Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QrTnlLj6lj_S8TOeoEYulu9kpvM.roa
File: QrTnlLj6lj_S8TOeoEYulu9kpvM.roa (raw, json)
Hash identifier: tsm9sfvpGHrwfQdHkDXDie4bbwYWKIDppn2wmf4xqiw=
Subject key identifier: 42:B4:E7:94:B8:FA:96:3F:D2:F1:33:9E:A0:46:2E:96:EF:64:A6:F3
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FA44F7E1F3A00F815CA88EF1EC3CE6C49
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QrTnlLj6lj_S8TOeoEYulu9kpvM.roa
Signing time: Mon 27 Jul 2026 16:01:40 +0000
ROA not before: Mon 27 Jul 2026 16:01:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206286
IP address blocks: 212.189.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4f:7e:1f:3a:00:f8:15:ca:88:ef:1e:c3:ce:6c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 27 16:01:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42b4e794b8fa963fd2f1339ea0462e96ef64a6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:f5:dc:cc:8b:1e:3a:6a:c9:02:0a:d5:cf:
5e:de:08:a2:2d:9e:18:93:9d:50:de:1f:5c:e6:24:
b0:65:fe:91:49:1e:67:c6:06:fc:16:80:da:28:5f:
db:2a:99:69:6e:27:c6:f8:ab:32:5a:d3:72:ec:f0:
ef:a6:55:a5:7d:59:98:0e:8c:87:ea:e5:6e:53:db:
1c:77:cb:06:e1:ac:d5:d8:03:96:1f:49:3a:2f:e5:
2b:75:cb:a3:8d:96:63:4f:a3:3c:fd:77:d7:91:cb:
88:6d:11:24:2e:ae:8c:fe:f0:8b:02:aa:5a:db:89:
c3:5b:8a:38:1b:6b:67:cc:e1:12:42:75:1b:8a:d6:
40:91:42:47:a0:4f:c1:a7:cf:62:7c:67:86:2d:0f:
6a:d8:f7:43:af:cd:22:b3:f7:b7:70:86:d2:14:4c:
6a:3a:32:e0:11:af:a2:88:6f:f7:08:a7:59:0d:42:
a1:3a:13:cd:ec:75:35:bb:f9:4e:2f:02:53:f4:fd:
bd:ea:d8:bb:80:5c:9f:77:6e:5c:e5:7c:00:71:23:
36:5c:b2:1f:65:f0:ae:d4:95:f6:c8:fe:b6:1f:ea:
ed:9f:bb:57:35:7c:56:d9:7a:d6:75:1e:3d:46:1d:
c7:c4:80:e8:19:5e:f9:3c:ef:1a:1e:18:43:f6:72:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:E7:94:B8:FA:96:3F:D2:F1:33:9E:A0:46:2E:96:EF:64:A6:F3
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QrTnlLj6lj_S8TOeoEYulu9kpvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fe:f5:17:e0:99:22:33:df:97:d7:77:ae:f0:76:74:bb:77:
5f:0a:aa:d3:f4:74:17:ec:6e:03:59:d4:c7:37:12:5f:03:cb:
ad:83:01:78:b0:48:fa:35:bd:7e:97:8c:0f:9d:43:99:97:bc:
06:59:66:5b:13:e9:f9:c5:0b:97:50:92:b0:40:68:e1:69:ef:
73:14:4c:f7:12:fc:dd:53:db:7c:f1:16:27:22:c2:ce:b4:46:
c0:7f:00:e9:7d:18:c9:3d:80:1c:fe:00:a8:6f:8b:7e:97:df:
75:25:85:36:7c:7c:30:8a:fd:c2:26:46:b5:53:7c:52:5c:c0:
ec:79:93:33:91:f5:8b:c5:96:76:06:25:bb:06:c0:32:3f:33:
91:b8:96:7e:36:bb:02:14:3b:e1:56:04:2e:56:5e:22:5e:55:
a4:65:e5:5a:8a:1e:aa:97:cb:d9:6d:8c:90:32:fd:ca:d4:1f:
83:b4:7c:46:38:3f:94:f6:b4:76:bf:b1:38:f8:29:17:fa:f6:
2f:96:55:2f:72:b3:4e:86:12:1a:a8:61:14:0d:1b:1d:e4:e6:
41:9c:49:9c:50:b4:97:66:53:3f:7e:68:d5:04:dc:d3:e9:4e:
5c:90:3c:7e:7b:5e:90:d3:b2:19:17:58:eb:84:84:2b:45:e9:
07:13:6c:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+kT34fOgD4FcqI7x7DzmxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNzI3MTYwMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmI0ZTc5NGI4ZmE5NjNmZDJmMTMzOWVhMDQ2MmU5NmVmNjRhNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9n13MyLHjpqyQIK1c9e3giiLZ4Y
k51Q3h9c5iSwZf6RSR5nxgb8FoDaKF/bKplpbifG+KsyWtNy7PDvplWlfVmYDoyH
6uVuU9scd8sG4azV2AOWH0k6L+UrdcujjZZjT6M8/XfXkcuIbREkLq6M/vCLAqpa
24nDW4o4G2tnzOESQnUbitZAkUJHoE/Bp89ifGeGLQ9q2PdDr80is/e3cIbSFExq
OjLgEa+iiG/3CKdZDUKhOhPN7HU1u/lOLwJT9P296ti7gFyfd25c5XwAcSM2XLIf
ZfCu1JX2yP62H+rtn7tXNXxW2XrWdR49Rh3HxIDoGV75PO8aHhhD9nJHywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEK055S4+pY/0vEznqBGLpbvZKbzMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvUXJUbmxMajZsal9TOFRPZW9FWXVsdTlrcHZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1L06MA0G
CSqGSIb3DQEBCwUAA4IBAQBu/vUX4JkiM9+X13eu8HZ0u3dfCqrT9HQX7G4DWdTH
NxJfA8utgwF4sEj6Nb1+l4wPnUOZl7wGWWZbE+n5xQuXUJKwQGjhae9zFEz3Evzd
U9t88RYnIsLOtEbAfwDpfRjJPYAc/gCob4t+l991JYU2fHwwiv3CJka1U3xSXMDs
eZMzkfWLxZZ2BiW7BsAyPzORuJZ+NrsCFDvhVgQuVl4iXlWkZeVaih6ql8vZbYyQ
Mv3K1B+DtHxGOD+U9rR2v7E4+CkX+vYvllUvcrNOhhIaqGEUDRsd5OZBnEmcULSX
ZlM/fmjVBNzT6U5ckDx+e16Q07IZF1jrhIQrRekHE2zm
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:02 2026 by rpki-client