Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/QQ_XASovNo3q1eWLyoB1-wbVIbw.roa
File: QQ_XASovNo3q1eWLyoB1-wbVIbw.roa (raw, json)
Hash identifier: +nHnAk51WEvv/rAlJaGO2P/ZVC3It8+Q00l0lZIdxpE=
Subject key identifier: 41:0F:D7:01:2A:2F:36:8D:EA:D5:E5:8B:CA:80:75:FB:06:D5:21:BC
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 01999F16E86D6562D69F51F2E6B1E33A60AC
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/QQ_XASovNo3q1eWLyoB1-wbVIbw.roa
Signing time: Wed 01 Oct 2025 09:25:02 +0000
ROA not before: Wed 01 Oct 2025 09:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58172
IP address blocks: 45.135.131.0/24 maxlen: 24
91.213.49.0/24 maxlen: 24
94.131.224.0/24 maxlen: 24
94.131.225.0/24 maxlen: 24
94.131.226.0/23 maxlen: 23
94.131.226.0/24 maxlen: 24
94.131.227.0/24 maxlen: 24
94.131.228.0/24 maxlen: 24
94.131.229.0/24 maxlen: 24
94.131.230.0/24 maxlen: 24
94.131.231.0/24 maxlen: 24
94.131.232.0/24 maxlen: 24
94.131.233.0/24 maxlen: 24
94.131.234.0/23 maxlen: 23
94.131.234.0/24 maxlen: 24
94.131.235.0/24 maxlen: 24
94.131.236.0/23 maxlen: 23
94.131.236.0/24 maxlen: 24
94.131.237.0/24 maxlen: 24
94.131.239.0/24 maxlen: 24
185.191.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:16:e8:6d:65:62:d6:9f:51:f2:e6:b1:e3:3a:60:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Oct 1 09:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=410fd7012a2f368dead5e58bca8075fb06d521bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f4:d1:f8:22:3f:d1:bb:84:34:f8:e2:fa:6e:
49:96:bf:d1:dc:64:b9:60:61:c9:47:07:77:47:87:
ef:a5:a9:46:3e:09:fd:48:fb:57:a2:78:76:3b:55:
dd:97:25:7e:47:49:aa:fc:ba:92:93:d7:dd:b6:15:
a5:99:02:56:ed:74:77:3c:d9:26:02:3d:4c:52:fd:
86:4d:d1:28:23:44:99:6c:8a:f7:0c:45:01:90:ac:
5e:ac:88:f2:f3:20:e6:40:45:85:c9:d3:98:53:b9:
72:d3:14:a3:77:91:04:4c:f6:8f:52:b9:7c:8d:1c:
37:7b:c1:d8:d2:ab:62:f2:df:05:fc:c4:1f:64:3b:
ab:fc:63:d6:24:d6:7e:0f:eb:e9:8a:d4:71:dc:03:
c4:55:6e:b7:e0:e6:65:7b:76:ef:ce:0c:d0:05:83:
95:63:d2:f3:37:95:3b:2c:5d:6b:09:32:a1:91:67:
b5:52:cb:b1:06:b6:ab:63:ee:be:79:de:2e:6e:1f:
05:4f:d5:d6:bf:63:94:c3:ff:2a:6a:2e:6e:42:21:
32:ab:ee:04:07:a7:bc:b0:27:55:7d:dd:cf:02:1e:
24:4e:d5:3a:62:18:a0:04:32:eb:2a:f8:7d:80:fd:
24:d6:cf:fc:d3:0e:c6:c8:e8:da:05:49:b4:f1:9a:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0F:D7:01:2A:2F:36:8D:EA:D5:E5:8B:CA:80:75:FB:06:D5:21:BC
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/QQ_XASovNo3q1eWLyoB1-wbVIbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.131.0/24
91.213.49.0/24
94.131.224.0-94.131.237.255
94.131.239.0/24
185.191.212.0/24
Signature Algorithm: sha256WithRSAEncryption
31:72:56:2c:1d:c8:7d:9b:2d:eb:bc:87:28:d2:7d:e6:63:be:
c8:36:eb:d0:0e:96:63:8f:87:f2:cb:d6:52:00:a5:dc:a8:16:
b9:67:ce:04:42:7b:a8:89:2e:cb:ab:d3:c4:90:ed:25:ba:49:
21:d7:9b:4d:a3:1e:9c:2d:23:87:a1:fb:ba:0d:66:b4:61:2f:
a7:b1:70:8f:34:83:e5:34:1d:8a:c4:d4:24:1b:a0:8f:48:1f:
24:73:d2:f0:63:b6:d6:2d:11:d5:08:07:8c:a0:30:7f:72:a2:
ad:aa:4a:0d:d4:29:fd:e0:77:7e:e5:ce:b9:43:e0:28:ad:c1:
1b:24:68:a5:fa:55:e4:36:6e:61:bf:9a:35:ff:ae:43:2c:68:
65:c3:f5:c5:82:a4:93:85:cb:19:90:93:5d:2f:0c:75:5e:15:
cd:e1:d1:28:7e:6d:f5:16:e7:7d:67:49:05:9c:72:3a:88:e0:
3f:da:00:ca:09:a6:79:46:ba:0e:12:3b:02:72:ff:54:51:04:
2d:ca:7a:bf:eb:74:61:9a:51:89:84:a0:a3:a9:17:d4:ac:26:
0c:38:03:2b:5f:3e:39:60:51:4f:04:48:fb:95:45:6a:61:2f:
3c:1d:fb:43:ef:cb:28:a1:76:e9:13:c4:ee:d8:ef:f2:ae:aa:
d0:5e:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:49 2025 by rpki-client