Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/qF7Yer0u7ziOGGwDeljcv2iin4k.roa
File: qF7Yer0u7ziOGGwDeljcv2iin4k.roa (raw, json)
Hash identifier: ahTinSaOPP9oVbrP+xhco0U3iDA/GD0BuDeaOSksTIc=
Subject key identifier: A8:5E:D8:7A:BD:2E:EF:38:8E:18:6C:03:7A:58:DC:BF:68:A2:9F:89
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 0198A911F9D36B180A85F64AF886ECEB7BD8
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/qF7Yer0u7ziOGGwDeljcv2iin4k.roa
Signing time: Thu 14 Aug 2025 14:53:04 +0000
ROA not before: Thu 14 Aug 2025 14:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 45.80.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a9:11:f9:d3:6b:18:0a:85:f6:4a:f8:86:ec:eb:7b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Aug 14 14:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a85ed87abd2eef388e186c037a58dcbf68a29f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:df:74:cc:17:a4:55:27:38:2f:28:db:4d:
71:74:ca:55:47:b8:0b:1c:b1:22:42:0a:67:a8:a0:
3b:62:74:73:30:28:12:79:2c:8a:9e:6c:dd:88:ab:
1f:f8:f7:fe:78:40:76:0b:4d:45:ac:87:c7:ff:91:
1f:77:14:18:49:d4:32:84:0a:7b:34:b4:d5:e5:e1:
23:74:7f:e5:3a:70:9c:a7:3d:bd:bd:65:69:e7:37:
b2:2c:46:86:2a:30:ec:ec:2c:57:8c:d6:4e:0d:05:
af:24:fa:ed:41:d9:e7:b7:b2:70:82:5f:86:4e:8b:
07:cd:67:1b:79:dd:c6:e5:c8:1b:9b:4b:88:2f:63:
c8:a9:ad:48:0c:5c:ec:59:45:ae:38:15:07:72:a2:
c0:c8:a3:2e:ac:17:71:90:58:be:61:a5:6e:b3:f0:
34:1d:48:16:98:c4:a7:7b:4a:b3:da:d5:4d:56:e3:
fa:c1:2d:4d:12:b8:2a:9f:24:e8:37:e2:d5:ae:06:
de:f5:e5:4d:9d:cb:e6:c6:40:49:9a:12:7d:5a:10:
c0:11:eb:8a:3f:88:0b:13:13:07:d6:ac:c6:da:c0:
a8:db:c2:54:3f:cd:20:ff:5e:63:a0:a5:99:d1:2e:
8d:a9:86:ec:77:5c:06:e1:2f:99:6e:77:7c:9a:39:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:D8:7A:BD:2E:EF:38:8E:18:6C:03:7A:58:DC:BF:68:A2:9F:89
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/qF7Yer0u7ziOGGwDeljcv2iin4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:29:f2:8e:8d:ab:ea:87:97:5b:2d:e1:ff:be:04:c5:0b:d6:
40:e1:09:a4:8f:ea:d8:5b:26:0d:7a:a8:ee:63:78:2f:02:e8:
c4:9f:36:01:16:5b:12:bb:0e:3d:5a:82:68:e3:81:35:34:c1:
a1:b0:7e:f1:6a:8a:cb:d6:e0:ae:7a:e9:79:45:25:54:43:0d:
4d:73:14:02:f5:29:30:05:50:0e:d6:8a:23:71:0c:63:e1:c9:
23:1c:0f:12:cd:70:7b:ec:d8:25:25:58:2f:01:bf:e7:cd:47:
38:3e:50:fb:62:57:47:d0:dd:73:02:fc:be:da:5d:05:7a:29:
25:bb:9d:aa:ec:fc:5b:99:a9:67:2f:ea:5d:5f:25:1c:a7:1e:
fb:11:14:81:e9:28:dc:7d:18:8b:c2:3b:b6:ba:98:da:e6:61:
04:fe:41:b7:65:a2:87:44:dc:b6:2a:3b:79:31:79:8d:9b:76:
9f:1c:5a:00:dc:52:1b:bd:8b:6b:dc:6b:5a:93:e2:5d:ae:bc:
50:98:63:d2:87:8a:56:ca:05:5d:e9:79:3c:52:a0:38:0d:70:
f6:1b:8b:89:28:fc:0e:4e:41:d2:8c:e7:e8:f4:ed:4f:c2:f4:
b4:eb:c9:dc:5f:60:92:bb:11:b8:76:eb:61:9e:b8:26:dc:da:
72:28:05:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZipEfnTaxgKhfZK+Ibs63vYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm
YWM5YWUwHhcNMjUwODE0MTQ1MzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODVlZDg3YWJkMmVlZjM4OGUxODZjMDM3YTU4ZGNiZjY4YTI5Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLvfdMwXpFUnOC8o201xdMpVR7gL
HLEiQgpnqKA7YnRzMCgSeSyKnmzdiKsf+Pf+eEB2C01FrIfH/5EfdxQYSdQyhAp7
NLTV5eEjdH/lOnCcpz29vWVp5zeyLEaGKjDs7CxXjNZODQWvJPrtQdnnt7Jwgl+G
TosHzWcbed3G5cgbm0uIL2PIqa1IDFzsWUWuOBUHcqLAyKMurBdxkFi+YaVus/A0
HUgWmMSne0qz2tVNVuP6wS1NErgqnyToN+LVrgbe9eVNncvmxkBJmhJ9WhDAEeuK
P4gLExMH1qzG2sCo28JUP80g/15joKWZ0S6NqYbsd1wG4S+Zbnd8mjnTlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKhe2Hq9Lu84jhhsA3pY3L9oop+JMB8GA1UdIwQY
MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt
MjY3NjY5ZjM1NjQ4LzEvcUY3WWVyMHU3emlPR0d3RGVsamN2MmlpbjRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4
LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVCuMA0G
CSqGSIb3DQEBCwUAA4IBAQBbKfKOjavqh5dbLeH/vgTFC9ZA4Qmkj+rYWyYNeqju
Y3gvAujEnzYBFlsSuw49WoJo44E1NMGhsH7xaorL1uCueul5RSVUQw1NcxQC9Skw
BVAO1oojcQxj4ckjHA8SzXB77NglJVgvAb/nzUc4PlD7YldH0N1zAvy+2l0Feikl
u52q7PxbmalnL+pdXyUcpx77ERSB6SjcfRiLwju2upja5mEE/kG3ZaKHRNy2Kjt5
MXmNm3afHFoA3FIbvYtr3Gtak+JdrrxQmGPSh4pWygVd6Xk8UqA4DXD2G4uJKPwO
TkHSjOfo9O1PwvS068ncX2CSuxG4duthnrgm3NpyKAWE
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:41 2025 by rpki-client