Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/qwwHopD_0G8M1Je41mhruAKGMpE.roa
File: qwwHopD_0G8M1Je41mhruAKGMpE.roa (raw, json)
Hash identifier: aHrYRaDs2jeGMQeUQIc+2frl2SVKEgdlFJTzXtA4yQs=
Subject key identifier: AB:0C:07:A2:90:FF:D0:6F:0C:D4:97:B8:D6:68:6B:B8:02:86:32:91
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 0197D66C2C28C3CF49140C3A58D669AA470C
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/qwwHopD_0G8M1Je41mhruAKGMpE.roa
Signing time: Fri 04 Jul 2025 17:11:42 +0000
ROA not before: Fri 04 Jul 2025 17:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31277
IP address blocks: 79.173.74.0/23 maxlen: 23
79.173.76.0/24 maxlen: 24
94.243.220.0/22 maxlen: 22
94.243.220.0/24 maxlen: 24
94.243.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:6c:2c:28:c3:cf:49:14:0c:3a:58:d6:69:aa:47:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jul 4 17:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab0c07a290ffd06f0cd497b8d6686bb802863291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:c0:a6:42:75:de:a4:81:70:c7:1b:e1:ff:
67:d7:11:03:b5:e5:c0:5a:e9:e9:35:8f:e4:14:c1:
4f:07:08:b6:3f:3e:f0:20:3b:fe:41:a5:4a:73:b0:
f7:9e:d2:06:9b:87:0c:71:22:55:fe:b0:db:75:4c:
20:25:0c:c2:c6:81:3d:b3:04:b1:8d:8a:c3:60:7c:
aa:ba:4e:4c:65:a4:68:ce:1a:70:87:ed:06:8b:a5:
f6:24:ff:16:c6:73:be:f7:d7:01:cd:45:6e:07:67:
84:fd:e0:7d:56:af:f5:eb:16:95:46:ea:19:59:3b:
6b:42:63:fa:92:d5:34:ca:71:82:67:12:ce:57:ac:
9f:c6:3e:ec:e1:6a:11:d2:14:f6:e1:eb:ba:1a:45:
f3:32:45:ec:88:17:b0:96:7a:e9:09:d4:43:e6:9d:
de:55:81:fe:11:9b:24:3a:63:65:ea:e6:1d:02:0d:
e0:de:be:aa:7e:2c:b8:0b:52:f8:91:3e:2c:54:57:
e7:21:54:77:03:d3:50:c9:ba:f1:1c:98:5e:ab:e7:
6d:4d:cf:ae:ea:84:9e:18:20:19:18:c6:63:65:62:
51:70:81:41:14:68:3b:f1:c6:a5:52:34:06:1f:c2:
fa:f1:f4:d5:19:5b:8f:72:25:c5:f5:be:6a:d5:a3:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0C:07:A2:90:FF:D0:6F:0C:D4:97:B8:D6:68:6B:B8:02:86:32:91
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/qwwHopD_0G8M1Je41mhruAKGMpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.74.0-79.173.76.255
94.243.220.0/22
Signature Algorithm: sha256WithRSAEncryption
71:9b:ef:0b:93:dd:3a:19:82:10:f4:86:35:8e:c2:df:ee:37:
dc:2d:ef:06:ae:6b:6e:95:81:7b:b6:2b:e2:c3:52:64:f6:b1:
ec:58:78:a7:50:ea:96:85:ae:1c:f6:18:9e:14:b8:0d:e7:be:
c9:d1:77:61:c2:da:27:eb:be:9e:37:0c:60:6f:45:14:bf:20:
a1:05:91:47:95:8e:4a:b6:08:5a:cb:08:89:7f:7b:50:c0:8e:
23:9b:f3:07:d9:3d:a2:c8:16:ec:0f:ce:05:85:a4:d5:6a:a4:
ff:6f:73:22:0c:1c:b9:a0:93:55:4c:29:62:7f:ba:a9:65:6f:
7e:4b:36:fe:ff:85:d8:82:7f:26:96:f4:1d:36:a4:52:68:ab:
c1:18:9c:e9:07:ea:c4:6b:9c:8c:df:f8:fa:15:6a:1a:b6:94:
3b:ca:d2:ac:3a:74:31:4e:a6:e8:35:4a:69:6e:8b:b9:36:26:
bd:1d:10:8e:10:87:6a:48:50:2b:37:b0:66:df:f4:a2:57:1f:
38:ce:6e:d7:b4:f2:d5:67:ac:fe:6a:e1:89:e8:a0:de:f3:98:
f8:68:13:69:42:ed:f7:68:fc:e2:f8:a9:28:0e:cf:e6:12:12:
fc:8e:b1:96:50:b7:18:ef:e6:ef:74:c8:3d:35:fd:f6:6c:da:
96:25:5f:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:22:56 2025 by rpki-client