Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/qbYP0UksLbSQsOn0c0j6zXw0rP8.roa
File: qbYP0UksLbSQsOn0c0j6zXw0rP8.roa (raw, json)
Hash identifier: esZKDBKEw5qRbj9kqcJN1+giUZn6tIL+9+p2SrfRvrA=
Subject key identifier: A9:B6:0F:D1:49:2C:2D:B4:90:B0:E9:F4:73:48:FA:CD:7C:34:AC:FF
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 01A0C95776220C5E78716F1A1434CA554C59
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/qbYP0UksLbSQsOn0c0j6zXw0rP8.roa
Signing time: Tue 22 Sep 2026 13:39:07 +0000
ROA not before: Tue 22 Sep 2026 13:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48715
IP address blocks: 78.110.120.0/22 maxlen: 24
80.71.149.0/24 maxlen: 24
80.249.114.0/24 maxlen: 24
88.135.36.0/22 maxlen: 22
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
91.247.171.0/24 maxlen: 24
130.193.77.0/24 maxlen: 24
152.89.44.0/22 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.36.228.0/24 maxlen: 24
185.51.200.0/22 maxlen: 22
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.58.240.0/22 maxlen: 24
185.112.149.0/24 maxlen: 24
185.112.150.0/23 maxlen: 23
185.112.150.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.121.130.0/23 maxlen: 23
185.121.130.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.128.136.0/22 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.141.104.0/22 maxlen: 22
185.141.104.0/24 maxlen: 24
185.141.105.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.141.107.0/24 maxlen: 24
185.141.132.0/22 maxlen: 22
185.141.132.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.170.8.0/24 maxlen: 24
185.173.129.0/24 maxlen: 24
185.173.130.0/24 maxlen: 24
185.182.248.0/22 maxlen: 24
185.206.231.0/24 maxlen: 24
185.213.195.0/24 maxlen: 24
185.234.14.0/24 maxlen: 24
185.235.245.0/24 maxlen: 24
185.252.200.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
188.209.152.0/24 maxlen: 24
188.209.153.0/24 maxlen: 24
195.110.38.0/23 maxlen: 23
195.211.44.0/22 maxlen: 22
195.211.44.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
195.211.47.0/24 maxlen: 24
213.109.199.0/24 maxlen: 24
2a0a:5e80::/29 maxlen: 29
2a0a:5e80::/48 maxlen: 48
2a0a:5e80::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:57:76:22:0c:5e:78:71:6f:1a:14:34:ca:55:4c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Sep 22 13:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9b60fd1492c2db490b0e9f47348facd7c34acff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:90:d5:70:49:61:5a:58:8f:9f:d5:47:8f:
4d:f3:2b:bb:6a:f7:21:c8:52:df:12:97:0a:87:0b:
ce:2d:38:d6:4c:66:c0:89:23:cf:03:72:a9:59:54:
bf:19:8a:18:4e:f7:3b:c1:c3:b3:91:2e:99:5a:b1:
1a:24:03:46:a8:38:d2:ad:e8:d6:2a:0e:25:d6:72:
e9:00:c7:02:5c:2a:d5:f8:56:c7:b8:6c:1d:5b:97:
3b:6b:de:d2:73:e6:48:3e:5d:56:2c:3b:c9:5f:a2:
27:df:03:4d:93:7f:8d:c2:fd:48:17:50:7c:47:96:
ca:ca:11:8e:33:f4:ba:49:0f:00:ee:5f:37:46:ae:
f5:da:74:89:a4:e1:d6:86:3c:cc:f7:2c:80:9d:e4:
b4:23:d4:55:f2:ac:c0:19:5a:43:d8:81:07:ad:b5:
e4:a6:ff:0e:5a:c9:dc:cd:f2:65:0b:ec:90:e9:53:
05:c5:22:ae:dc:ff:f9:fa:05:9a:92:23:88:57:f0:
39:cd:53:8e:6f:39:c4:94:1a:98:37:a1:8a:b3:05:
00:50:8f:1c:a3:4a:31:20:a5:97:26:45:b4:49:ea:
06:b7:a5:2b:fc:9e:5f:5c:ce:85:e9:07:ff:a4:c6:
38:ab:59:80:dc:35:3c:af:ee:f8:e8:34:0c:2f:7b:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B6:0F:D1:49:2C:2D:B4:90:B0:E9:F4:73:48:FA:CD:7C:34:AC:FF
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/qbYP0UksLbSQsOn0c0j6zXw0rP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.120.0/22
80.71.149.0/24
80.249.114.0/24
88.135.36.0/22
91.236.168.0/23
91.247.171.0/24
130.193.77.0/24
152.89.44.0/22
185.18.212.0/22
185.36.228.0/24
185.51.200.0/22
185.58.240.0/22
185.112.149.0-185.112.151.255
185.121.130.0/23
185.128.136.0/22
185.141.104.0/22
185.141.132.0/22
185.170.8.0/24
185.173.129.0-185.173.130.255
185.182.248.0/22
185.206.231.0/24
185.213.195.0/24
185.234.14.0/24
185.235.245.0/24
185.252.200.0/24
188.209.152.0/23
195.110.38.0/23
195.211.44.0/22
213.109.199.0/24
IPv6:
2a0a:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
57:ca:3a:93:c5:3e:19:25:8a:b7:b7:43:70:39:1e:ae:3c:94:
ad:20:31:33:85:9d:9b:fe:17:2f:5d:08:7d:c2:68:53:66:bb:
88:7b:ae:cf:81:3c:63:b2:a3:ee:87:d6:d5:7d:86:6d:f9:55:
e1:da:43:4d:f6:ad:44:35:30:e8:d7:36:ad:1b:66:fe:84:f3:
ee:79:94:4d:02:14:26:37:52:d1:c6:22:49:b6:23:e6:5e:11:
5a:e6:76:13:5a:98:f1:88:c9:66:ac:c6:6b:5d:60:b8:72:d2:
1d:3d:b1:23:71:70:38:ad:5f:1d:e7:4d:54:0e:18:49:8e:da:
81:22:f3:78:fc:85:eb:3c:60:93:44:87:7b:73:b0:df:72:a0:
8f:63:14:65:23:8d:18:3d:f3:61:3b:cd:20:21:39:81:e6:c9:
2b:99:c8:11:17:22:6b:6b:c4:f6:af:ee:89:b4:a8:89:ae:63:
3d:95:7d:55:60:7b:0f:31:3f:4f:5a:34:a2:b1:1b:5a:9a:f3:
cd:5c:61:83:0e:0e:b9:17:61:5c:86:fd:ed:b3:42:f1:17:16:
07:f8:4f:c8:8e:90:d8:72:5d:3c:da:ac:1a:59:87:47:7a:53:
27:f4:12:28:4a:7c:52:75:d5:01:16:fb:b1:14:6c:9c:d4:70:
c0:f3:c2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:35 2026 by rpki-client