Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/qatCLbB1wt003ugiHLUeaH6Egzo.roa
File: qatCLbB1wt003ugiHLUeaH6Egzo.roa (raw, json)
Hash identifier: kqMRNz8HFIkfR5BK7WY1x5EiB+ZuSgywUlDGBzooYrs=
Subject key identifier: A9:AB:42:2D:B0:75:C2:DD:34:DE:E8:22:1C:B5:1E:68:7E:84:83:3A
Certificate issuer: /CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Certificate serial: 0196E7259FC0E88CA621AA2E5403EE5604D9
Authority key identifier: EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/qatCLbB1wt003ugiHLUeaH6Egzo.roa
Signing time: Mon 19 May 2025 06:05:24 +0000
ROA not before: Mon 19 May 2025 06:05:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43867
IP address blocks: 91.198.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:25:9f:c0:e8:8c:a6:21:aa:2e:54:03:ee:56:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Validity
Not Before: May 19 06:05:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9ab422db075c2dd34dee8221cb51e687e84833a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:ed:4a:78:45:dd:f5:a3:4f:85:d8:1f:22:
87:1c:0d:22:6c:67:75:58:0e:77:61:80:95:b4:19:
93:90:73:49:a5:89:24:bd:83:9e:97:7e:01:6e:62:
19:c7:01:e5:f4:0f:44:50:04:20:ef:c1:44:c5:f7:
a4:97:03:69:35:c6:0d:3e:5d:0f:e2:37:00:d8:67:
e2:5d:ee:32:bb:49:ee:55:e5:21:2b:5b:0e:5b:68:
78:4d:a2:66:55:0c:90:f0:9a:5b:19:6b:44:d8:69:
73:04:21:ec:df:ce:dd:a0:80:40:03:95:4e:cc:92:
77:de:04:ad:e0:99:74:fd:5a:c0:ee:d3:94:7c:df:
d6:8a:3f:28:52:2e:f4:a4:ff:db:2e:e6:34:58:28:
59:33:f8:07:79:d4:4e:bc:4c:70:93:12:cd:50:84:
f7:d8:f6:3f:74:cd:99:fb:d5:37:56:14:41:31:6f:
25:8e:99:f4:6b:51:ff:c6:57:7b:57:b3:2b:d9:b1:
db:81:88:56:c3:71:bd:5e:5a:d0:67:fa:25:f6:07:
d1:43:9f:bd:eb:a9:52:8f:90:cf:14:7c:f5:da:e5:
67:4e:6b:64:6c:fc:3c:d1:ea:14:d6:56:f2:72:09:
4d:9b:03:94:80:d1:75:49:8e:97:5b:84:8c:bc:d8:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AB:42:2D:B0:75:C2:DD:34:DE:E8:22:1C:B5:1E:68:7E:84:83:3A
X509v3 Authority Key Identifier:
keyid:EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/qatCLbB1wt003ugiHLUeaH6Egzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.194.0/24
Signature Algorithm: sha256WithRSAEncryption
27:87:65:99:49:e3:69:dc:94:2e:4f:71:93:87:78:64:42:fe:
20:33:ec:1d:c4:23:00:49:1a:a5:ec:e2:a0:0e:e8:52:f4:10:
5a:e8:85:24:54:e1:69:4f:2f:b2:d4:0d:57:f3:63:94:19:e1:
bc:1e:91:46:d2:8d:13:6e:49:5d:ad:d2:eb:1f:92:70:19:d5:
9a:a2:a9:6b:47:e0:f0:cd:a1:c2:45:10:2f:71:b9:8e:38:73:
87:bb:9a:d0:65:71:1f:85:15:33:56:8c:59:1e:8b:2a:cb:90:
c6:02:4a:4d:8f:1d:86:18:00:34:2d:a4:38:69:39:62:ac:a7:
16:92:05:5e:1c:81:6a:7b:f4:10:b4:4e:5d:d8:4e:3f:3c:31:
c3:6c:e4:c7:ef:a0:33:3d:50:9a:a1:33:8e:dc:07:4b:c7:ac:
11:ea:4c:f8:86:6a:7a:16:37:b9:7c:4e:d2:78:80:99:7b:bf:
74:02:ce:41:83:a2:2f:f7:8c:bf:71:0c:94:a5:39:34:16:37:
cd:00:00:eb:48:e2:e1:dd:0b:30:fb:43:5d:6f:46:e0:6e:f2:
0e:47:90:16:2d:dc:9f:ef:86:ae:06:c3:09:9e:31:86:61:6d:
93:90:05:7e:3e:ef:5b:27:18:37:7b:cf:a7:bc:d3:35:59:d9:
8f:dd:dc:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbnJZ/A6IymIaouVAPuVgTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTM2ZWJhOGQ1YjNmZTk1ZjMyMDFhYjJkMTE2NzVlYTAx
Yzc4MWMwHhcNMjUwNTE5MDYwNTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWFiNDIyZGIwNzVjMmRkMzRkZWU4MjIxY2I1MWU2ODdlODQ4MzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNDtSnhF3fWjT4XYHyKHHA0ibGd1
WA53YYCVtBmTkHNJpYkkvYOel34BbmIZxwHl9A9EUAQg78FExfeklwNpNcYNPl0P
4jcA2GfiXe4yu0nuVeUhK1sOW2h4TaJmVQyQ8JpbGWtE2GlzBCHs387doIBAA5VO
zJJ33gSt4Jl0/VrA7tOUfN/Wij8oUi70pP/bLuY0WChZM/gHedROvExwkxLNUIT3
2PY/dM2Z+9U3VhRBMW8ljpn0a1H/xld7V7Mr2bHbgYhWw3G9XlrQZ/ol9gfRQ5+9
66lSj5DPFHz12uVnTmtkbPw80eoU1lbycglNmwOUgNF1SY6XW4SMvNgMZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmrQi2wdcLdNN7oIhy1Hmh+hIM6MB8GA1UdIwQY
MBaAFO7jbrqNWz/pXzIBqy0RZ16gHHgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VOdXVvMWJQLWxmTWdHckxSRm5YcUFjZUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iMDZlMDctMDFmNS00M2RjLWI4MGIt
ZTVjOGNjODZhYmQyLzEvcWF0Q0xiQjF3dDAwM3VnaUhMVWVhSDZFZ3pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iMDZlMDctMDFmNS00M2RjLWI4MGItZTVjOGNjODZhYmQy
LzEvN3VOdXVvMWJQLWxmTWdHckxSRm5YcUFjZUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8bCMA0G
CSqGSIb3DQEBCwUAA4IBAQAnh2WZSeNp3JQuT3GTh3hkQv4gM+wdxCMASRql7OKg
DuhS9BBa6IUkVOFpTy+y1A1X82OUGeG8HpFG0o0TbkldrdLrH5JwGdWaoqlrR+Dw
zaHCRRAvcbmOOHOHu5rQZXEfhRUzVoxZHosqy5DGAkpNjx2GGAA0LaQ4aTlirKcW
kgVeHIFqe/QQtE5d2E4/PDHDbOTH76AzPVCaoTOO3AdLx6wR6kz4hmp6Fje5fE7S
eICZe790As5Bg6Iv94y/cQyUpTk0FjfNAADrSOLh3Qsw+0Ndb0bgbvIOR5AWLdyf
74auBsMJnjGGYW2TkAV+Pu9bJxg3e8+nvNM1WdmP3dx3
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:52 2025 by rpki-client