Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/0qRVIHZKX4qGnjxAiU1aoisO8_I.roa
File: 0qRVIHZKX4qGnjxAiU1aoisO8_I.roa (raw, json)
Hash identifier: lyCpmpSchMKVPytHVw70ZjOKFalrbZ7DXCdpS6ih0A8=
Subject key identifier: D2:A4:55:20:76:4A:5F:8A:86:9E:3C:40:89:4D:5A:A2:2B:0E:F3:F2
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 0199945C542D6B1F775659205CE8C76E6347
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/0qRVIHZKX4qGnjxAiU1aoisO8_I.roa
Signing time: Mon 29 Sep 2025 07:25:02 +0000
ROA not before: Mon 29 Sep 2025 07:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44788
IP address blocks: 91.199.242.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
178.250.0.0/21 maxlen: 24
185.235.84.0/24 maxlen: 24
185.235.85.0/24 maxlen: 24
185.235.86.0/24 maxlen: 24
185.235.87.0/24 maxlen: 24
2a02:2638::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:5c:54:2d:6b:1f:77:56:59:20:5c:e8:c7:6e:63:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Sep 29 07:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2a45520764a5f8a869e3c40894d5aa22b0ef3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:52:23:8c:f9:ef:b3:47:b6:ef:60:ef:e3:
d2:c3:1e:4e:0f:37:2c:0f:9d:0d:b4:93:aa:02:e5:
f2:e3:de:41:da:e7:83:20:67:2c:19:d3:69:fa:c3:
00:b1:ad:f4:26:0f:be:c8:f8:3b:36:c0:6a:1b:5d:
69:1a:e4:a9:98:47:32:3c:f9:30:d2:8c:18:04:1b:
96:af:9a:c7:71:0e:58:27:84:7f:1a:bf:7e:2e:c5:
74:1a:f2:db:2e:88:9f:ee:c7:4e:78:9e:76:db:db:
a1:85:cb:b8:44:d2:5f:44:59:06:8c:2b:9a:48:9b:
41:41:79:34:14:3a:d1:1c:f9:a1:5f:7d:92:fc:e3:
dc:42:bd:1e:ea:06:f8:d7:af:03:d4:f8:e8:56:2d:
62:60:ce:2e:db:fe:9d:49:57:8f:a2:4e:48:1f:0a:
f5:be:97:62:55:9a:e7:69:80:f1:7b:63:9f:aa:34:
96:c8:b1:17:e2:93:db:20:13:79:08:a8:6a:ac:69:
1d:08:a7:94:09:42:11:63:59:07:8a:79:23:a4:06:
3b:9c:57:6a:74:8d:5f:96:c1:16:3b:1f:5b:6a:9b:
5c:34:db:b6:1f:db:1b:4c:10:4d:c6:f0:77:12:1c:
ab:c3:74:57:8d:97:08:7a:b4:7e:54:34:9a:09:1b:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A4:55:20:76:4A:5F:8A:86:9E:3C:40:89:4D:5A:A2:2B:0E:F3:F2
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/0qRVIHZKX4qGnjxAiU1aoisO8_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
178.250.0.0/21
185.235.84.0/22
IPv6:
2a02:2638::/32
Signature Algorithm: sha256WithRSAEncryption
72:f9:87:e5:c0:4c:d1:91:60:fa:42:e0:92:ee:91:bd:f0:04:
74:7c:92:eb:08:a2:86:e4:4e:10:65:f5:8d:f0:3c:a0:be:02:
8e:72:eb:2d:8f:49:90:ab:2f:c6:ef:66:c9:df:e0:23:44:b5:
38:9c:c6:5c:d9:35:30:29:fa:d5:77:89:f7:26:e3:40:3b:55:
fa:eb:d6:25:cd:61:7e:1c:cb:5a:6e:4f:12:d2:3c:91:c1:7f:
23:fb:50:64:61:01:64:68:47:87:8b:f8:ef:66:c5:1f:11:df:
33:72:02:85:bb:04:9a:76:7f:da:c4:25:bb:a7:98:9b:97:68:
30:ee:dd:f7:ae:4b:33:0e:7d:65:c5:e3:49:88:b0:0c:e6:24:
72:d3:1d:fd:b8:99:07:47:a0:46:f0:cf:37:ad:30:3d:a1:2e:
6c:b0:6c:b8:ca:f4:97:bf:47:08:33:ee:88:cb:a4:e8:41:88:
e9:34:57:03:66:3b:ed:9f:d0:84:80:88:00:e2:46:41:28:38:
90:02:62:e7:37:42:d6:ce:11:70:dc:5f:53:9f:8d:5b:51:0f:
5d:62:83:30:2d:a4:5a:79:29:e6:69:60:88:87:ea:3b:f8:7f:
61:4d:b8:a3:b7:03:74:f0:27:4e:86:29:2d:fd:5f:fd:f7:40:
74:c4:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:00 2025 by rpki-client