Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/pPjzGwxRrQB5-40BluFsbIPRays.roa
File: pPjzGwxRrQB5-40BluFsbIPRays.roa (raw, json)
Hash identifier: sQ+RWTCTmzmCdnVJPlVfZs+TlcOrO5vdITrduRsIAW0=
Subject key identifier: A4:F8:F3:1B:0C:51:AD:00:79:FB:8D:01:96:E1:6C:6C:83:D1:6B:2B
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 019D67484D52771296E7F4AF7C4529A47D4C
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/pPjzGwxRrQB5-40BluFsbIPRays.roa
Signing time: Tue 07 Apr 2026 09:31:24 +0000
ROA not before: Tue 07 Apr 2026 09:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 62.239.0.0/16 maxlen: 16
132.146.0.0/16 maxlen: 16
147.148.0.0/14 maxlen: 14
147.152.0.0/16 maxlen: 16
192.65.219.0/24 maxlen: 24
192.65.221.0/24 maxlen: 24
192.65.222.0/24 maxlen: 24
192.65.223.0/24 maxlen: 24
192.65.224.0/24 maxlen: 24
192.65.225.0/24 maxlen: 24
192.65.226.0/24 maxlen: 24
192.65.227.0/24 maxlen: 24
192.65.228.0/24 maxlen: 24
193.113.0.0/16 maxlen: 16
194.102.0.0/19 maxlen: 19
195.218.32.0/19 maxlen: 19
217.15.64.0/20 maxlen: 20
2a00:2380::/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:48:4d:52:77:12:96:e7:f4:af:7c:45:29:a4:7d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Apr 7 09:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4f8f31b0c51ad0079fb8d0196e16c6c83d16b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:10:66:0b:e5:15:89:29:6d:8d:b5:40:84:
30:6f:1d:8f:81:78:c2:4b:86:15:a7:85:f5:74:24:
ba:f5:d5:19:be:a9:53:d1:45:d7:37:6e:57:6b:61:
1d:8f:9f:ef:19:d7:18:8c:e0:5b:44:aa:1e:53:4a:
c8:02:8c:49:60:91:47:bb:9c:c2:05:46:e2:e3:2a:
46:9a:3f:21:9b:ae:49:b7:9c:fc:3c:a7:a2:4c:fb:
e1:2f:db:22:37:cc:1e:1e:bf:27:c0:fe:8e:1b:e6:
bb:47:cf:e9:b0:07:c8:87:9a:f6:84:02:73:f3:5c:
83:08:37:ae:26:65:92:ad:c4:56:5a:81:15:c9:54:
25:5b:bf:fd:6f:58:88:24:01:de:c8:4c:d8:60:03:
4a:19:cb:86:16:f3:59:b3:b9:83:19:2d:0e:4e:b3:
66:f2:4e:e2:63:88:c5:13:d7:df:6a:dc:2f:1f:28:
38:5b:bc:56:70:ea:ad:19:3e:6f:4b:b7:29:ef:aa:
90:c2:08:73:8d:25:8c:9d:11:19:6a:4b:a2:ef:63:
6b:28:01:fe:36:d1:2d:af:d7:cb:a5:de:38:43:18:
a5:05:99:25:c8:1b:4b:66:84:d0:7c:26:04:e6:ed:
04:a2:a0:16:45:9e:8b:32:e2:fb:f6:8a:92:4e:de:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F8:F3:1B:0C:51:AD:00:79:FB:8D:01:96:E1:6C:6C:83:D1:6B:2B
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/pPjzGwxRrQB5-40BluFsbIPRays.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.239.0.0/16
132.146.0.0/16
147.148.0.0-147.152.255.255
192.65.219.0/24
192.65.221.0-192.65.228.255
193.113.0.0/16
194.102.0.0/19
195.218.32.0/19
217.15.64.0/20
IPv6:
2a00:2380::/25
Signature Algorithm: sha256WithRSAEncryption
5d:cc:1e:fa:13:00:d6:ad:ce:98:87:4f:8c:22:db:55:da:b8:
2c:b1:f9:a8:4b:73:d0:ff:78:3b:cd:27:67:33:f3:25:60:ae:
1c:a5:19:b9:f9:5f:8b:8f:ec:43:f4:64:1b:3c:6d:5c:27:ac:
91:52:ba:b0:dd:36:07:ec:8b:c0:3a:ee:d0:45:e0:a7:19:f0:
16:2d:37:a6:83:ce:dd:4b:1c:8d:20:54:6d:5d:5c:49:49:e0:
e1:b8:13:df:ed:8a:59:76:a4:1a:c9:6d:02:fc:12:7d:18:c6:
d4:2a:b6:d9:95:59:38:a3:09:94:a9:0e:75:6e:60:3a:aa:f2:
3e:54:bc:3a:6f:10:6e:67:83:7b:d5:2f:82:ab:34:74:8a:8d:
9b:0d:e1:1a:be:a8:aa:b3:65:4a:bb:24:cc:69:37:33:80:60:
46:d2:04:76:37:f3:5c:72:3f:46:96:e2:e1:d6:6b:2a:af:96:
2e:d4:01:8d:0a:88:9d:d6:a6:30:fa:a0:3a:a8:1f:c7:7a:c6:
49:57:24:96:2e:66:ef:07:66:bd:4a:ea:0c:c1:f1:fb:71:6e:
ea:47:4a:99:f9:7a:e2:74:a7:55:66:19:eb:af:d6:39:a8:73:
53:f1:09:83:df:ca:0e:61:eb:87:fc:39:06:97:79:59:6d:11:
36:c1:1a:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZ1nSE1SdxKW5/SvfEUppH1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz
NzRlZDgwHhcNMjYwNDA3MDkzMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGY4ZjMxYjBjNTFhZDAwNzlmYjhkMDE5NmUxNmM2YzgzZDE2YjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+0QZgvlFYkpbY21QIQwbx2PgXjC
S4YVp4X1dCS69dUZvqlT0UXXN25Xa2Edj5/vGdcYjOBbRKoeU0rIAoxJYJFHu5zC
BUbi4ypGmj8hm65Jt5z8PKeiTPvhL9siN8weHr8nwP6OG+a7R8/psAfIh5r2hAJz
81yDCDeuJmWSrcRWWoEVyVQlW7/9b1iIJAHeyEzYYANKGcuGFvNZs7mDGS0OTrNm
8k7iY4jFE9ffatwvHyg4W7xWcOqtGT5vS7cp76qQwghzjSWMnREZakui72NrKAH+
NtEtr9fLpd44QxilBZklyBtLZoTQfCYE5u0EoqAWRZ6LMuL79oqSTt7xMwIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFKT48xsMUa0AefuNAZbhbGyD0WsrMB8GA1UdIwQY
MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt
NzE2OGFlMGI4Mjc4LzEvcFBqekd3eFJyUUI1LTQwQmx1RnNiSVBSYXlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4
LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBHBAIAATBBAwMAPu8DAwCE
kjAKAwMCk5QDAwCTmAMEAMBB2zAMAwQAwEHdAwQAwEHkAwMAwXEDBAXCZgADBAXD
2iADBATZD0AwDQQCAAIwBwMFByoAI4AwDQYJKoZIhvcNAQELBQADggEBAF3MHvoT
ANatzpiHT4wi21XauCyx+ahLc9D/eDvNJ2cz8yVgrhylGbn5X4uP7EP0ZBs8bVwn
rJFSurDdNgfsi8A67tBF4KcZ8BYtN6aDzt1LHI0gVG1dXElJ4OG4E9/till2pBrJ
bQL8En0YxtQqttmVWTijCZSpDnVuYDqq8j5UvDpvEG5ng3vVL4KrNHSKjZsN4Rq+
qKqzZUq7JMxpNzOAYEbSBHY381xyP0aW4uHWayqvli7UAY0KiJ3WpjD6oDqoH8d6
xklXJJYuZu8HZr1K6gzB8ftxbupHSpn5euJ0p1VmGeuv1jmoc1PxCYPfyg5h64f8
OQaXeVltETbBGu8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:04 2026 by rpki-client