Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/QCjl4a-9vegdBZsLVvWX0ydUgGY.roa
File: QCjl4a-9vegdBZsLVvWX0ydUgGY.roa (raw, json)
Hash identifier: wA/gZkPE3yxDP3RHjNK9FN3A1qfwH3nLJskDkbvV8q4=
Subject key identifier: 40:28:E5:E1:AF:BD:BD:E8:1D:05:9B:0B:56:F5:97:D3:27:54:80:66
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 0198A285F47A51E3B4318CB06B033A542B6C
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/QCjl4a-9vegdBZsLVvWX0ydUgGY.roa
Signing time: Wed 13 Aug 2025 08:22:24 +0000
ROA not before: Wed 13 Aug 2025 08:22:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206495
IP address blocks: 193.177.245.0/24 maxlen: 24
2a0b:7c80:2::/48 maxlen: 48
2a0b:7c80:3::/48 maxlen: 48
2a0b:7c80:4::/48 maxlen: 48
2a0b:7c80:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:85:f4:7a:51:e3:b4:31:8c:b0:6b:03:3a:54:2b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Aug 13 08:22:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4028e5e1afbdbde81d059b0b56f597d327548066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:f1:ba:05:a7:93:3f:ca:77:59:5f:ad:ca:
14:2e:43:5f:cc:bd:a1:6c:bb:dd:d0:59:83:58:d8:
92:86:a6:8c:3e:45:e5:96:04:4a:07:f2:b7:7c:e2:
fc:dd:57:ba:35:35:30:be:21:32:79:a0:46:2c:11:
2c:74:f6:b3:26:c7:71:4c:fb:53:d4:92:fe:1d:cc:
bb:e8:5b:ff:c2:93:77:db:9f:11:a1:2d:2c:66:1b:
e0:2f:63:b1:1f:93:02:d7:7f:fe:df:ab:b4:e5:b2:
56:5b:0e:da:cc:2d:8a:ea:2d:df:e3:fd:aa:5b:9b:
ba:25:77:e8:12:61:1e:39:1e:e1:60:d0:5e:7d:b1:
55:19:3a:c3:0f:2f:ee:d0:fe:63:85:6c:eb:de:5d:
c3:dd:21:be:b2:da:4f:00:11:66:b0:c3:97:10:6e:
f2:42:2d:ff:ae:f8:75:42:cd:8a:34:bb:4e:db:6f:
eb:5b:e8:42:79:81:e8:73:56:8f:7a:60:c1:f4:b4:
8d:57:51:0c:d9:ae:99:ac:09:5a:43:4b:2a:5c:fe:
80:7e:82:41:18:2e:90:2f:b7:45:c5:b1:49:80:c4:
fa:5f:06:a3:69:db:0c:6e:2a:6d:10:67:3c:1f:0d:
80:a6:fd:ad:5e:0a:29:68:0f:8e:ca:36:56:e5:fc:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:E5:E1:AF:BD:BD:E8:1D:05:9B:0B:56:F5:97:D3:27:54:80:66
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/QCjl4a-9vegdBZsLVvWX0ydUgGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.245.0/24
IPv6:
2a0b:7c80:2::-2a0b:7c80:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:02:31:5d:ab:e1:55:f8:65:ac:02:3b:59:48:1b:e0:a1:6e:
c2:a6:56:af:69:1e:62:03:73:45:f9:e1:2c:80:01:d8:9a:d6:
94:61:80:ab:d4:aa:5b:16:0b:7e:d4:9a:53:2c:74:23:16:02:
45:b5:13:d2:07:f7:ab:52:19:98:90:6f:cf:74:fc:16:c2:1d:
21:73:3e:e5:dc:e6:bf:1d:32:3d:5e:0f:c9:b1:bd:3c:42:c9:
70:1b:d8:57:7f:85:dc:78:09:c6:b8:ef:7c:8a:75:14:72:55:
0c:ea:48:99:3e:2e:1f:06:99:1b:17:9f:23:ce:6c:67:02:0c:
5d:f4:05:34:99:ed:49:bb:a2:50:31:42:0e:71:7e:d7:11:20:
da:07:29:27:08:8d:dc:22:4f:51:75:14:e6:1d:51:97:b9:c1:
3d:e3:7d:de:92:c2:d8:be:31:89:ed:bd:29:c1:a1:0b:5c:ad:
22:ea:1c:26:07:81:45:2e:f7:34:bc:4e:ea:7c:7b:58:d9:8b:
d0:30:0a:f4:20:73:8a:b4:ec:6e:24:b4:6f:67:e6:cc:73:91:
27:80:c6:0f:2a:bb:29:4f:c5:58:25:88:26:f5:7e:b0:06:48:
3a:87:0c:2e:84:6c:29:d6:38:52:82:7d:8a:d5:e5:37:fd:88:
6c:8a:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:10:39 2025 by rpki-client