Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/QZ09wLcc-RHxb2QgtFbucZ0sDvs.roa
File: QZ09wLcc-RHxb2QgtFbucZ0sDvs.roa (raw, json)
Hash identifier: g7uFnff4yNT8iNg7adSvB89loDYsdZ9ncL/bfSqbzp8=
Subject key identifier: 41:9D:3D:C0:B7:1C:F9:11:F1:6F:64:20:B4:56:EE:71:9D:2C:0E:FB
Certificate issuer: /CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Certificate serial: 01A0AEE4381E238D3D46434DA3D577A2D09E
Authority key identifier: A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/QZ09wLcc-RHxb2QgtFbucZ0sDvs.roa
Signing time: Thu 17 Sep 2026 10:23:07 +0000
ROA not before: Thu 17 Sep 2026 10:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58291
IP address blocks: 91.205.192.0/24 maxlen: 24
91.205.193.0/24 maxlen: 24
2001:67c:da8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:e4:38:1e:23:8d:3d:46:43:4d:a3:d5:77:a2:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Validity
Not Before: Sep 17 10:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=419d3dc0b71cf911f16f6420b456ee719d2c0efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:e0:f0:71:a5:90:b0:f8:ee:10:13:cf:3e:
cb:f7:a4:21:a3:57:f2:f2:e7:92:24:77:02:fb:d6:
a5:12:41:f6:88:51:21:2f:24:0d:0c:88:ef:f5:54:
63:d7:37:c8:5e:c9:f2:9b:92:12:db:f1:4a:37:28:
d4:f6:12:70:e3:a7:0d:73:67:74:2d:1b:89:53:77:
a8:33:3d:37:d1:56:07:eb:7b:dd:38:5d:62:80:e3:
f0:aa:6f:fc:eb:90:1c:df:87:e7:2b:17:6c:89:5f:
85:ee:5b:de:98:b0:ff:da:a9:13:78:be:19:15:79:
fc:d0:00:fd:94:dc:d0:3e:7a:da:b0:24:46:f0:aa:
cf:2d:d2:af:fb:62:30:db:98:6c:61:eb:8c:16:2a:
55:d5:37:77:77:82:8c:aa:dc:77:c5:35:09:fb:23:
32:29:b5:42:bb:37:78:b1:c2:57:90:a9:33:3c:d4:
c9:bb:1d:05:f0:73:88:24:b3:a5:0c:01:66:19:b9:
6e:6f:26:a8:c3:64:a5:0a:52:e0:3c:8b:e4:13:b0:
1e:c0:c6:8b:4e:df:5e:f7:31:50:3b:01:df:34:de:
52:d8:01:43:54:bf:47:e1:f2:65:66:cc:8c:b5:ba:
33:6d:f6:82:9a:d2:c7:c8:dc:5e:d8:e4:a0:80:1d:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:3D:C0:B7:1C:F9:11:F1:6F:64:20:B4:56:EE:71:9D:2C:0E:FB
X509v3 Authority Key Identifier:
keyid:A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/QZ09wLcc-RHxb2QgtFbucZ0sDvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.192.0/23
IPv6:
2001:67c:da8::/48
Signature Algorithm: sha256WithRSAEncryption
1e:f7:9f:28:27:03:da:0d:ae:4d:d3:f6:31:0c:f3:07:b5:97:
2a:b6:4e:4e:ee:e5:aa:80:20:1d:d1:5e:3a:b0:0e:6d:58:c0:
ed:9b:ba:4f:8a:7e:f4:6b:08:58:b9:f2:df:d7:fd:ef:3d:c2:
e3:60:f2:2b:c3:4a:66:05:37:32:1d:32:15:12:d0:e2:c8:41:
a3:7f:31:40:4a:4a:6d:4a:38:bd:0d:28:9b:95:33:33:09:db:
a1:ba:ca:2e:33:c9:9a:4e:f5:f1:e9:e0:23:de:b6:a4:75:3f:
4d:b8:a5:69:53:91:d2:1b:84:4d:93:55:11:ec:c5:25:97:7e:
ca:87:e2:37:72:53:e7:a8:33:da:53:5c:1c:18:4a:97:33:35:
37:22:91:bf:cb:14:66:e5:40:e9:89:04:ef:7a:c6:01:ad:77:
55:82:61:12:36:5d:2e:c2:cc:08:02:69:87:c9:2f:a1:9a:75:
5e:8a:61:6d:5d:2f:30:fe:89:ae:4d:cc:74:0c:f7:86:e5:cd:
26:90:99:d8:b3:14:d6:a7:fb:08:dc:0e:ce:1c:4f:a1:41:85:
d4:60:af:33:18:23:cf:49:cb:53:a2:07:6e:3e:1c:2f:07:35:
c2:da:03:b0:8c:ba:6a:c1:5f:8f:f2:bb:aa:a7:14:8d:04:6c:
a2:77:b5:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaCu5DgeI409RkNNo9V3otCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZDJlZDcxNjVjYjUxYmNkMjgwNjhiMjk3MDIzNWNkYmQw
MTI4MGIwHhcNMjYwOTE3MTAyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTlkM2RjMGI3MWNmOTExZjE2ZjY0MjBiNDU2ZWU3MTlkMmMwZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dfg8HGlkLD47hATzz7L96Qho1fy
8ueSJHcC+9alEkH2iFEhLyQNDIjv9VRj1zfIXsnym5IS2/FKNyjU9hJw46cNc2d0
LRuJU3eoMz030VYH63vdOF1igOPwqm/865Ac34fnKxdsiV+F7lvemLD/2qkTeL4Z
FXn80AD9lNzQPnrasCRG8KrPLdKv+2Iw25hsYeuMFipV1Td3d4KMqtx3xTUJ+yMy
KbVCuzd4scJXkKkzPNTJux0F8HOIJLOlDAFmGblubyaow2SlClLgPIvkE7AewMaL
Tt9e9zFQOwHfNN5S2AFDVL9H4fJlZsyMtbozbfaCmtLHyNxe2OSggB10GQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEGdPcC3HPkR8W9kILRW7nGdLA77MB8GA1UdIwQY
MBaAFKbS7XFly1G80oBospcCNc29ASgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHRMdGNXWExVYnpTZ0dpeWx3STF6YjBCS0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8zZTVkNWYtZWNlOC00MmIyLWE2N2Mt
MWJmYzMyODFlODI1LzEvUVowOXdMY2MtUkh4YjJRZ3RGYnVjWjBzRHZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8zZTVkNWYtZWNlOC00MmIyLWE2N2MtMWJmYzMyODFlODI1
LzEvcHRMdGNXWExVYnpTZ0dpeWx3STF6YjBCS0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW83AMA8E
AgACMAkDBwAgAQZ8DagwDQYJKoZIhvcNAQELBQADggEBAB73nygnA9oNrk3T9jEM
8we1lyq2Tk7u5aqAIB3RXjqwDm1YwO2buk+KfvRrCFi58t/X/e89wuNg8ivDSmYF
NzIdMhUS0OLIQaN/MUBKSm1KOL0NKJuVMzMJ26G6yi4zyZpO9fHp4CPetqR1P024
pWlTkdIbhE2TVRHsxSWXfsqH4jdyU+eoM9pTXBwYSpczNTcikb/LFGblQOmJBO96
xgGtd1WCYRI2XS7CzAgCaYfJL6GadV6KYW1dLzD+ia5NzHQM94blzSaQmdizFNan
+wjcDs4cT6FBhdRgrzMYI89Jy1OiB24+HC8HNcLaA7CMumrBX4/yu6qnFI0EbKJ3
tUM=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:01:05 2026 by rpki-client