Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/QSDL9aVFEsgN1pmAwftAE68ZkLE.roa
File: QSDL9aVFEsgN1pmAwftAE68ZkLE.roa (raw, json)
Hash identifier: 9l+ETcbI4z1a4gUBvTyDHkfAhvOVwGBe6uOyh4bKOpA=
Subject key identifier: 41:20:CB:F5:A5:45:12:C8:0D:D6:99:80:C1:FB:40:13:AF:19:90:B1
Certificate issuer: /CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Certificate serial: 019F236886A8E291CA89F02BBA6B2F6DC5A0
Authority key identifier: 12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/QSDL9aVFEsgN1pmAwftAE68ZkLE.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31034
IP address blocks: 147.189.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:86:a8:e2:91:ca:89:f0:2b:ba:6b:2f:6d:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4120cbf5a54512c80dd69980c1fb4013af1990b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:11:6b:45:c2:2f:ed:02:77:d7:7a:2b:16:fd:
5c:6a:9e:fb:fa:2a:d0:99:6c:38:1c:ff:ed:9b:23:
e8:94:05:41:d0:34:db:d8:16:2f:f5:bd:3b:28:e4:
80:1c:28:2b:a4:8d:1d:c1:f0:0a:3b:37:ba:7c:2c:
78:a3:fe:9a:0b:3b:21:21:4d:77:5f:79:d2:ab:08:
47:43:51:ca:a3:f8:c5:ca:7f:52:d7:c5:b9:68:84:
98:20:01:62:20:67:f3:cd:60:c6:fe:62:7f:ae:9a:
6b:49:5b:61:4a:fe:ba:9e:75:35:70:0c:4e:92:49:
fc:eb:b8:ed:8c:19:9d:47:be:90:5e:a2:ca:78:ad:
6c:24:9d:f2:8a:f1:e6:c7:46:07:24:68:89:ac:0a:
79:ef:25:b2:a2:34:91:36:29:d4:56:fc:15:e7:ff:
d8:a8:c4:0a:e0:13:eb:69:1c:3b:3e:a6:f9:7e:70:
2c:d7:9f:06:ef:65:2f:07:70:68:ed:26:f4:49:be:
1e:63:70:bb:29:a9:69:e1:8c:c5:a5:e7:66:af:4d:
27:ae:97:90:b4:df:ce:a7:27:c9:97:65:63:99:0a:
ac:c9:ab:d0:2e:d6:51:f9:8b:15:b9:e4:7c:b1:c6:
74:10:40:ff:6f:b4:d8:1e:63:00:e5:b1:28:af:1e:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:20:CB:F5:A5:45:12:C8:0D:D6:99:80:C1:FB:40:13:AF:19:90:B1
X509v3 Authority Key Identifier:
keyid:12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/QSDL9aVFEsgN1pmAwftAE68ZkLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.210.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c8:86:9f:04:4d:88:f6:1b:26:69:1e:b2:91:89:77:65:7d:
3b:c1:2a:b8:66:bf:cf:09:d9:61:eb:9d:ef:9e:7c:51:56:ab:
05:60:a5:8f:37:37:a4:7f:49:bb:4c:db:a3:2f:28:d4:de:aa:
ec:67:55:fd:ce:f6:e2:6d:01:ee:b9:df:2c:b7:6c:16:64:d5:
03:a8:d4:28:2c:f9:5f:8b:ef:df:58:78:1d:f1:f4:d1:96:f1:
6e:94:12:64:de:b4:53:53:32:4d:fc:8a:c7:b2:b4:6a:e0:b1:
c1:3f:7a:92:4e:1a:b3:86:c9:13:df:f0:b6:cc:39:2e:66:83:
ed:14:72:12:6a:23:b1:0c:39:d8:fc:22:0b:4e:6d:d4:ec:cc:
5e:bc:26:a9:4f:97:44:71:12:d7:1a:07:e1:0a:c9:30:a2:3b:
55:2a:27:c7:59:06:1f:3a:88:c1:65:e1:13:0a:38:e7:b3:7f:
0c:c1:20:78:e4:21:e7:bf:c3:6c:24:81:69:08:e5:ae:78:8a:
26:28:a8:82:a5:3f:e2:a4:a3:c9:ec:2f:2f:6b:94:f1:2e:7f:
8a:9d:75:09:60:5c:a9:6f:5d:ed:be:77:0a:84:08:16:9f:5b:
0a:39:cf:5b:25:8f:a3:0b:f5:2f:23:b7:d5:e3:eb:94:03:2e:
eb:72:96:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaIao4pHKifArumsvbcWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTViNWFkNDYyYmM0OTRjNDMyNDkzMWNkZjQzMDFjZGEw
MWY4MGMwHhcNMjYwNzAyMTUxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTIwY2JmNWE1NDUxMmM4MGRkNjk5ODBjMWZiNDAxM2FmMTk5MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixFrRcIv7QJ313orFv1cap77+irQ
mWw4HP/tmyPolAVB0DTb2BYv9b07KOSAHCgrpI0dwfAKOze6fCx4o/6aCzshIU13
X3nSqwhHQ1HKo/jFyn9S18W5aISYIAFiIGfzzWDG/mJ/rpprSVthSv66nnU1cAxO
kkn867jtjBmdR76QXqLKeK1sJJ3yivHmx0YHJGiJrAp57yWyojSRNinUVvwV5//Y
qMQK4BPraRw7Pqb5fnAs158G72UvB3Bo7Sb0Sb4eY3C7Kalp4YzFpedmr00nrpeQ
tN/OpyfJl2VjmQqsyavQLtZR+YsVueR8scZ0EED/b7TYHmMA5bEorx4lcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEgy/WlRRLIDdaZgMH7QBOvGZCxMB8GA1UdIwQY
MBaAFBIVta1GK8SUxDJJMc30MBzaAfgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhXMXJVWXJ4SlRFTWtreHpmUXdITm9CLUF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvUVNETDlhVkZFc2dOMXBtQXdmdEFFNjhaa0xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRWhXMXJVWXJ4SlRFTWtreHpmUXdITm9CLUF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk73SMA0G
CSqGSIb3DQEBCwUAA4IBAQBlyIafBE2I9hsmaR6ykYl3ZX07wSq4Zr/PCdlh653v
nnxRVqsFYKWPNzekf0m7TNujLyjU3qrsZ1X9zvbibQHuud8st2wWZNUDqNQoLPlf
i+/fWHgd8fTRlvFulBJk3rRTUzJN/IrHsrRq4LHBP3qSThqzhskT3/C2zDkuZoPt
FHISaiOxDDnY/CILTm3U7MxevCapT5dEcRLXGgfhCskwojtVKifHWQYfOojBZeET
Cjjns38MwSB45CHnv8NsJIFpCOWueIomKKiCpT/ipKPJ7C8va5TxLn+KnXUJYFyp
b13tvncKhAgWn1sKOc9bJY+jC/UvI7fV4+uUAy7rcpYJ
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:27 2026 by rpki-client