Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qHvyHkCLPxSVcMLdseWt_PxVfoE.roa
File: qHvyHkCLPxSVcMLdseWt_PxVfoE.roa (raw, json)
Hash identifier: lTROgvpomlgUqBb28v3ikPWav/veCub5BNY3tjqEQXk=
Subject key identifier: A8:7B:F2:1E:40:8B:3F:14:95:70:C2:DD:B1:E5:AD:FC:FC:55:7E:81
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199DC4ADF8E062001B294C6677531B8F33F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qHvyHkCLPxSVcMLdseWt_PxVfoE.roa
Signing time: Mon 13 Oct 2025 06:38:38 +0000
ROA not before: Mon 13 Oct 2025 06:38:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
85.93.8.0/24 maxlen: 24
89.144.15.0/24 maxlen: 24
185.119.16.0/22 maxlen: 24
185.119.16.0/24 maxlen: 24
185.119.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:4a:df:8e:06:20:01:b2:94:c6:67:75:31:b8:f3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 13 06:38:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a87bf21e408b3f149570c2ddb1e5adfcfc557e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:f3:89:8d:c0:fe:74:bd:fa:24:43:d5:95:
61:9d:28:cf:9d:b2:f2:42:fe:88:54:2b:e4:10:23:
79:c8:7b:52:5d:d2:77:f2:c1:65:6e:8b:12:54:01:
c5:19:8d:6d:75:55:55:df:0b:4c:af:41:2b:28:f5:
9d:71:9f:ec:3c:d5:14:76:ec:43:bc:66:88:fc:70:
f0:29:4b:23:9c:96:5d:08:f3:3f:eb:24:46:89:ce:
e4:ce:af:e9:80:84:cb:0d:f9:d3:20:a2:09:71:3f:
37:15:83:af:db:4e:49:8a:ba:6c:c0:f7:ba:91:cf:
7b:a6:ed:0b:32:e3:f6:6c:1b:ee:87:cc:7c:a7:df:
cb:c7:46:10:80:5b:df:36:3c:eb:51:a9:59:ad:d0:
7c:81:f9:fc:38:3f:5b:f2:39:43:cc:9a:75:2e:ea:
10:85:1e:5d:a8:44:d1:03:e0:cc:6e:a6:e4:c9:e5:
d4:42:b6:7e:0b:54:a0:ef:d4:01:42:70:ff:c8:1c:
12:c2:79:33:99:f1:dd:c8:d6:36:db:85:54:da:bb:
aa:d1:84:b9:d9:3c:e0:77:57:da:29:05:af:c6:ba:
df:6d:e8:5e:2c:18:4d:b8:a2:7d:29:ac:19:5b:d2:
be:2e:b6:c7:ce:16:58:29:fe:6f:ac:4a:08:c4:da:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7B:F2:1E:40:8B:3F:14:95:70:C2:DD:B1:E5:AD:FC:FC:55:7E:81
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qHvyHkCLPxSVcMLdseWt_PxVfoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.231.29.0/24
77.90.12.0/24
77.90.42.0/24
85.93.8.0/24
89.144.15.0/24
185.119.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:da:a2:11:f2:84:4e:9c:6c:21:38:cc:aa:8c:b7:bc:c6:a3:
c6:23:f6:7b:bd:d5:43:d9:5f:ec:38:1b:83:dc:df:64:7a:3e:
44:4f:cf:da:18:2e:4a:b0:3a:61:5d:e6:6a:7f:22:6c:5b:be:
12:c6:8a:49:48:bd:5e:bd:a7:b1:cd:24:2f:22:7b:fe:d0:f9:
7f:f7:72:74:c1:a6:83:da:ee:54:a7:5c:da:c1:92:84:36:31:
17:d1:21:65:2f:46:53:6f:e7:03:39:78:3b:5c:a4:ec:01:87:
7c:ad:ff:43:53:76:15:fe:65:11:f2:b3:48:f1:1b:33:40:21:
ee:1e:57:4f:97:92:4a:94:0d:3c:25:c0:61:e1:18:ea:c0:9c:
28:4a:11:b8:68:33:0c:e4:3e:68:61:a1:5e:b7:65:db:1b:c4:
7a:6f:34:27:b5:59:e4:e7:f7:55:70:60:bc:27:ba:14:3f:b4:
a5:fc:08:de:bc:8c:19:2a:f7:f0:5c:04:04:08:11:c0:f2:c2:
da:0b:fc:26:aa:9c:6d:a5:92:f7:43:8c:28:c1:61:cf:f9:23:
39:27:69:06:e4:41:30:8b:91:a9:ea:13:f7:5a:cd:bf:63:ae:
29:69:63:de:de:96:20:61:eb:a3:2f:ad:84:28:d3:55:a6:c3:
d4:10:56:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:56 2025 by rpki-client