05:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60185
IP address blocks: 185.2.244.0/22 maxlen: 22
185.2.244.0/23 maxlen: 23
185.2.244.0/24 maxlen: 24
185.2.245.0/24 maxlen: 24
185.2.246.0/23 maxlen: 23
185.2.246.0/24 maxlen: 24
185.2.247.0/24 maxlen: 24
2a02:4440::/32 maxlen: 32
2a02:4440::/33 maxlen: 33
2a02:4440::/34 maxlen: 34
2a02:4440:4000::/34 maxlen: 34
2a02:4440:8000::/33 maxlen: 33
2a02:4440:8000::/34 maxlen: 34
2a02:4440:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:90:f5:21:17:8d:11:8d:b1:9a:65:be:2c:d9:3e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Aug 26 05:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8b964556f3c5793c17a01fff74711d8a17bff12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:1a:ad:4e:e6:2c:66:58:fd:f3:a6:14:3f:
a3:19:ba:02:ca:a6:44:6d:f4:81:66:e8:49:23:de:
fb:8b:13:ac:37:ad:02:1b:a0:28:28:d3:25:62:18:
b1:5e:19:a7:a0:f7:90:ce:c3:1d:fc:94:8e:23:33:
81:31:9e:9b:8c:01:3d:80:21:e0:95:71:ea:5c:ec:
f3:c0:86:11:f9:cf:9f:25:d3:4a:0a:6a:fd:e7:c6:
6c:13:02:a7:49:09:02:5b:1f:c1:37:e0:42:18:d1:
50:24:1e:a2:f4:16:c1:72:7b:86:db:38:9c:8d:83:
bf:be:35:e1:82:9b:fe:65:d2:ca:6c:5a:00:54:66:
8f:88:5c:6d:43:33:02:d9:8f:b7:a8:e0:ea:91:99:
45:f0:38:66:bc:83:99:b7:ef:e4:2e:60:c1:fa:5a:
05:5d:76:e5:8f:4f:69:8f:13:e4:bf:87:8e:49:fd:
f6:e7:5e:3d:c8:86:3b:d9:8d:b0:5c:50:06:b3:2f:
b7:96:2f:5e:f8:0f:b4:b1:a5:f6:68:a9:01:b2:20:
43:75:4c:34:ce:3f:a2:8b:da:00:79:70:33:3b:20:
9e:95:86:f0:06:d6:ac:78:87:5c:1f:32:ba:61:98:
e9:94:2b:ed:3f:a8:55:a4:71:7a:9e:6f:62:2f:c2:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:64:55:6F:3C:57:93:C1:7A:01:FF:F7:47:11:D8:A1:7B:FF:12
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/qLlkVW88V5PBegH_90cR2KF7_xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.244.0/22
IPv6:
2a02:4440::/32
Signature Algorithm: sha256WithRSAEncryption
22:b6:7f:04:14:a2:b1:52:e4:0a:3e:de:7d:8c:86:b9:f7:de:
ee:66:d0:e0:02:93:2b:c9:44:10:d8:c9:a4:50:bc:23:d8:d1:
01:23:aa:7a:8f:80:6b:fc:93:96:ff:cc:78:21:01:16:f7:7b:
c9:aa:ad:e1:76:00:32:15:c0:63:4b:9f:c2:f4:0a:2a:1c:dd:
e1:73:41:b4:1a:ee:0b:e4:e8:0b:7e:85:e6:7b:0a:fb:ab:e4:
fd:ff:d5:d8:1d:70:c6:10:93:87:ac:ba:29:8e:a1:9f:26:71:
4f:38:46:e8:0a:a6:80:0d:7e:2c:a5:90:64:06:99:05:36:39:
e2:86:dd:d4:cb:99:30:0e:7d:c3:36:b3:af:7c:1b:7b:56:9f:
99:6a:7f:bb:36:b2:57:f7:3a:30:26:0e:81:92:23:d2:93:1e:
b7:ef:ea:80:c6:81:85:c4:eb:09:0c:d1:f7:59:48:c4:d6:47:
6a:e5:8b:da:78:eb:46:0b:44:1f:d4:66:08:7e:4f:69:1b:5d:
7a:58:c1:9d:40:41:13:3f:2c:80:cc:dd:53:fd:03:53:a9:38:
f0:ae:9f:bc:58:2d:03:61:d2:ce:27:84:77:5a:ad:6d:ce:e4:
b5:e0:1b:15:7c:ac:00:f8:25:cf:70:19:c4:70:df:cd:35:2e:
5e:c8:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:51 2026 by rpki-client