Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/Qx2_RHRctf32pDo6Ld_wrMI7fd8.roa
File: Qx2_RHRctf32pDo6Ld_wrMI7fd8.roa (raw, json)
Hash identifier: hDrMyW+0exQk+cf4mu6FMV+aN0cWstWHfqosAD9dRy0=
Subject key identifier: 43:1D:BF:44:74:5C:B5:FD:F6:A4:3A:3A:2D:DF:F0:AC:C2:3B:7D:DF
Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial: 0199BE5CD240BDE025CADE05C34EE7C1D667
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/Qx2_RHRctf32pDo6Ld_wrMI7fd8.roa
Signing time: Tue 07 Oct 2025 11:09:38 +0000
ROA not before: Tue 07 Oct 2025 11:09:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25424
IP address blocks: 37.9.192.0/21 maxlen: 21
77.92.192.0/19 maxlen: 19
85.92.32.0/19 maxlen: 19
91.109.32.0/21 maxlen: 21
185.157.196.0/22 maxlen: 22
188.244.48.0/20 maxlen: 20
212.111.0.0/19 maxlen: 19
2a00:e580::/29 maxlen: 29
2a0a:3340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:be:5c:d2:40:bd:e0:25:ca:de:05:c3:4e:e7:c1:d6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Validity
Not Before: Oct 7 11:09:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=431dbf44745cb5fdf6a43a3a2ddff0acc23b7ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:6d:ba:41:93:94:71:47:1a:07:bf:03:d4:
02:72:db:71:67:8b:71:a6:5e:a9:0a:8d:86:58:ab:
12:9b:82:7a:b3:f7:42:9e:6d:dc:b9:12:17:6e:e1:
19:b6:65:1e:3b:0a:2c:21:60:79:69:72:32:28:b1:
ee:01:b3:de:b4:83:13:4e:ce:c2:82:22:1a:cc:30:
14:9b:a4:37:7e:67:4c:16:3f:32:6d:85:64:8e:73:
3f:4d:13:4e:48:b3:9b:d8:3a:e0:13:e2:2e:60:60:
95:96:a4:cd:46:2e:26:f8:37:32:cb:e7:36:11:d9:
3c:07:44:10:b7:2a:00:4a:e7:c5:54:51:0f:73:80:
12:b3:60:1c:9a:d9:c7:78:05:e9:8d:7a:4c:00:43:
a2:d7:81:15:4d:e4:d2:35:c6:51:39:12:71:46:18:
df:5a:e5:25:c4:e1:bd:0e:58:93:9a:8c:19:24:68:
64:1e:68:c6:f7:7a:31:5a:96:c9:5f:bd:80:b4:18:
0e:f9:64:80:5d:21:8c:35:e8:9c:91:eb:9a:5d:e5:
d9:6e:86:fd:4e:77:ec:1e:70:c6:31:f1:b1:de:cf:
fc:b6:99:7d:10:73:af:42:db:98:aa:4b:59:b3:7b:
81:bb:46:88:d9:6a:1b:7c:77:d2:d7:e1:f3:62:f0:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:BF:44:74:5C:B5:FD:F6:A4:3A:3A:2D:DF:F0:AC:C2:3B:7D:DF
X509v3 Authority Key Identifier:
keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/Qx2_RHRctf32pDo6Ld_wrMI7fd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.192.0/21
77.92.192.0/19
85.92.32.0/19
91.109.32.0/21
185.157.196.0/22
188.244.48.0/20
212.111.0.0/19
IPv6:
2a00:e580::/29
2a0a:3340::/29
Signature Algorithm: sha256WithRSAEncryption
60:7a:c2:f9:cb:4c:b1:bd:f4:5e:ef:de:71:64:02:ab:68:3c:
7e:bc:b8:4f:87:a2:2d:92:32:c4:6e:ba:b1:bc:ab:98:83:2c:
ab:8b:33:70:b6:8a:1a:e9:e8:e2:7d:44:f1:48:bf:fc:c6:5e:
c2:19:38:f4:c7:0c:57:c9:61:91:fa:31:71:47:a9:99:ad:e3:
b4:8f:39:af:91:4a:82:a2:e0:4c:05:4c:ec:37:88:15:4e:c8:
6a:03:dc:0c:24:be:76:96:ca:c6:8e:92:d8:61:d7:2f:b2:89:
ef:37:7d:f8:15:64:96:4e:e7:90:88:32:69:91:55:72:c3:35:
a7:3f:a7:cd:4b:b5:0d:eb:4c:5b:7b:7e:5d:0a:4c:1c:3a:7e:
fd:0d:07:01:55:0b:d3:64:d7:40:aa:da:53:1e:8f:28:42:2c:
7b:af:69:5d:38:77:ca:69:27:cd:5c:42:a8:63:c4:8d:6a:2d:
e8:f1:54:80:f9:18:84:fe:ef:a5:f0:65:a3:29:66:9f:8e:a9:
44:56:26:b5:85:08:44:b5:0d:13:b3:3f:d3:aa:ea:1e:53:e2:
2a:a5:21:bd:67:9d:b2:50:cc:1e:8b:88:1f:22:05:65:7f:0d:
19:9d:b4:76:b2:29:d5:64:ef:12:6f:26:f4:b1:55:c1:ae:ac:
af:86:97:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:15 2025 by rpki-client