Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/vQ_BwqF-3Ov1ig9gZpa4J3HSW9I.roa
File: vQ_BwqF-3Ov1ig9gZpa4J3HSW9I.roa (raw, json)
Hash identifier: Fg81qYF19AaSbeLDfj9BfeZ+UCo1V2TWp+mQX1SfkJo=
Subject key identifier: BD:0F:C1:C2:A1:7E:DC:EB:F5:8A:0F:60:66:96:B8:27:71:D2:5B:D2
Certificate issuer: /CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Certificate serial: 0199339B3384C4EEE540A42FE56A0D924E51
Authority key identifier: DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/vQ_BwqF-3Ov1ig9gZpa4J3HSW9I.roa
Signing time: Wed 10 Sep 2025 12:30:33 +0000
ROA not before: Wed 10 Sep 2025 12:30:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44017
IP address blocks: 91.198.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:9b:33:84:c4:ee:e5:40:a4:2f:e5:6a:0d:92:4e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Validity
Not Before: Sep 10 12:30:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd0fc1c2a17edcebf58a0f606696b82771d25bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:88:07:8f:3d:04:c7:f1:ba:e8:11:03:e6:
83:be:91:db:51:af:91:93:31:06:7d:e9:f2:5e:1d:
e8:71:37:1f:ec:fd:eb:35:1b:ee:49:98:e1:48:ff:
ff:0a:72:7d:6d:f5:1a:81:ec:43:1d:45:77:97:bd:
a1:c7:a2:40:d9:de:55:95:97:fa:12:46:ed:a8:1c:
e8:62:3c:4e:fc:59:4b:18:af:dc:ea:02:cd:2c:91:
d3:06:17:eb:cd:67:f6:4f:47:e0:77:b5:89:f2:2c:
84:e0:1d:2c:3c:39:1d:45:a1:99:89:6d:db:54:1c:
19:f8:21:34:17:20:58:be:91:c1:43:f0:de:c5:b8:
7c:9a:05:76:1b:a5:d1:d2:e5:b7:d1:7a:8c:f2:47:
49:0e:6b:b3:6e:34:51:19:d6:03:38:49:d0:94:58:
6c:5a:9d:22:0c:a8:f9:6f:9a:1b:56:26:d0:4f:e9:
26:e8:22:99:70:6e:23:b7:07:45:6e:49:63:67:ce:
bc:19:18:34:cf:ec:49:f4:28:c7:d0:49:96:bd:f3:
e9:25:91:5c:64:71:a9:20:82:da:25:e5:f3:77:92:
f4:d9:7d:a0:98:8c:76:6d:94:9c:32:8f:83:56:d8:
28:22:b0:85:60:81:ed:8e:f3:ab:40:d2:9e:07:e9:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:C1:C2:A1:7E:DC:EB:F5:8A:0F:60:66:96:B8:27:71:D2:5B:D2
X509v3 Authority Key Identifier:
keyid:DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/vQ_BwqF-3Ov1ig9gZpa4J3HSW9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.228.0/24
Signature Algorithm: sha256WithRSAEncryption
30:97:b5:9d:9e:77:21:88:93:48:83:9c:89:b7:f1:78:60:0b:
a1:c5:8c:58:ee:2b:fa:af:89:c7:e2:b6:64:f6:28:36:89:6b:
f7:c2:7b:4c:6f:bb:ea:86:35:54:0a:6f:b2:07:16:ee:ee:67:
0a:35:3e:01:15:25:44:d5:c7:1c:ee:75:70:63:77:44:d7:03:
28:3d:e5:64:8c:c3:6d:18:d7:77:5c:14:42:9e:0f:ba:6f:07:
1b:c8:cb:df:57:45:a7:87:3d:78:cf:61:b6:11:03:f7:07:63:
6c:6c:a4:78:e3:a1:43:49:b1:52:1f:a4:c4:1f:db:ee:01:d2:
cd:b3:ca:7c:ae:d3:21:5c:8e:50:22:6d:fa:11:ef:36:82:4f:
3f:17:30:7f:11:a0:a1:98:73:ac:4e:eb:61:91:65:af:f2:44:
6c:ca:3d:0b:83:01:72:33:30:a4:29:49:6e:11:b5:8e:e6:95:
ac:56:05:98:65:5b:3d:4c:b7:a3:a6:7e:c1:33:19:b9:7a:73:
09:df:e6:35:76:3b:64:e3:0f:f8:c9:08:95:b9:8a:85:a6:73:
07:a5:51:e3:60:52:b7:3f:26:75:73:49:49:b1:32:2c:2d:13:
5b:a0:d9:46:67:d0:b2:75:2e:2b:94:54:0a:70:5e:26:0c:d7:
66:4f:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:25 2025 by rpki-client