Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QUgTsjXDiYKwk-4A0Ppmg-DUUnQ.roa
File: QUgTsjXDiYKwk-4A0Ppmg-DUUnQ.roa (raw, json)
Hash identifier: GJO/fGtmpUkTEi13osgazOU72RHlam0WcP8pfKugnTs=
Subject key identifier: 41:48:13:B2:35:C3:89:82:B0:93:EE:00:D0:FA:66:83:E0:D4:52:74
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0198CDFA39D1E6B3A9C13F3B628CA6739071
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QUgTsjXDiYKwk-4A0Ppmg-DUUnQ.roa
Signing time: Thu 21 Aug 2025 18:53:04 +0000
ROA not before: Thu 21 Aug 2025 18:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48753
IP address blocks: 80.97.160.0/24 maxlen: 24
85.121.148.0/24 maxlen: 24
194.102.104.0/24 maxlen: 24
217.156.66.0/24 maxlen: 24
217.156.67.0/24 maxlen: 24
217.156.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:fa:39:d1:e6:b3:a9:c1:3f:3b:62:8c:a6:73:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 21 18:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=414813b235c38982b093ee00d0fa6683e0d45274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:1a:39:d7:ec:6d:01:82:8d:4d:3e:a7:4a:
30:92:b8:06:e3:d6:e0:c7:e2:e1:82:9f:a3:e3:68:
eb:85:05:3e:65:29:63:6a:86:aa:9d:a4:44:ca:7a:
ff:9a:90:c1:dd:fc:39:2c:23:b5:b2:76:27:6b:92:
39:1c:b9:cc:3f:02:dd:d8:81:1e:bd:83:2f:db:f1:
da:49:47:af:1d:36:7a:b5:a4:0f:9b:ea:37:b9:a9:
1d:8e:59:1c:4c:0e:f9:7f:08:50:e1:c7:ae:6d:cf:
45:6d:58:4e:33:83:e3:86:ae:22:33:67:cf:18:8c:
12:cf:94:90:c5:8b:dd:eb:32:e0:06:91:63:15:46:
0c:f1:c1:0a:61:72:a3:0a:26:42:15:3c:13:00:2b:
0c:d6:2e:0e:54:e3:a3:95:ad:4a:61:59:42:eb:4a:
3a:f1:c5:ec:50:98:74:f0:7b:ac:8f:a6:b6:d7:19:
ae:22:cc:73:cc:14:86:8c:ea:ec:10:15:fa:24:b3:
67:91:f4:25:e7:94:ff:ed:a8:a4:15:c1:47:73:ef:
0b:13:07:16:7a:af:e4:87:11:eb:f5:3b:45:f7:fd:
ea:aa:f4:ee:c8:a4:96:dd:69:40:75:a5:5c:c6:48:
14:16:a8:be:ca:22:91:6b:39:ab:64:7a:5b:94:f9:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:13:B2:35:C3:89:82:B0:93:EE:00:D0:FA:66:83:E0:D4:52:74
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QUgTsjXDiYKwk-4A0Ppmg-DUUnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.160.0/24
85.121.148.0/24
194.102.104.0/24
217.156.66.0/23
217.156.122.0/24
Signature Algorithm: sha256WithRSAEncryption
19:52:0a:4d:e9:6f:f9:f7:13:7a:b8:a1:1c:19:51:aa:27:fa:
cd:69:63:42:e4:58:bd:7a:5e:22:b6:11:56:47:57:ed:e4:ee:
65:e2:8c:2a:25:14:fc:d1:94:36:02:21:f5:c4:3e:8f:1c:38:
16:50:45:4f:6b:03:f9:23:0c:05:d0:cc:00:48:02:f6:11:02:
da:55:f7:df:8a:a7:3f:ca:39:64:98:4c:cb:67:d3:13:b4:95:
dc:ce:11:1f:df:6a:b3:45:c1:a6:f0:42:ee:d1:00:a2:23:46:
1e:f5:f8:4b:96:db:41:1e:20:11:df:dd:3a:87:81:af:94:94:
f1:7d:2d:55:15:83:ac:a7:bc:45:a1:7a:2c:d1:4f:1c:83:96:
31:24:47:b3:10:4e:de:45:0b:90:7b:22:54:89:00:50:68:13:
9a:14:46:fa:82:19:74:3c:74:41:cb:59:2e:56:1c:12:ec:30:
4a:c8:9c:1c:f0:cf:39:d2:69:96:64:20:d3:23:ce:b3:53:ff:
45:a5:ea:1f:97:a5:1b:b7:91:d0:f4:df:e7:48:af:bb:20:32:
f5:00:4f:41:5f:42:cf:99:f4:db:fa:2f:7b:24:2c:ea:42:8b:
24:3a:92:a5:72:b6:af:36:3f:40:d4:0b:93:82:0e:5e:be:56:
05:2e:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:57 2025 by rpki-client