Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/QOzJAU6AGyIdspyiDfzID7hkeNM.roa
File: QOzJAU6AGyIdspyiDfzID7hkeNM.roa (raw, json)
Hash identifier: TgbRUW7u0PJ1yFsHLPWFQCuKEHYHch5AeI7WQmVR3xI=
Subject key identifier: 40:EC:C9:01:4E:80:1B:22:1D:B2:9C:A2:0D:FC:C8:0F:B8:64:78:D3
Certificate issuer: /CN=051c7341abb798f8f4e64a518558c88d1fe26fd7
Certificate serial: 0198930090F68FAA6FA663D81432A0641496
Authority key identifier: 05:1C:73:41:AB:B7:98:F8:F4:E6:4A:51:85:58:C8:8D:1F:E2:6F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRxzQau3mPj05kpRhVjIjR_ib9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/QOzJAU6AGyIdspyiDfzID7hkeNM.roa
Signing time: Sun 10 Aug 2025 08:02:24 +0000
ROA not before: Sun 10 Aug 2025 08:02:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206354
IP address blocks: 109.175.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRxzQau3mPj05kpRhVjIjR_ib9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:00:90:f6:8f:aa:6f:a6:63:d8:14:32:a0:64:14:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051c7341abb798f8f4e64a518558c88d1fe26fd7
Validity
Not Before: Aug 10 08:02:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40ecc9014e801b221db29ca20dfcc80fb86478d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:f1:d2:c3:9e:bf:9c:36:de:d8:46:27:ff:
76:f4:e2:04:e4:02:ac:97:68:ae:8e:98:50:6f:c3:
76:c2:cb:b1:e7:8c:f6:46:57:ca:ea:ac:61:33:f5:
cd:ec:97:18:5a:b9:81:18:5b:c0:71:3b:ff:b6:91:
cd:f7:ac:eb:a4:67:3d:8e:c3:42:6e:e3:2e:b1:86:
6e:4d:1c:93:27:c1:36:6d:f9:7e:a0:e5:a2:d8:c5:
4e:9e:53:3b:e4:a5:2d:50:fe:e3:be:ef:9e:ee:e2:
f1:3b:52:49:a2:16:af:bc:54:c9:66:c7:98:f4:5c:
71:a9:be:c6:f3:17:6d:a5:58:95:7b:34:ad:98:8d:
2f:65:bb:0e:4a:00:30:8d:ba:ef:bb:95:bd:8a:91:
18:ef:27:c2:1e:d9:73:23:59:d9:5c:42:0b:20:d8:
05:3b:10:6e:08:93:94:e0:8e:c1:63:c5:7c:aa:ec:
d6:5a:60:b8:63:df:58:ff:72:14:d1:ec:aa:2e:5d:
59:0f:2b:00:9a:bd:c2:f2:ce:ce:c1:8c:7b:a9:43:
a4:48:a4:91:31:8f:95:9d:5e:30:f0:c1:04:0a:66:
56:17:bc:45:4b:b4:b9:5b:49:10:f0:17:b2:3f:86:
ec:db:c2:18:da:02:af:f2:06:56:fa:29:5a:58:35:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EC:C9:01:4E:80:1B:22:1D:B2:9C:A2:0D:FC:C8:0F:B8:64:78:D3
X509v3 Authority Key Identifier:
keyid:05:1C:73:41:AB:B7:98:F8:F4:E6:4A:51:85:58:C8:8D:1F:E2:6F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRxzQau3mPj05kpRhVjIjR_ib9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/QOzJAU6AGyIdspyiDfzID7hkeNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/862214-ae29-43dd-a59f-a4e4423f1172/1/BRxzQau3mPj05kpRhVjIjR_ib9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.216.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:09:52:8f:9a:65:fe:63:95:b8:af:c8:7f:07:99:9e:6f:9d:
d6:ae:43:4a:6e:1d:e8:f8:c4:c9:8f:41:f6:e9:18:43:f8:5d:
99:47:a7:64:50:6d:87:cd:d0:b8:e3:d3:bd:aa:da:66:b3:f1:
1d:a2:f6:7f:bc:6c:bd:16:55:50:14:c1:7f:21:07:8c:55:79:
29:16:e9:c0:41:11:3f:ff:b8:01:63:65:67:89:bf:02:44:8a:
53:f3:56:c7:43:9b:f2:34:d7:0d:6d:ee:b0:89:f6:db:15:c7:
34:6e:40:5d:5f:22:d0:85:20:d4:29:68:b4:d3:3a:17:46:d6:
ac:23:da:49:54:ed:48:cc:b6:cd:36:ee:76:21:8c:13:2e:f1:
4e:72:af:17:4d:d8:65:49:c3:6a:ff:d3:cd:ce:7b:19:52:5d:
27:af:8d:45:ca:e6:36:06:f5:cf:ab:30:dc:aa:5c:dd:f7:56:
3b:ab:51:a6:1b:e1:22:70:3a:52:ad:05:67:26:15:4c:93:71:
21:83:71:44:b7:58:3e:57:82:07:55:05:03:3a:a3:46:a2:8f:
6b:43:ba:79:ec:c4:9d:96:ef:7e:65:5c:e8:84:4d:87:0e:39:
c3:5f:d8:13:46:bc:1f:05:0c:89:b8:83:45:91:34:a0:bc:f2:
14:ad:23:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:32 2025 by rpki-client