Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/Qmy8pkhSvcewDYkbKfUyqn47CUs.roa
File: Qmy8pkhSvcewDYkbKfUyqn47CUs.roa (raw, json)
Hash identifier: I8m85xoHEdmmCdWU04r1ubGp3/VcVebcipO1ZQWP/1o=
Subject key identifier: 42:6C:BC:A6:48:52:BD:C7:B0:0D:89:1B:29:F5:32:AA:7E:3B:09:4B
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 019C95B583F1FE029F1B817641DDE46B1706
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/Qmy8pkhSvcewDYkbKfUyqn47CUs.roa
Signing time: Wed 25 Feb 2026 16:50:26 +0000
ROA not before: Wed 25 Feb 2026 16:50:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6797
IP address blocks: 46.32.156.0/22 maxlen: 22
62.12.32.0/20 maxlen: 20
62.12.48.0/21 maxlen: 21
91.198.227.0/24 maxlen: 24
195.93.182.0/23 maxlen: 23
2a02:189::/32 maxlen: 32
2a02:18f::/32 maxlen: 32
2a02:460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:b5:83:f1:fe:02:9f:1b:81:76:41:dd:e4:6b:17:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Feb 25 16:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=426cbca64852bdc7b00d891b29f532aa7e3b094b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:ac:d1:6b:92:39:d9:4e:77:8f:b8:ce:81:
71:d5:40:a1:89:97:9b:10:0a:e1:af:eb:a5:65:a8:
cd:c9:f2:5e:88:60:42:fa:c8:e1:fc:3c:b6:13:14:
43:c3:63:99:a5:00:eb:82:1c:69:19:34:ad:be:26:
06:70:51:a5:aa:16:61:35:9e:ed:78:e7:8d:33:11:
7d:2b:42:86:9a:3b:75:8c:cd:47:5d:ff:6a:7b:ed:
1e:91:53:79:dc:aa:18:0c:e7:60:92:c7:40:0c:bc:
7d:2b:ab:eb:8c:8d:7a:7c:c8:34:de:e4:65:31:63:
79:a6:4e:92:8d:79:94:cb:59:36:27:a9:f4:2b:1f:
32:ac:ac:bc:86:69:7b:cd:5b:b4:5d:fe:1e:77:27:
a9:c5:c2:d4:6e:1e:05:0c:58:e9:99:ad:02:3a:eb:
bf:a4:64:89:ff:c4:87:75:86:c6:e9:69:c7:91:d1:
85:0e:1e:92:2f:e9:49:80:7b:0a:1b:d2:f1:3d:d4:
5b:e5:16:6a:85:20:e0:26:9b:a2:00:7a:06:24:19:
b2:5e:dd:08:c2:d8:85:85:aa:72:42:b5:2d:ae:d6:
1c:2e:a7:cb:41:06:20:ca:1a:05:a5:f1:cb:b9:ea:
e5:17:7e:75:c9:a6:b2:de:a7:9f:76:02:fd:76:d4:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6C:BC:A6:48:52:BD:C7:B0:0D:89:1B:29:F5:32:AA:7E:3B:09:4B
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/Qmy8pkhSvcewDYkbKfUyqn47CUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.156.0/22
62.12.32.0-62.12.55.255
91.198.227.0/24
195.93.182.0/23
IPv6:
2a02:189::/32
2a02:18f::/32
2a02:460::/32
Signature Algorithm: sha256WithRSAEncryption
61:98:5a:06:e0:c2:41:e3:20:13:25:1e:4d:4b:99:2e:6c:ce:
85:0d:bd:46:e3:78:98:c0:55:3f:da:c3:24:ae:cc:a1:e9:76:
05:df:c3:58:9c:75:84:1b:af:e3:a1:fe:15:bf:50:ed:d0:eb:
3e:6d:40:d6:4d:88:61:75:b5:a9:5a:34:48:b2:88:48:9b:a3:
00:2c:c2:99:1b:cc:f6:f8:09:b0:ef:12:af:8a:e9:19:e3:7b:
ee:4b:26:b3:b4:32:84:b6:e8:ee:1a:f4:1f:bf:91:76:0e:4f:
a1:95:41:a6:f2:76:6f:d0:ae:b4:a6:cc:fb:e1:10:45:0b:be:
0d:fb:20:b3:9f:b3:50:9b:8a:0b:7d:fa:b2:bf:0a:dc:75:41:
2a:59:72:35:4d:e8:83:e8:f5:9f:63:bb:22:25:fd:5c:a2:47:
eb:2f:f9:23:85:bd:8d:25:62:89:c8:2d:96:cb:cd:6c:3c:21:
b4:73:e2:79:a0:80:b2:12:44:67:f9:66:e4:2f:37:0e:cb:07:
37:1d:4a:9e:d7:4d:76:64:66:d8:95:49:a4:7d:75:3f:97:02:
68:cd:3e:47:63:cb:74:b9:cd:37:a4:bf:ba:e3:bb:7c:c5:41:
6c:8d:f6:4c:12:e7:51:4e:da:37:a7:f1:21:39:d8:77:8e:f4:
e3:ce:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:30:44 2026 by rpki-client