Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/MQETek41Wy3jt_rGNyu3Hn-7_EA.roa
File: MQETek41Wy3jt_rGNyu3Hn-7_EA.roa (raw, json)
Hash identifier: d25pnju/DR6S1vf/CWN7TeMWaDuW0Zyl4oVi8NH6iUw=
Subject key identifier: 31:01:13:7A:4E:35:5B:2D:E3:B7:FA:C6:37:2B:B7:1E:7F:BB:FC:40
Certificate issuer: /CN=b7138e4840caa3a1bd51852714a135fb0e837c45
Certificate serial: 019B797E095BC420C8125D9ACCDC0FF006D4
Authority key identifier: B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/MQETek41Wy3jt_rGNyu3Hn-7_EA.roa
Signing time: Thu 01 Jan 2026 12:17:41 +0000
ROA not before: Thu 01 Jan 2026 12:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216359
IP address blocks: 194.153.212.0/23 maxlen: 23
195.128.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:09:5b:c4:20:c8:12:5d:9a:cc:dc:0f:f0:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7138e4840caa3a1bd51852714a135fb0e837c45
Validity
Not Before: Jan 1 12:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3101137a4e355b2de3b7fac6372bb71e7fbbfc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bc:0d:39:97:0e:18:81:89:d7:5c:a6:70:12:
bf:d1:b5:09:98:de:ae:c9:9f:54:99:0a:7f:3d:38:
b7:81:09:e9:1b:84:19:16:c0:be:73:26:ec:64:66:
00:44:45:4f:62:11:28:0e:0a:8b:42:55:f8:69:80:
41:7b:36:b0:b9:6e:93:5b:22:1c:8c:14:f6:5a:18:
04:03:8d:b0:79:2a:5f:9f:c1:15:28:1d:56:28:20:
14:b9:e8:cc:55:c9:2b:03:48:42:82:ca:62:26:05:
3f:1f:57:02:c8:e8:00:9b:ca:c1:2f:e7:7a:3f:e3:
f8:c1:27:32:f7:76:eb:65:bc:c4:63:29:85:2a:e0:
1a:e3:17:ee:ef:af:e8:7e:18:b8:6b:88:24:74:7f:
0c:35:ff:ad:b7:40:35:09:e6:4c:86:8c:c8:3a:a0:
60:9f:f7:cb:c4:42:f0:27:21:8f:7d:7e:1d:53:19:
a1:96:05:cf:c0:77:1c:fd:36:ab:70:16:8f:48:62:
14:df:bf:d9:60:ee:65:90:8d:3f:bc:2a:e4:a9:ba:
fa:e0:8f:89:ef:29:27:4c:a9:1e:fd:e7:9f:65:c3:
3d:a6:2a:ee:ae:41:2c:b7:d0:ff:2a:da:08:bc:ea:
c1:18:7b:d7:28:fd:4d:33:55:2c:29:e8:67:64:88:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:01:13:7A:4E:35:5B:2D:E3:B7:FA:C6:37:2B:B7:1E:7F:BB:FC:40
X509v3 Authority Key Identifier:
keyid:B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/MQETek41Wy3jt_rGNyu3Hn-7_EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.212.0/23
195.128.131.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f9:86:96:f3:89:e1:da:b7:61:76:c7:4e:0c:9f:ba:4b:21:
54:7e:8c:ce:c7:84:e0:38:28:77:d5:14:17:c4:2c:5b:ee:5e:
8b:77:05:12:8f:2b:e2:ec:1f:0b:68:0c:36:1c:66:cb:e8:8f:
00:97:78:da:94:f8:13:b5:61:21:7b:c0:1a:43:87:8b:e0:93:
af:5d:c4:9e:3e:03:e8:42:8d:c3:88:d7:3b:d7:55:e7:98:0d:
c6:95:c3:7f:52:7b:c7:ae:f5:97:0c:fd:ae:59:2b:9b:48:da:
af:a8:87:9d:fe:80:8a:de:77:a8:58:de:5e:6f:d0:9f:0a:d1:
17:8c:ae:12:e3:c5:59:72:6d:65:cf:ae:4f:5f:d3:19:46:b9:
0b:9d:4a:04:b7:c9:be:bb:aa:8f:98:0c:71:87:8b:e6:19:2d:
00:51:3b:a4:ad:40:31:c7:62:4c:22:2d:fa:03:5f:da:1c:aa:
00:24:f4:15:f8:a4:aa:13:ea:d5:3b:21:34:4b:04:0e:8f:d3:
e7:e6:3c:09:2c:7e:c0:22:f1:8b:24:69:2f:6b:72:a9:50:96:
51:53:31:3d:ea:43:a2:5a:9d:cc:88:ea:4d:72:a3:d3:c2:6e:
85:83:3c:4f:4c:b5:59:7e:50:59:73:bb:91:f8:a3:cc:de:d3:
05:f0:aa:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt5fglbxCDIEl2azNwP8AbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTM4ZTQ4NDBjYWEzYTFiZDUxODUyNzE0YTEzNWZiMGU4
MzdjNDUwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTAxMTM3YTRlMzU1YjJkZTNiN2ZhYzYzNzJiYjcxZTdmYmJmYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rwNOZcOGIGJ11ymcBK/0bUJmN6u
yZ9UmQp/PTi3gQnpG4QZFsC+cybsZGYAREVPYhEoDgqLQlX4aYBBezawuW6TWyIc
jBT2WhgEA42weSpfn8EVKB1WKCAUuejMVckrA0hCgspiJgU/H1cCyOgAm8rBL+d6
P+P4wScy93brZbzEYymFKuAa4xfu76/ofhi4a4gkdH8MNf+tt0A1CeZMhozIOqBg
n/fLxELwJyGPfX4dUxmhlgXPwHcc/TarcBaPSGIU37/ZYO5lkI0/vCrkqbr64I+J
7yknTKke/eefZcM9pirurkEst9D/KtoIvOrBGHvXKP1NM1UsKehnZIg5kQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDEBE3pONVst47f6xjcrtx5/u/xAMB8GA1UdIwQY
MBaAFLcTjkhAyqOhvVGFJxShNfsOg3xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMDk3ZWEtMjMyZC00YTJmLTkwZTct
NDNmZTRhNTFiNTRiLzEvTVFFVGVrNDFXeTNqdF9yR055dTNIbi03X0VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMDk3ZWEtMjMyZC00YTJmLTkwZTctNDNmZTRhNTFiNTRi
LzEvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwpnUAwQA
w4CDMA0GCSqGSIb3DQEBCwUAA4IBAQCY+YaW84nh2rdhdsdODJ+6SyFUfozOx4Tg
OCh31RQXxCxb7l6LdwUSjyvi7B8LaAw2HGbL6I8Al3jalPgTtWEhe8AaQ4eL4JOv
XcSePgPoQo3DiNc711XnmA3GlcN/UnvHrvWXDP2uWSubSNqvqIed/oCK3neoWN5e
b9CfCtEXjK4S48VZcm1lz65PX9MZRrkLnUoEt8m+u6qPmAxxh4vmGS0AUTukrUAx
x2JMIi36A1/aHKoAJPQV+KSqE+rVOyE0SwQOj9Pn5jwJLH7AIvGLJGkva3KpUJZR
UzE96kOiWp3MiOpNcqPTwm6FgzxPTLVZflBZc7uR+KPM3tMF8KrV
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:24:10 2026 by rpki-client