Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/quqjck8oiPeuLFbQTKqQcAb1gyQ.roa
File: quqjck8oiPeuLFbQTKqQcAb1gyQ.roa (raw, json)
Hash identifier: r29oIC/u17nkjRdUdAlgR2A+cCztkXHrHo5aVeBr0kI=
Subject key identifier: AA:EA:A3:72:4F:28:88:F7:AE:2C:56:D0:4C:AA:90:70:06:F5:83:24
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0199DBC18B10C2BFBE3CBB38BE6FBDB9B1AA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/quqjck8oiPeuLFbQTKqQcAb1gyQ.roa
Signing time: Mon 13 Oct 2025 04:08:38 +0000
ROA not before: Mon 13 Oct 2025 04:08:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 128.0.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:db:c1:8b:10:c2:bf:be:3c:bb:38:be:6f:bd:b9:b1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 13 04:08:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaeaa3724f2888f7ae2c56d04caa907006f58324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:5b:89:2c:33:4d:0a:79:24:f9:37:50:ec:
0d:94:5a:f1:07:c4:78:da:2f:c2:7d:04:26:4e:aa:
2b:af:59:cf:66:c1:f6:65:df:44:1d:22:e0:db:41:
60:a4:dc:30:bf:f3:93:07:50:2c:42:66:65:89:1f:
c0:23:f1:c1:90:16:a4:30:d1:aa:43:92:17:ce:d7:
e5:ea:62:75:a7:1a:30:90:6a:9e:75:f6:d7:17:aa:
e8:75:6f:ac:a6:f8:3d:10:d7:85:c2:0c:84:31:6f:
71:1b:4e:ae:60:38:88:7b:27:fa:c0:ed:63:ef:9e:
54:d7:47:0d:ea:ae:80:8a:8b:81:21:15:d4:45:ac:
1f:42:41:ad:36:e7:64:20:c5:a2:2f:b2:19:c4:98:
2e:04:a2:8c:fd:30:b7:9c:ad:cf:f3:0d:59:26:ba:
d8:23:3d:c6:6e:8d:78:7f:69:d3:8f:90:c2:dc:13:
0d:4b:22:ed:3a:ea:4f:2a:e2:24:ce:10:51:83:25:
f1:1d:b9:f3:fe:7a:a5:91:75:93:d1:3e:86:a5:e7:
b9:5e:fe:17:e3:34:3d:73:15:1c:d0:dd:ab:19:6b:
29:33:6c:84:55:9c:fa:a0:e4:f2:a0:ba:dc:50:4d:
33:68:34:81:83:0a:40:86:17:6b:2c:57:7d:6a:66:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EA:A3:72:4F:28:88:F7:AE:2C:56:D0:4C:AA:90:70:06:F5:83:24
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/quqjck8oiPeuLFbQTKqQcAb1gyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.1.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9d:82:b5:b4:b6:e2:92:a6:30:cf:1d:02:ef:b9:96:c3:5b:
b5:6c:c2:af:3e:13:9c:fb:0a:76:c4:b7:60:9b:2d:c0:2b:53:
47:c2:dd:d5:8c:c4:de:38:38:db:cb:6a:af:81:02:04:a0:df:
4a:f4:ce:c7:4c:c2:ff:a9:c9:a7:89:30:0e:93:66:55:db:ce:
4b:d6:6a:ee:8a:4f:21:ed:12:a5:07:0e:fa:43:5b:df:9e:ca:
c0:ad:19:bc:d5:ca:34:ec:c5:5b:d2:12:18:80:cd:4c:9f:92:
4f:b9:40:b6:59:af:e8:95:3a:ba:b0:48:bf:22:73:5b:1c:08:
bf:08:a1:87:16:90:d4:f3:22:a6:03:80:21:9b:07:b2:d4:a7:
e3:b5:cb:80:a6:22:2f:6c:b7:40:ac:19:f5:94:95:29:3f:a8:
03:d1:c1:19:9b:98:ed:ae:6c:07:c8:e9:03:7e:ef:57:1b:e1:
5c:bb:74:2f:95:5f:ad:c4:31:f0:b6:38:db:fb:07:d5:32:03:
c3:12:44:eb:7c:ac:a3:85:a5:bd:f4:51:2c:cd:a9:d3:01:46:
15:74:d6:0b:93:93:90:c4:7e:2d:3f:af:c4:e2:c0:e5:fe:95:
44:b1:04:9f:16:87:3b:0d:4b:28:68:fc:73:61:84:d5:f0:cd:
5e:9d:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:16 2025 by rpki-client