Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/QcGmgONWTyq5Fz8rEzipqonOAWw.roa
File: QcGmgONWTyq5Fz8rEzipqonOAWw.roa (raw, json)
Hash identifier: 22mskH997ckztTLrFVqkKSOahK8av0gX4PoZWQuu36A=
Subject key identifier: 41:C1:A6:80:E3:56:4F:2A:B9:17:3F:2B:13:38:A9:AA:89:CE:01:6C
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 019970A630DFE835A2AC4E0A6AB80C3015E5
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/QcGmgONWTyq5Fz8rEzipqonOAWw.roa
Signing time: Mon 22 Sep 2025 08:59:23 +0000
ROA not before: Mon 22 Sep 2025 08:59:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209040
IP address blocks: 46.167.40.0/21 maxlen: 24
178.19.80.0/20 maxlen: 24
185.54.116.0/22 maxlen: 24
216.31.64.0/18 maxlen: 24
2a00:f420::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:a6:30:df:e8:35:a2:ac:4e:0a:6a:b8:0c:30:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Sep 22 08:59:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41c1a680e3564f2ab9173f2b1338a9aa89ce016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:95:5f:19:84:eb:cb:42:1b:27:75:43:94:
e3:0b:93:6e:a0:96:a1:db:cd:cd:6c:95:36:53:13:
ac:78:b4:34:3c:24:6d:d7:c4:dc:e5:93:9d:cd:33:
10:8d:38:21:11:a6:1d:fb:03:59:a1:17:3a:29:75:
d0:45:e5:a7:01:d0:70:05:cd:50:c6:69:a0:ae:55:
bc:7f:cd:59:06:09:db:2e:fb:0f:9a:9b:06:0b:f9:
e5:38:42:9d:63:b7:c0:22:09:8a:04:58:36:3a:7f:
6f:e7:67:e9:a7:6c:5c:0b:39:21:61:d7:53:ab:21:
93:07:ef:83:a4:ee:b1:1a:3b:12:d5:70:a5:be:e2:
5b:ac:ca:77:8c:d2:ba:a0:90:c6:22:bc:e4:b6:ce:
8c:85:5f:b8:35:66:35:e3:1b:67:6b:9c:01:27:0f:
96:74:9a:34:47:b7:d8:73:1b:05:7c:d6:d7:c7:98:
dc:8e:94:f0:65:32:34:27:6f:f9:b3:1d:1f:93:b8:
2d:16:e4:52:79:aa:29:1d:f5:54:7e:83:84:73:fc:
fb:22:32:be:9d:ee:8c:68:7d:c9:d1:da:44:ab:72:
44:5b:cf:d0:39:7f:41:12:1d:05:7e:45:97:86:55:
bc:f5:00:40:27:a2:61:b4:ba:fb:68:a7:5c:52:a9:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C1:A6:80:E3:56:4F:2A:B9:17:3F:2B:13:38:A9:AA:89:CE:01:6C
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/QcGmgONWTyq5Fz8rEzipqonOAWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.167.40.0/21
178.19.80.0/20
185.54.116.0/22
216.31.64.0/18
IPv6:
2a00:f420::/32
Signature Algorithm: sha256WithRSAEncryption
bd:24:ba:ea:50:e4:99:62:2d:b3:56:a1:8c:30:3f:02:33:6d:
21:88:7a:0b:b4:ef:13:33:a8:51:01:96:f6:e3:81:d3:d3:18:
66:91:ae:fb:22:3e:7e:10:d3:1e:71:1e:4e:09:9d:66:5b:3f:
94:7c:8c:7f:63:89:63:66:8f:a8:74:8a:00:1e:37:2f:54:24:
8e:d0:60:c8:d6:a0:00:0c:a6:03:8c:5d:16:21:7e:a8:5e:a0:
61:eb:ea:cb:10:83:89:48:bd:53:aa:3c:b1:81:2c:8e:34:fb:
bd:5e:0c:27:3a:d3:71:a9:74:ee:80:0d:cc:25:dc:99:b3:4a:
59:31:2d:61:e1:0d:00:d4:7b:3e:be:10:13:7c:49:5e:c0:05:
f9:77:0f:1f:67:a4:78:c8:0b:2e:e8:3c:38:0d:22:9e:f6:17:
6c:a8:23:75:3e:88:d6:33:67:cf:3b:ef:63:ff:a5:09:d7:4f:
ba:c1:7e:9d:c4:38:83:0d:02:6e:c8:4c:1b:5f:b9:be:3b:09:
54:43:31:c3:25:e6:d2:d4:05:e3:33:44:28:65:a0:1d:15:65:
85:5a:3e:9d:ce:47:63:83:d8:1f:3d:df:2e:6b:ac:3d:7e:66:
20:2f:2b:88:70:8e:2f:47:2a:75:c8:48:11:4a:21:11:c6:46:
f8:d8:9e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:42 2025 by rpki-client