Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/qOlRf_FFYvzJtrv5C1ObqUNVUzk.roa
File: qOlRf_FFYvzJtrv5C1ObqUNVUzk.roa (raw, json)
Hash identifier: EfOedSZueUJgPg3V0RQ+mS3lngajdnN3iZ8o0TSNE3A=
Subject key identifier: A8:E9:51:7F:F1:45:62:FC:C9:B6:BB:F9:0B:53:9B:A9:43:55:53:39
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01989980FED8CDB80464D826024471CC785B
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/qOlRf_FFYvzJtrv5C1ObqUNVUzk.roa
Signing time: Mon 11 Aug 2025 14:20:24 +0000
ROA not before: Mon 11 Aug 2025 14:20:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56902
IP address blocks: 46.20.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:80:fe:d8:cd:b8:04:64:d8:26:02:44:71:cc:78:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Aug 11 14:20:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8e9517ff14562fcc9b6bbf90b539ba943555339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:81:b6:cd:36:fb:16:17:2e:db:8e:b3:d1:
20:88:e0:0c:dc:24:b2:a3:0b:ec:ec:0e:37:f0:be:
07:b8:b8:c3:4c:64:45:76:a9:89:97:18:49:80:65:
0c:8b:96:f8:cd:d3:77:4d:cc:72:fb:f0:b7:c9:df:
ac:5b:c2:47:17:a2:0d:cb:53:62:25:e1:0c:c6:6b:
1a:b9:55:1e:a5:99:97:63:0f:54:c7:6e:bc:56:fd:
e5:7d:e7:69:1b:05:4f:a9:76:c0:5d:9c:c5:ab:5f:
ef:98:aa:97:cf:9a:20:36:3b:f8:13:e6:83:43:86:
84:1b:3a:21:fe:a3:28:1f:9c:3c:3c:ad:58:08:5a:
24:6d:d2:df:43:a2:12:48:fb:82:2e:d4:4d:ab:3c:
ea:59:56:a9:24:c7:cc:3d:d4:06:c5:13:46:7b:36:
30:9a:a5:76:e1:37:88:28:b2:84:02:fe:e8:5d:d6:
7d:2d:ad:74:e9:12:d9:3b:ee:51:90:89:d5:26:87:
af:a4:68:b5:48:58:64:03:4b:29:e0:28:87:c0:91:
51:7a:d6:8e:e4:82:4b:17:ae:b3:4f:78:1e:2f:ea:
5a:dc:bd:af:d9:b7:42:6d:b9:55:2b:6c:d3:65:ca:
ad:a8:d4:a1:da:ff:e9:e2:0c:7a:79:dc:61:54:2f:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E9:51:7F:F1:45:62:FC:C9:B6:BB:F9:0B:53:9B:A9:43:55:53:39
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/qOlRf_FFYvzJtrv5C1ObqUNVUzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4c:a3:08:2a:1e:c1:0e:2a:63:e3:55:2b:1c:bf:60:dd:88:
18:22:92:32:ef:8b:49:9d:f4:36:ec:a5:8f:0f:5d:43:c5:9f:
29:92:75:fb:21:e1:0e:c9:6c:77:4a:aa:75:ef:ef:8d:44:e9:
69:d3:82:09:74:eb:80:01:ad:ae:ad:9a:cc:21:14:d4:de:fd:
a4:2c:9a:a6:24:6b:27:22:a1:31:c2:40:cb:bf:b8:b1:3a:e6:
80:8e:45:26:12:51:85:7f:eb:2c:0f:72:a9:57:31:5b:f0:42:
d8:fc:59:db:7f:47:6a:8f:c2:e7:07:77:3a:b2:2f:fe:e4:bc:
5d:3e:33:32:69:35:3a:8d:55:c4:d7:f4:03:f2:f8:29:4b:79:
1c:df:d2:dd:52:3f:81:98:ad:f8:23:2d:ed:6b:47:ee:be:32:
b3:c1:15:24:c2:f6:1f:bf:60:6f:e5:9f:0e:66:5e:8d:a1:ae:
ad:21:ca:c7:74:d9:59:c8:63:df:ec:1e:3d:f6:1b:b7:bd:8d:
55:29:26:3e:aa:0d:f1:83:6b:5d:bd:b6:95:63:d2:60:cc:c5:
05:41:7a:d5:52:6a:25:47:fe:14:72:ff:d1:95:34:4a:91:19:
60:db:49:54:5c:67:5d:bc:54:a5:17:1e:7d:6a:57:b8:e7:8c:
68:bb:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:52 2025 by rpki-client