Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/QTzZgVA1B77umlkx88dTGfkeXuE.roa
File: QTzZgVA1B77umlkx88dTGfkeXuE.roa (raw, json)
Hash identifier: bkX0up4eGy6/IpnndGY+KGpKazzgkXLi46uBJZNSXpI=
Subject key identifier: 41:3C:D9:81:50:35:07:BE:EE:9A:59:31:F3:C7:53:19:F9:1E:5E:E1
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019F4379CD6764CDD6C6D2BD63659FA32811
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/QTzZgVA1B77umlkx88dTGfkeXuE.roa
Signing time: Wed 08 Jul 2026 20:44:43 +0000
ROA not before: Wed 08 Jul 2026 20:44:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46450
IP address blocks: 9.151.240.0/21 maxlen: 21
9.232.28.0/22 maxlen: 22
9.233.120.0/21 maxlen: 21
135.132.0.0/19 maxlen: 24
135.132.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:79:cd:67:64:cd:d6:c6:d2:bd:63:65:9f:a3:28:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jul 8 20:44:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=413cd981503507beee9a5931f3c75319f91e5ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:d6:e5:92:51:e1:ce:62:6f:61:3a:7b:31:
81:9a:29:ca:e4:75:7f:0a:86:65:90:b9:76:24:de:
35:d2:75:04:c6:05:99:f1:2a:b4:8a:88:6c:43:32:
0a:79:e7:0b:2a:41:ec:35:da:bf:6a:4c:07:2d:dd:
3d:6b:91:54:5e:38:4c:ee:2a:4a:99:47:a7:88:71:
25:13:74:ef:08:f2:61:36:1a:db:8e:9a:be:e2:ea:
b0:20:9b:2b:94:54:a5:57:15:51:9c:91:7d:7d:63:
15:10:b8:e0:e2:a3:d4:53:c5:18:a6:b9:9d:10:b9:
29:81:aa:79:de:2a:d8:6f:56:e8:7f:7d:c6:04:f8:
a8:78:66:81:c7:1b:91:02:22:9d:02:81:82:0a:00:
88:7a:1e:9b:34:17:96:91:60:62:f1:1b:00:3e:7f:
91:28:cd:83:d5:39:7a:2d:5e:65:6c:79:e1:0c:91:
e5:10:36:81:7d:fd:ac:cf:e1:65:48:0d:c0:34:10:
f8:cb:18:a4:ff:9c:3a:b5:a8:3f:09:72:45:4d:57:
34:5b:f7:b2:31:78:74:d6:14:51:ca:78:3f:71:3b:
ae:d0:0a:6e:97:6c:34:aa:2e:94:45:b7:5c:74:ca:
c4:2f:e6:b5:57:bc:a0:51:f9:db:d5:3b:47:a6:d1:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3C:D9:81:50:35:07:BE:EE:9A:59:31:F3:C7:53:19:F9:1E:5E:E1
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/QTzZgVA1B77umlkx88dTGfkeXuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.240.0/21
9.232.28.0/22
9.233.120.0/21
135.132.0.0/19
135.132.96.0/19
Signature Algorithm: sha256WithRSAEncryption
79:5d:5b:df:cc:47:52:81:8e:c7:96:56:d7:11:21:06:dd:81:
c6:fe:f6:2e:a1:c6:2e:6d:f0:c9:0b:2e:2b:8a:2a:37:f5:8d:
83:71:b2:b6:b8:3a:b0:9e:c8:50:47:8b:96:21:5c:f6:24:88:
14:4b:ee:2d:e9:1c:dd:65:a4:e8:15:76:96:c3:cc:c4:d4:ad:
dc:c5:44:30:88:79:f4:ed:55:31:2f:fd:96:43:c6:26:67:fb:
46:90:49:c9:96:67:29:5c:ee:2d:33:16:26:f2:2c:a2:21:73:
bb:03:b1:e7:70:b8:15:d0:54:f7:43:fc:a1:32:2d:ab:c2:66:
0a:ac:6b:fe:7f:56:9e:16:64:6d:0a:e6:e0:7c:cc:9c:ff:ce:
67:d8:d7:bf:97:42:22:dc:6a:a3:f9:95:86:6f:8e:cc:fc:95:
c1:30:e8:19:c5:c8:87:78:eb:71:1a:dd:2b:b2:26:df:a1:a4:
08:c0:97:67:4c:62:7b:ca:c8:f3:5a:20:9d:45:58:9b:ae:11:
2c:24:09:bf:73:4a:70:ff:70:f8:7a:56:27:bf:40:42:55:41:
27:26:64:39:fd:5f:1d:2e:d3:f5:df:1b:91:0c:68:51:ad:7f:
96:5a:c4:a2:be:9c:d2:cc:d3:b4:7a:cb:06:e2:4b:2b:5c:c9:
17:a3:68:e8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ9Dec1nZM3WxtK9Y2WfoygRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjYwNzA4MjA0NDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTNjZDk4MTUwMzUwN2JlZWU5YTU5MzFmM2M3NTMxOWY5MWU1ZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4nW5ZJR4c5ib2E6ezGBminK5HV/
CoZlkLl2JN410nUExgWZ8Sq0iohsQzIKeecLKkHsNdq/akwHLd09a5FUXjhM7ipK
mUeniHElE3TvCPJhNhrbjpq+4uqwIJsrlFSlVxVRnJF9fWMVELjg4qPUU8UYprmd
ELkpgap53irYb1bof33GBPioeGaBxxuRAiKdAoGCCgCIeh6bNBeWkWBi8RsAPn+R
KM2D1Tl6LV5lbHnhDJHlEDaBff2sz+FlSA3ANBD4yxik/5w6tag/CXJFTVc0W/ey
MXh01hRRyng/cTuu0Apul2w0qi6URbdcdMrEL+a1V7ygUfnb1TtHptE4NQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEE82YFQNQe+7ppZMfPHUxn5Hl7hMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvUVR6WmdWQTFCNzd1bWxreDg4ZFRHZmtlWHVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDCZfwAwQC
CegcAwQDCel4AwQFh4QAAwQFh4RgMA0GCSqGSIb3DQEBCwUAA4IBAQB5XVvfzEdS
gY7HllbXESEG3YHG/vYuocYubfDJCy4riio39Y2DcbK2uDqwnshQR4uWIVz2JIgU
S+4t6RzdZaToFXaWw8zE1K3cxUQwiHn07VUxL/2WQ8YmZ/tGkEnJlmcpXO4tMxYm
8iyiIXO7A7HncLgV0FT3Q/yhMi2rwmYKrGv+f1aeFmRtCubgfMyc/85n2Ne/l0Ii
3Gqj+ZWGb47M/JXBMOgZxciHeOtxGt0rsibfoaQIwJdnTGJ7ysjzWiCdRVibrhEs
JAm/c0pw/3D4elYnv0BCVUEnJmQ5/V8dLtP13xuRDGhRrX+WWsSivpzSzNO0essG
4ksrXMkXo2jo
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:30:54 2026 by rpki-client