Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-q7zyHLGuUoLu-YC6VB6o3_a9FI.roa
File: 1-q7zyHLGuUoLu-YC6VB6o3_a9FI.roa (raw, json)
Hash identifier: lPoomwmmUH43mVoiO1y7TC/6icm9uql3P2n3CORbm2A=
Subject key identifier: FA:AE:F3:C8:72:C6:B9:4A:0B:BB:E6:02:E9:50:7A:A3:7F:DA:F4:52
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0198756D3A73DDDBFDA087738D1E418BC25E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-q7zyHLGuUoLu-YC6VB6o3_a9FI.roa
Signing time: Mon 04 Aug 2025 14:12:29 +0000
ROA not before: Mon 04 Aug 2025 14:12:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 194.231.150.0/24 maxlen: 24
194.231.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:6d:3a:73:dd:db:fd:a0:87:73:8d:1e:41:8b:c2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 4 14:12:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faaef3c872c6b94a0bbbe602e9507aa37fdaf452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:79:0e:65:97:82:4a:a7:39:e9:ac:33:3e:
1c:bf:f0:1a:22:30:b3:8e:49:c1:37:a6:32:e0:9f:
30:72:a2:d7:0a:ec:47:71:e1:d9:e7:97:f1:68:e0:
f7:66:be:5d:27:aa:bb:8c:8d:fc:39:0b:84:50:dc:
76:4b:6f:9d:3b:91:e0:8c:90:81:5f:44:eb:a0:cd:
d8:e1:de:78:9c:5e:2f:fa:3c:31:b4:eb:6f:5f:ad:
13:14:a8:7c:37:7a:ec:96:d6:48:a7:ab:1d:54:fd:
3e:ef:eb:4e:c2:8f:7a:3d:34:76:bf:08:10:a0:99:
33:d8:2f:93:8e:dd:7f:97:19:de:8f:a3:90:6f:bb:
41:f2:e2:37:e4:d1:14:62:70:2f:a1:eb:71:cc:75:
3e:e3:c4:59:fa:7f:e4:b7:29:05:0c:ad:c6:8c:e4:
d3:3b:1b:2f:22:66:80:8c:c6:c3:ba:62:85:74:29:
42:4a:14:4f:a1:58:28:7e:e7:9e:35:c9:40:41:71:
4e:1c:69:15:23:bc:24:91:ae:44:3e:fe:82:cc:61:
f6:09:f8:aa:49:e7:fa:43:05:11:5d:f8:47:c9:a7:
4e:b4:c3:0f:52:7e:10:69:99:da:d5:b4:6e:54:02:
2b:b4:f6:79:52:8a:d1:16:e4:6f:a5:fc:e9:40:70:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:F3:C8:72:C6:B9:4A:0B:BB:E6:02:E9:50:7A:A3:7F:DA:F4:52
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-q7zyHLGuUoLu-YC6VB6o3_a9FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.150.0/24
194.231.222.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:09:ab:9c:04:0e:31:cb:e0:61:58:e7:d4:ce:59:5c:10:c2:
74:d4:64:7d:13:c2:6e:6a:5d:cf:cd:a3:e8:bd:21:79:89:c1:
c1:15:ac:fc:46:9b:2b:77:36:89:12:9a:dc:eb:9f:04:4c:f7:
a3:19:96:cf:f7:08:bc:e4:73:fc:fe:79:d3:9e:c1:1a:05:02:
bb:d4:0a:e9:05:f0:e7:f9:79:44:37:7a:ef:ea:c4:73:f5:f2:
67:c7:0e:fc:a3:b7:65:2d:2f:fb:28:66:39:73:88:8d:5e:73:
da:a6:4a:3d:47:ae:5b:c4:05:3d:31:e2:46:d3:95:af:f4:66:
57:b9:08:5d:de:0d:64:18:1c:bb:e0:3d:8c:bb:d3:9f:96:77:
58:40:11:59:06:82:55:cb:92:b3:df:aa:17:4e:45:3f:b3:46:
77:9b:cf:d1:26:b5:80:87:e8:06:49:30:7b:dc:f5:29:5e:bc:
38:07:02:1c:fb:4f:60:cd:13:b0:81:45:e4:51:9b:e1:60:b6:
3b:07:85:3b:5b:42:32:2d:7e:f2:15:f7:b0:09:54:77:8f:ba:
a6:16:2b:24:3e:1b:05:00:2b:13:d7:7c:7c:cb:e6:41:2c:32:
c0:97:10:4b:c7:f6:19:e9:ef:47:8c:4a:3f:4c:3e:90:03:16:
c4:05:31:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:41 2025 by rpki-client