Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/QF7mDdkQZAR8P9EKqBVgpI8Nnc4.roa
File: QF7mDdkQZAR8P9EKqBVgpI8Nnc4.roa (raw, json)
Hash identifier: 6EIF8gdiFiVoDV+fXsyr7pASiWNgwImN+SYlSYA+adg=
Subject key identifier: 40:5E:E6:0D:D9:10:64:04:7C:3F:D1:0A:A8:15:60:A4:8F:0D:9D:CE
Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial: 01999F8281C0846DA18F88B1824EB3BE0E14
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/QF7mDdkQZAR8P9EKqBVgpI8Nnc4.roa
Signing time: Wed 01 Oct 2025 11:22:34 +0000
ROA not before: Wed 01 Oct 2025 11:22:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57986
IP address blocks: 45.15.200.0/24 maxlen: 24
45.15.201.0/24 maxlen: 24
45.15.202.0/24 maxlen: 24
45.15.203.0/24 maxlen: 24
2a0e:3180::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:82:81:c0:84:6d:a1:8f:88:b1:82:4e:b3:be:0e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Validity
Not Before: Oct 1 11:22:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=405ee60dd91064047c3fd10aa81560a48f0d9dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:a5:a0:99:fb:ab:90:f3:b8:07:57:e5:31:
01:e4:cd:73:f1:e1:3d:4d:59:4c:29:17:37:a5:ca:
34:61:b7:34:50:71:11:1f:62:39:aa:35:9a:1c:26:
cf:79:db:ec:51:48:41:6b:0c:f5:cd:78:9b:7b:5b:
90:fb:f9:5a:5d:81:42:d1:a0:a5:cf:9a:5e:6d:1b:
ac:82:ff:00:29:89:0e:65:74:ca:63:3c:ea:d7:58:
f4:aa:a1:7d:4e:a4:70:51:5b:d6:5e:a6:d6:e3:f2:
13:0a:f6:cd:26:34:21:ed:fb:5c:ee:51:26:0f:77:
47:8c:70:05:10:19:aa:b7:c9:85:79:3f:0b:f2:ee:
25:81:0c:18:e0:27:98:24:99:f5:ad:ba:84:42:08:
09:cf:19:94:12:90:ec:65:d1:7c:c2:ca:cd:0e:bb:
68:63:a4:58:0b:1d:9e:db:1d:0d:93:cd:de:13:b5:
c3:c6:16:72:2e:b6:1d:54:5a:64:61:cd:6d:dc:d9:
9a:8f:04:40:9d:aa:9b:6d:79:9e:00:7b:84:ff:0b:
4f:6b:c3:a6:9f:2f:c1:97:8a:f6:ba:2c:a8:f6:c1:
65:e1:c9:30:e6:bc:79:54:a3:91:28:ab:a5:83:b7:
52:47:cb:a4:60:f7:e0:7e:c1:3e:06:75:c7:0e:10:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5E:E6:0D:D9:10:64:04:7C:3F:D1:0A:A8:15:60:A4:8F:0D:9D:CE
X509v3 Authority Key Identifier:
keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/QF7mDdkQZAR8P9EKqBVgpI8Nnc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.200.0/22
IPv6:
2a0e:3180::/64
Signature Algorithm: sha256WithRSAEncryption
40:0e:5a:1f:1c:50:85:df:93:41:cb:66:57:6e:a9:f8:0d:58:
73:0f:6a:ce:ea:49:1e:62:aa:ca:2a:bc:26:b5:87:0d:86:50:
e7:af:b5:c6:5a:4b:5f:c0:ca:48:52:f2:47:97:5c:70:cd:b1:
8f:35:d0:4f:9a:c7:fd:65:e6:7c:9c:ba:4a:85:46:21:fd:a2:
c1:fa:bb:12:ca:bd:ff:a9:2e:57:cd:31:a6:49:77:eb:4e:68:
b0:49:2f:03:1c:ab:34:66:1e:de:72:c8:ee:ec:44:94:54:f5:
b7:76:5a:73:a0:0a:04:39:bf:74:e0:b3:49:c5:d5:7f:5e:0d:
71:8c:37:8c:c0:12:a8:1a:3c:2c:76:68:88:bc:cc:cd:8f:c3:
19:dd:64:9b:0a:a9:4a:b2:de:68:09:62:a2:90:16:83:f6:e6:
26:6b:d2:75:8f:c5:bf:14:44:17:5d:71:19:ac:8a:66:68:96:
05:f6:82:cf:92:c6:73:2b:46:ce:6b:6b:91:02:b1:52:64:6f:
8d:85:95:84:6f:87:f9:5c:9f:40:c8:8a:0d:2d:b8:3b:df:e3:
5c:34:ca:38:1b:1b:c6:f6:b2:63:6b:b5:38:ba:b5:b9:12:fa:
1b:ee:b6:34:04:35:a7:9e:c8:1a:6c:0a:e4:b9:0e:e0:7d:71:
53:c2:3c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:10:21 2025 by rpki-client