Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QSOzM-EAIClvhkGuIuLiqjJtsHI.roa
File: QSOzM-EAIClvhkGuIuLiqjJtsHI.roa (raw, json)
Hash identifier: tszkuzqeI9tDplL7390a4hFaYComoiWrg7CuxaMaY60=
Subject key identifier: 41:23:B3:33:E1:00:20:29:6F:86:41:AE:22:E2:E2:AA:32:6D:B0:72
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368C24A907D156D374F55C5A985F6C0
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QSOzM-EAIClvhkGuIuLiqjJtsHI.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56594
IP address blocks: 217.145.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c2:4a:90:7d:15:6d:37:4f:55:c5:a9:85:f6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4123b333e10020296f8641ae22e2e2aa326db072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:1e:77:aa:55:89:77:04:62:f9:c2:e7:81:
65:75:dc:e2:dc:9d:c9:1c:4a:0f:fc:d6:54:d2:92:
5b:dc:97:6d:82:d5:20:85:ec:ae:ef:55:ad:c0:80:
ac:2c:d5:b7:94:27:60:f9:93:0b:22:be:49:bc:a3:
cb:77:62:00:88:31:b9:b3:f0:dc:c3:fd:d1:30:cc:
cf:36:ce:38:96:b9:f4:bf:52:34:ef:e1:d9:f4:d5:
a5:3d:3c:d1:67:b8:1b:e6:d2:f3:83:21:37:df:da:
cd:c0:53:5a:aa:0b:24:3b:fa:b8:75:4d:88:c0:73:
61:5c:a8:bd:20:9f:66:21:cc:8f:53:20:1f:15:53:
2f:6d:95:2c:c9:7d:bc:90:3f:03:69:82:b3:73:10:
50:1c:59:63:d2:7b:bb:17:0c:b2:20:fe:f8:6d:ba:
e2:f3:8d:95:34:de:20:f5:cc:07:7b:65:2c:0a:17:
d3:7a:80:fb:22:f5:52:4d:ce:f2:ce:3c:55:86:25:
70:e7:ff:dc:a9:cb:94:c0:af:30:e5:59:04:47:50:
6c:cc:4e:84:45:f9:a6:aa:30:1f:5d:b0:ec:51:d4:
68:67:39:3a:e4:85:19:6b:b2:d1:2f:44:37:d7:50:
6f:0c:44:7f:1b:a1:a1:b4:6c:f6:82:c1:7c:53:c6:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:23:B3:33:E1:00:20:29:6F:86:41:AE:22:E2:E2:AA:32:6D:B0:72
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QSOzM-EAIClvhkGuIuLiqjJtsHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.79.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a4:a8:3d:57:ee:29:13:91:64:ae:23:27:56:44:19:61:95:
e9:05:11:7f:c7:7c:5d:d2:6a:d0:e6:00:08:69:a2:48:8d:ee:
b0:7e:60:28:5e:e8:fa:f4:0f:38:57:54:e8:dd:35:2e:b8:62:
be:dd:d1:0b:ad:42:99:89:64:ca:e7:02:ec:8d:f0:48:7a:76:
0a:75:81:88:a6:38:ee:d5:07:49:c8:33:27:20:01:50:82:c0:
37:c4:ee:9c:a6:ad:98:60:c1:78:c3:3e:a1:fb:fd:99:3d:ae:
db:1f:19:48:15:68:bd:ad:6f:31:1b:99:7a:7b:6d:c6:7a:90:
63:da:6f:61:7b:78:ae:18:57:f6:c9:6e:5a:bb:be:24:18:47:
48:c5:4f:ea:d1:ed:2d:6c:4e:2f:00:fa:a8:31:2c:ad:e2:ec:
9e:e9:01:95:af:74:41:33:36:f2:04:ca:fc:5a:c2:7b:70:3f:
66:d7:c7:76:50:ee:b0:f2:f4:f7:e8:bc:40:1c:45:8b:14:90:
e0:69:3b:67:7a:88:2a:33:5d:0d:44:e6:d2:ae:86:44:a7:9e:
3b:08:9c:99:ae:3c:f3:14:72:11:27:01:68:6a:cb:af:0f:be:
d8:f8:83:9a:9a:28:aa:06:16:40:71:e3:d0:e4:af:9f:13:eb:
b5:12:7d:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMJKkH0VbTdPVcWphfbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTIzYjMzM2UxMDAyMDI5NmY4NjQxYWUyMmUyZTJhYTMyNmRiMDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn50ed6pViXcEYvnC54Flddzi3J3J
HEoP/NZU0pJb3JdtgtUgheyu71WtwICsLNW3lCdg+ZMLIr5JvKPLd2IAiDG5s/Dc
w/3RMMzPNs44lrn0v1I07+HZ9NWlPTzRZ7gb5tLzgyE339rNwFNaqgskO/q4dU2I
wHNhXKi9IJ9mIcyPUyAfFVMvbZUsyX28kD8DaYKzcxBQHFlj0nu7FwyyIP74bbri
842VNN4g9cwHe2UsChfTeoD7IvVSTc7yzjxVhiVw5//cqcuUwK8w5VkER1BszE6E
RfmmqjAfXbDsUdRoZzk65IUZa7LRL0Q311BvDER/G6GhtGz2gsF8U8YioQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEjszPhACApb4ZBriLi4qoybbByMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUVNPek0tRUFJQ2x2aGtHdUl1TGlxakp0c0hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZFPMA0G
CSqGSIb3DQEBCwUAA4IBAQAZpKg9V+4pE5FkriMnVkQZYZXpBRF/x3xd0mrQ5gAI
aaJIje6wfmAoXuj69A84V1To3TUuuGK+3dELrUKZiWTK5wLsjfBIenYKdYGIpjju
1QdJyDMnIAFQgsA3xO6cpq2YYMF4wz6h+/2ZPa7bHxlIFWi9rW8xG5l6e23GepBj
2m9he3iuGFf2yW5au74kGEdIxU/q0e0tbE4vAPqoMSyt4uye6QGVr3RBMzbyBMr8
WsJ7cD9m18d2UO6w8vT36LxAHEWLFJDgaTtneogqM10NRObSroZEp547CJyZrjzz
FHIRJwFoasuvD77Y+IOamiiqBhZAcePQ5K+fE+u1En0Q
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:33 2026 by rpki-client