Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QfFKc0VNGcQVinepsogJLPPqMzE.roa
File: QfFKc0VNGcQVinepsogJLPPqMzE.roa (raw, json)
Hash identifier: AzLNabf1qs+22ByCWBEvpNurJBRPCnXQbQPBNSGr3Mc=
Subject key identifier: 41:F1:4A:73:45:4D:19:C4:15:8A:77:A9:B2:88:09:2C:F3:EA:33:31
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01999463A8240CD1F494EDE3EAED80532E4A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QfFKc0VNGcQVinepsogJLPPqMzE.roa
Signing time: Mon 29 Sep 2025 07:33:03 +0000
ROA not before: Mon 29 Sep 2025 07:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 194.231.142.0/24 maxlen: 24
194.231.156.0/24 maxlen: 24
195.86.149.0/24 maxlen: 24
195.86.150.0/24 maxlen: 24
195.86.151.0/24 maxlen: 24
195.86.152.0/24 maxlen: 24
195.86.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:63:a8:24:0c:d1:f4:94:ed:e3:ea:ed:80:53:2e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 29 07:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41f14a73454d19c4158a77a9b288092cf3ea3331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:81:60:28:e2:af:9c:5a:d5:8d:4e:c6:9c:
ef:55:63:f1:5b:bb:8c:0c:ff:43:08:f1:96:af:50:
d7:1a:bf:72:5f:7e:73:d6:75:cc:0b:77:97:76:b2:
a5:73:c0:19:71:1c:a1:a1:c2:7b:19:54:7b:32:03:
fe:3e:3e:91:7d:8a:2c:ba:21:aa:72:83:a4:d2:84:
35:71:a0:ba:70:d1:a9:b8:45:cc:7c:0e:85:22:25:
fc:b8:cf:02:57:90:d9:d1:45:59:9e:67:3c:4b:1d:
68:ff:65:ce:3f:0e:e6:b8:33:ad:1f:da:cf:47:b1:
e5:43:d1:59:6d:81:a2:fc:3a:67:3c:be:c2:f1:37:
77:23:3a:34:57:62:62:ff:89:81:e2:f9:07:20:01:
c4:a8:6e:04:3c:38:fd:71:50:55:13:6e:9f:d6:0d:
d8:ef:d5:0f:c9:0e:6b:d0:2b:0b:9c:e3:7e:cd:17:
ec:d0:39:c7:03:d4:59:3a:3b:59:7b:03:e9:67:ec:
56:cc:4d:19:68:fc:41:f6:86:49:39:41:df:fb:43:
2e:48:68:8a:5e:8d:d7:26:d2:32:71:6d:27:a7:8c:
64:a6:fe:54:f1:de:bd:3c:a4:38:b8:33:b0:e5:b8:
da:29:d2:04:b3:e1:20:22:c7:2e:f9:b5:75:43:58:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F1:4A:73:45:4D:19:C4:15:8A:77:A9:B2:88:09:2C:F3:EA:33:31
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QfFKc0VNGcQVinepsogJLPPqMzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.142.0/24
194.231.156.0/24
195.86.149.0-195.86.153.255
Signature Algorithm: sha256WithRSAEncryption
54:80:16:a1:16:da:11:a9:04:e4:81:4a:0c:91:2d:56:a0:7e:
b8:02:37:fa:b8:64:98:19:16:dc:a8:b3:1a:44:8b:c9:44:39:
99:0e:a6:ce:49:a3:5a:19:61:dd:98:41:7f:4b:f4:ac:9b:cd:
2c:b0:ee:e8:90:48:0b:c6:41:ea:a0:0b:1d:56:d2:27:32:9f:
dc:0a:17:0a:3d:ac:83:90:13:25:3e:1b:81:85:3a:f2:2c:43:
4a:b1:91:2f:23:29:83:16:ab:5a:5a:70:5a:c6:1c:49:ab:2d:
17:e9:e2:f1:62:e7:3d:39:a5:7a:57:36:8d:2d:33:f0:11:0d:
d1:69:05:78:b3:1e:c1:64:cd:65:91:c4:bb:69:f5:de:fb:33:
54:66:97:4e:22:43:cc:ef:c3:9a:d2:91:6d:b6:16:8e:96:16:
8f:f0:5f:de:9a:02:04:7f:16:d5:8e:11:f5:b1:19:fc:41:d8:
d7:e1:80:9b:8e:30:32:55:26:cb:b2:55:12:6f:6e:dd:20:6d:
60:06:01:80:30:44:9b:7f:b6:ca:d7:9d:59:1f:b0:b8:58:c6:
cc:a5:e0:59:23:c0:83:f7:30:92:07:c2:f7:48:18:05:69:5a:
d7:7e:0f:21:f8:70:dd:c4:e1:4a:00:12:eb:24:e1:8d:c1:34:
b2:94:e6:34
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZmUY6gkDNH0lO3j6u2AUy5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwOTI5MDczMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWYxNGE3MzQ1NGQxOWM0MTU4YTc3YTliMjg4MDkyY2YzZWEzMzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv+BYCjir5xa1Y1OxpzvVWPxW7uM
DP9DCPGWr1DXGr9yX35z1nXMC3eXdrKlc8AZcRyhocJ7GVR7MgP+Pj6RfYosuiGq
coOk0oQ1caC6cNGpuEXMfA6FIiX8uM8CV5DZ0UVZnmc8Sx1o/2XOPw7muDOtH9rP
R7HlQ9FZbYGi/DpnPL7C8Td3Izo0V2Ji/4mB4vkHIAHEqG4EPDj9cVBVE26f1g3Y
79UPyQ5r0CsLnON+zRfs0DnHA9RZOjtZewPpZ+xWzE0ZaPxB9oZJOUHf+0MuSGiK
Xo3XJtIycW0np4xkpv5U8d69PKQ4uDOw5bjaKdIEs+EgIscu+bV1Q1hRaQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFEHxSnNFTRnEFYp3qbKICSzz6jMxMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvUWZGS2MwVk5HY1FWaW5lcHNvZ0pMUFBxTXpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwueOAwQA
wuecMAwDBADDVpUDBAHDVpgwDQYJKoZIhvcNAQELBQADggEBAFSAFqEW2hGpBOSB
SgyRLVagfrgCN/q4ZJgZFtyosxpEi8lEOZkOps5Jo1oZYd2YQX9L9KybzSyw7uiQ
SAvGQeqgCx1W0icyn9wKFwo9rIOQEyU+G4GFOvIsQ0qxkS8jKYMWq1pacFrGHEmr
LRfp4vFi5z05pXpXNo0tM/ARDdFpBXizHsFkzWWRxLtp9d77M1Rml04iQ8zvw5rS
kW22Fo6WFo/wX96aAgR/FtWOEfWxGfxB2NfhgJuOMDJVJsuyVRJvbt0gbWAGAYAw
RJt/tsrXnVkfsLhYxsyl4FkjwIP3MJIHwvdIGAVpWtd+DyH4cN3E4UoAEusk4Y3B
NLKU5jQ=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:05 2025 by rpki-client