Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/QtZsqFLqtrL8olVDp6VSmjVajiQ.roa
File: QtZsqFLqtrL8olVDp6VSmjVajiQ.roa (raw, json)
Hash identifier: YhuUvItgnCDVt791lrn/5FAJLBN1QJhZrza7GAVkh44=
Subject key identifier: 42:D6:6C:A8:52:EA:B6:B2:FC:A2:55:43:A7:A5:52:9A:35:5A:8E:24
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 0199DC6F7D83030299EE500864A0B368F26F
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/QtZsqFLqtrL8olVDp6VSmjVajiQ.roa
Signing time: Mon 13 Oct 2025 07:18:38 +0000
ROA not before: Mon 13 Oct 2025 07:18:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24836
IP address blocks: 193.111.163.0/24 maxlen: 24
2001:67c:2a1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:6f:7d:83:03:02:99:ee:50:08:64:a0:b3:68:f2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Oct 13 07:18:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42d66ca852eab6b2fca25543a7a5529a355a8e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:7d:c2:06:e7:52:77:08:d1:c8:a9:09:ac:
b9:ae:7f:80:f2:44:87:50:03:db:f9:03:df:c1:13:
05:7c:59:01:fd:a0:49:fd:c1:48:83:10:24:2e:f1:
3f:da:f1:aa:d2:7b:d8:27:93:6c:7c:54:db:db:37:
a7:2d:b2:42:f3:29:f5:f6:a1:92:52:00:80:47:3d:
3b:2e:dd:a4:69:18:dc:da:8b:82:9a:66:88:15:9c:
31:1d:5f:9c:96:eb:43:8e:70:45:7a:1a:eb:35:5d:
a9:4a:1f:cf:2d:d1:7b:35:a6:b4:97:02:29:4e:50:
07:05:ec:4b:34:50:24:7e:d6:7e:d4:09:88:61:f1:
0d:d7:90:15:65:88:29:a5:0d:53:df:64:f2:26:07:
d0:48:f0:3e:2c:3e:36:2c:b0:ed:82:79:51:4f:98:
4e:59:8d:08:b8:d6:3e:e8:18:cb:c3:84:02:85:0a:
94:c3:b2:52:34:8c:55:79:d5:fd:97:32:ec:d9:fe:
f1:18:5a:61:48:76:52:48:35:df:cb:5f:ea:32:ff:
05:4b:2f:47:d3:58:12:ed:1d:1b:cd:cc:74:0a:30:
2b:d1:9e:0f:2a:fa:3c:d1:f7:9b:9b:6d:28:c2:c0:
04:90:d5:82:8b:24:8e:9c:59:34:57:c0:69:04:19:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D6:6C:A8:52:EA:B6:B2:FC:A2:55:43:A7:A5:52:9A:35:5A:8E:24
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/QtZsqFLqtrL8olVDp6VSmjVajiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.163.0/24
IPv6:
2001:67c:2a1c::/48
Signature Algorithm: sha256WithRSAEncryption
53:38:d9:f7:a6:41:1a:ed:67:03:a7:c2:96:73:8d:d2:be:f7:
50:23:13:e5:7d:ca:6d:4e:1f:8d:55:31:3a:2a:5d:9d:d4:76:
c5:b4:54:43:bd:10:b5:4e:4d:b9:0a:a3:2d:20:ea:d3:12:90:
fc:37:61:24:18:10:e8:d4:d4:61:b9:dc:e0:8e:db:d4:26:e6:
04:cb:3b:b4:40:d1:34:10:99:b6:65:af:52:26:bb:fe:2f:2b:
40:be:7f:22:90:84:d0:d0:3a:2e:68:df:d5:2b:c4:e3:81:cc:
84:b3:ac:03:64:10:64:a9:fa:7a:26:08:00:ef:3e:a8:cb:42:
82:60:e3:c1:1d:d3:81:bb:65:7e:c4:6c:3d:f4:04:09:24:df:
3c:2c:44:9d:c0:82:f0:f9:fe:05:f9:17:a1:ce:3d:ff:54:d3:
8e:a4:8a:f6:24:5c:07:46:63:77:a3:c8:99:58:8f:9f:91:66:
c7:35:4c:e6:e2:cb:a9:16:f0:65:a6:08:30:c6:b0:c5:6c:91:
8c:d2:c4:ed:14:5d:98:6c:eb:a4:27:62:98:a3:46:c0:f6:20:
b7:46:f7:3a:6e:69:9b:20:05:f6:0a:b0:08:68:b7:66:6f:27:
06:1f:84:42:c0:03:e8:d2:aa:a7:73:da:bf:0a:74:69:16:6d:
8d:26:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:58 2025 by rpki-client