Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QfSpI9eWq95UVvDVluM8Hdj0-tM.roa
File: QfSpI9eWq95UVvDVluM8Hdj0-tM.roa (raw, json)
Hash identifier: dHyEmGxkxfHoNtAOl6qd4HWBgdnaDoU4/B8LnKcFil0=
Subject key identifier: 41:F4:A9:23:D7:96:AB:DE:54:56:F0:D5:96:E3:3C:1D:D8:F4:FA:D3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199E6EAE7BF1D059C2E490E4503F5C9A267
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QfSpI9eWq95UVvDVluM8Hdj0-tM.roa
Signing time: Wed 15 Oct 2025 08:09:38 +0000
ROA not before: Wed 15 Oct 2025 08:09:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.128.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
2a02:2fc0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:ea:e7:bf:1d:05:9c:2e:49:0e:45:03:f5:c9:a2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 15 08:09:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41f4a923d796abde5456f0d596e33c1dd8f4fad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:4e:20:95:49:84:28:67:a6:00:2f:91:e5:
d8:fb:15:0d:e7:6c:14:83:7d:d0:07:51:91:22:08:
34:a2:3f:2f:31:fe:82:c5:6e:25:e4:b2:ed:cf:dd:
ad:75:62:9f:21:b6:b5:ab:c5:b3:98:ab:70:b8:0b:
fa:06:ff:9d:f5:98:3b:a4:7c:22:c2:3e:95:bc:18:
70:87:c5:3e:59:91:8a:fd:27:22:9a:f8:7e:c2:b0:
7a:44:e1:25:f2:06:2f:cb:91:51:6a:f7:d7:6b:ea:
36:d0:c4:47:a1:d9:84:d9:a0:4a:1d:d2:77:a8:60:
39:bb:36:dd:92:e0:1d:27:63:c8:07:59:41:37:a1:
cc:44:51:e1:35:30:b4:e8:ff:44:23:72:29:fa:1a:
7d:4b:e6:52:24:8e:08:1f:b6:b1:92:d8:d4:e4:45:
56:eb:87:83:70:1e:7d:b3:9e:6e:8e:4f:2f:fc:d9:
3b:b7:fa:04:bf:9b:c1:c3:65:f5:1f:9d:4b:f4:69:
49:f1:c8:a6:f6:2d:67:df:a0:23:3e:25:94:74:0e:
65:37:2d:03:30:24:f4:07:76:90:39:ea:b2:10:b1:
ad:e4:c7:dc:2e:23:c3:90:b0:fe:63:13:5b:d4:68:
14:55:18:8a:8a:42:0e:17:cf:1b:c2:5d:33:c6:e1:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:A9:23:D7:96:AB:DE:54:56:F0:D5:96:E3:3C:1D:D8:F4:FA:D3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QfSpI9eWq95UVvDVluM8Hdj0-tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/24
5.231.26.0/24
5.231.105.0/24
89.106.69.0/24
89.106.71.0/24
94.249.175.0/24
IPv6:
2a02:2fc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
a7:1e:6d:7d:d7:94:a7:36:d1:5b:10:d3:e6:a3:41:3c:67:d4:
03:03:0a:5e:15:6d:e7:12:e1:33:4b:a7:80:26:27:a1:62:65:
9a:35:df:ba:3d:9a:8e:92:21:a2:79:a0:da:8c:96:6d:0a:a0:
5c:4b:20:9b:da:5c:3f:b4:11:d7:40:5d:90:8c:23:df:00:f6:
a3:b7:41:92:55:a6:85:8c:b6:75:11:a8:18:d7:f4:bb:ba:07:
e1:27:0c:d1:1f:90:23:69:a5:49:0d:92:1b:c5:90:8a:f7:be:
18:d8:2e:b3:a1:29:55:2f:26:4b:fd:c8:94:bf:df:a7:da:c3:
3d:20:61:e5:8e:fe:cc:fb:cb:fe:b6:75:5f:28:f7:a9:54:8e:
bc:1e:e6:1c:6b:88:e0:ae:9a:c8:f7:67:0f:c5:94:42:52:10:
58:e8:24:7c:24:e5:fe:de:03:ec:57:02:a6:ee:ce:ed:80:22:
e5:2f:3f:c6:e1:f3:45:0c:70:89:04:b3:db:35:d8:0d:64:ae:
bc:17:0a:02:31:bb:8e:e2:8c:ef:64:e0:59:01:41:4c:e1:30:
26:82:1b:ec:8f:fc:85:32:b0:d9:6c:65:25:3c:c7:2a:9f:ba:
9c:2b:87:36:96:da:a8:9e:09:1b:46:42:b5:08:0b:bb:35:c6:
f4:58:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:36 2025 by rpki-client