Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/QrszOClIEQh3elMo6v8ATkV3fJ0.roa
File: QrszOClIEQh3elMo6v8ATkV3fJ0.roa (raw, json)
Hash identifier: VAU1sjN6ik5JtfJ9K0j96yl5ekT9sKWTrHI+CDnGb7U=
Subject key identifier: 42:BB:33:38:29:48:11:08:77:7A:53:28:EA:FF:00:4E:45:77:7C:9D
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 019F5D708723DFFA744D97076C61C5DB4F08
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/QrszOClIEQh3elMo6v8ATkV3fJ0.roa
Signing time: Mon 13 Jul 2026 21:44:43 +0000
ROA not before: Mon 13 Jul 2026 21:44:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200043
IP address blocks: 5.178.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5d:70:87:23:df:fa:74:4d:97:07:6c:61:c5:db:4f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Jul 13 21:44:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42bb333829481108777a5328eaff004e45777c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:82:12:d2:34:1a:99:11:c4:69:ce:ba:ea:
da:85:7d:48:15:76:0d:8e:c5:78:3f:01:59:88:71:
11:c5:90:c4:1c:1e:ce:74:3e:28:a1:f6:2d:0c:bb:
c0:59:48:93:15:92:1e:5b:12:01:3c:9a:e8:70:8d:
a6:8d:d0:a1:fb:ac:2c:e5:65:3f:9c:25:85:7f:0d:
59:f1:20:0c:c3:08:fc:d9:ae:04:b4:bf:b1:c3:f5:
c1:70:e0:28:15:78:48:9b:77:91:a8:ea:50:ba:70:
b9:47:35:1b:d7:2c:55:3e:ba:79:d5:1f:50:44:c1:
89:7f:44:5b:08:bf:cc:67:92:3f:84:4a:45:ba:0b:
5a:cf:7b:55:9f:58:a7:d5:f1:35:16:a1:d2:47:66:
bd:ab:f5:72:96:9a:7b:22:7c:16:af:12:0d:d8:99:
5d:7c:31:77:ef:d1:7c:a6:4e:55:1b:6c:2b:4f:53:
07:27:f0:df:7e:51:ba:dc:50:b2:3e:fb:7e:09:ae:
4a:76:0c:d6:f3:1e:8b:e4:33:3a:d0:6b:ae:85:c9:
bf:5b:cd:88:12:19:fb:8d:d5:9c:2c:2a:29:08:f1:
d4:3d:dd:a5:76:3e:41:7c:b1:99:1f:7b:3e:da:21:
ed:c1:b1:8f:fb:24:c9:e1:0e:14:95:53:10:79:68:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BB:33:38:29:48:11:08:77:7A:53:28:EA:FF:00:4E:45:77:7C:9D
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/QrszOClIEQh3elMo6v8ATkV3fJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:fb:22:2f:c9:a4:e1:54:71:43:54:6d:1b:c5:aa:f1:a7:e2:
a3:64:85:80:7d:4f:52:72:23:dd:1c:a7:52:a2:3d:2a:52:8d:
51:4f:fd:02:9f:fb:58:fd:9c:d0:f8:08:f8:3f:42:22:d2:f4:
64:26:a1:1b:36:37:59:79:fb:2c:dd:9d:62:87:ba:43:a2:dd:
26:69:32:17:94:23:3f:1e:ae:74:0b:7f:d9:f5:b4:4b:da:1b:
4b:0b:36:2e:16:1c:86:4d:66:41:34:a5:03:f0:a8:60:15:0d:
8d:fb:23:aa:15:86:05:29:a7:35:e9:a0:99:a2:47:7e:5d:0a:
10:12:ba:74:30:eb:fc:d7:b9:48:ce:4b:ce:83:c2:03:d7:5d:
db:37:33:a7:9f:3a:83:0d:6f:63:e7:e3:f8:dc:c5:d5:e7:93:
7d:78:9e:02:b7:2f:c7:6f:a8:27:fc:01:74:d8:ee:65:ee:64:
79:76:b8:0a:ee:d7:27:51:f0:51:e6:1d:53:89:58:c6:34:00:
1f:89:f9:35:ed:6c:67:fc:6b:44:8e:f2:f7:d8:bc:ab:69:a8:
cc:59:98:e9:fe:a1:8b:12:00:19:53:4f:55:0c:2e:f5:7a:e9:
f9:3c:7d:e2:61:a3:75:f1:26:65:3b:ed:0b:c3:88:94:06:ce:
95:8d:a4:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9dcIcj3/p0TZcHbGHF208IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzRjNzQzZDVjMmFmY2YyN2YxMDRlYjZlMDMxNjExNmM4
NWM3ZGUwHhcNMjYwNzEzMjE0NDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmJiMzMzODI5NDgxMTA4Nzc3YTUzMjhlYWZmMDA0ZTQ1Nzc3YzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmCEtI0GpkRxGnOuurahX1IFXYN
jsV4PwFZiHERxZDEHB7OdD4oofYtDLvAWUiTFZIeWxIBPJrocI2mjdCh+6ws5WU/
nCWFfw1Z8SAMwwj82a4EtL+xw/XBcOAoFXhIm3eRqOpQunC5RzUb1yxVPrp51R9Q
RMGJf0RbCL/MZ5I/hEpFugtaz3tVn1in1fE1FqHSR2a9q/Vylpp7InwWrxIN2Jld
fDF379F8pk5VG2wrT1MHJ/DfflG63FCyPvt+Ca5KdgzW8x6L5DM60Guuhcm/W82I
Ehn7jdWcLCopCPHUPd2ldj5BfLGZH3s+2iHtwbGP+yTJ4Q4UlVMQeWjjeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEK7MzgpSBEId3pTKOr/AE5Fd3ydMB8GA1UdIwQY
MBaAFGLEx0PVwq/PJ/EE624DFhFshcfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUt
ZGUzNTJhOTJmNmJhLzEvUXJzek9DbElFUWgzZWxNbzZ2OEFUa1YzZkowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUtZGUzNTJhOTJmNmJh
LzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbJ4MA0G
CSqGSIb3DQEBCwUAA4IBAQAm+yIvyaThVHFDVG0bxarxp+KjZIWAfU9SciPdHKdS
oj0qUo1RT/0Cn/tY/ZzQ+Aj4P0Ii0vRkJqEbNjdZefss3Z1ih7pDot0maTIXlCM/
Hq50C3/Z9bRL2htLCzYuFhyGTWZBNKUD8KhgFQ2N+yOqFYYFKac16aCZokd+XQoQ
Erp0MOv817lIzkvOg8ID113bNzOnnzqDDW9j5+P43MXV55N9eJ4Cty/Hb6gn/AF0
2O5l7mR5drgK7tcnUfBR5h1TiVjGNAAfifk17Wxn/GtEjvL32LyraajMWZjp/qGL
EgAZU09VDC71eun5PH3iYaN18SZlO+0Lw4iUBs6VjaRv
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:53:17 2026 by rpki-client