Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/q_DU4LpYW5iMWWvp18KMkPW4jyE.roa
File: q_DU4LpYW5iMWWvp18KMkPW4jyE.roa (raw, json)
Hash identifier: dS1YtoKx6Fr5PPMvDkPqkspr86D+De4f+k+4trrsOTk=
Subject key identifier: AB:F0:D4:E0:BA:58:5B:98:8C:59:6B:E9:D7:C2:8C:90:F5:B8:8F:21
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 0199B548A3DB51AA47763F361D83DFA64EC4
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/q_DU4LpYW5iMWWvp18KMkPW4jyE.roa
Signing time: Sun 05 Oct 2025 16:51:00 +0000
ROA not before: Sun 05 Oct 2025 16:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201691
IP address blocks: 193.35.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b5:48:a3:db:51:aa:47:76:3f:36:1d:83:df:a6:4e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Oct 5 16:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abf0d4e0ba585b988c596be9d7c28c90f5b88f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:b9:7a:1d:6c:94:b2:03:a4:e5:9b:26:2c:
3a:b0:20:ce:96:03:bc:4b:ff:55:94:5c:1e:9e:60:
8c:ad:4f:01:67:e9:e6:49:42:51:60:83:48:10:66:
6c:b3:37:20:bc:5f:ec:46:aa:9a:45:ae:28:fc:23:
e8:d0:bc:b0:97:db:55:27:f9:17:3b:10:df:40:cb:
5f:7a:9b:ef:75:df:24:b1:53:39:cc:78:82:24:84:
84:11:b3:fa:38:15:3f:31:f0:46:8c:25:2c:46:f9:
51:36:2d:ab:31:9f:e1:08:b5:2a:d7:e6:fe:d4:50:
8d:cd:1c:59:84:b1:08:95:3a:7a:7a:f3:aa:7c:c7:
cd:cc:b2:57:52:ec:5c:e1:31:9c:1a:82:d6:49:7f:
77:06:06:ef:50:a5:49:4a:8b:9e:43:cf:61:0b:ce:
ca:4b:90:c4:3e:5a:9d:52:17:1c:60:eb:94:2b:3b:
a8:de:6a:36:f6:03:ad:21:54:81:0b:12:b2:55:51:
1f:84:d6:81:05:32:61:80:fa:1e:e0:2f:af:87:90:
b5:1e:e1:5d:4d:ab:ca:d6:a9:44:0d:b1:6e:02:d9:
d8:37:81:1a:2a:24:5c:46:20:51:29:0c:51:4d:d4:
00:1e:d6:a9:52:74:81:61:3d:1b:50:4b:70:07:b2:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:D4:E0:BA:58:5B:98:8C:59:6B:E9:D7:C2:8C:90:F5:B8:8F:21
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/q_DU4LpYW5iMWWvp18KMkPW4jyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.230.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:97:8a:b7:71:87:9f:7d:78:70:aa:5a:d5:72:39:3d:f6:0b:
f5:2a:a9:44:10:7b:2b:9f:c6:96:00:ff:f1:e0:6c:c8:53:ea:
12:6e:19:c8:2e:94:4a:d5:b6:c7:8e:51:b4:27:4f:52:3b:94:
76:fa:48:9c:2a:6b:23:6f:5b:2c:cb:db:0e:a4:46:d9:9d:4c:
d0:d8:18:93:00:d7:37:bb:e6:8f:8b:ec:af:f4:dd:2c:48:3b:
c9:97:c6:31:6a:59:4d:ec:f6:56:1e:07:b0:b8:c2:9a:7a:e2:
ac:68:b5:4b:7e:14:3b:53:3f:34:74:34:4c:d3:3b:87:e8:81:
6a:c7:cb:6e:10:35:36:96:89:0c:9a:fc:c2:53:30:ba:87:57:
48:e6:b2:c9:7e:36:5d:33:ac:3a:17:df:3c:a5:26:4a:83:73:
a1:3a:a4:6a:45:3e:4c:91:29:ed:db:f9:40:10:11:08:9e:3f:
1b:fe:0c:c2:e0:e2:58:e8:23:4c:55:49:0d:bf:aa:bc:87:8c:
7e:85:81:c4:f4:17:c6:e1:4c:ed:c5:f9:f6:0a:52:b3:0d:ea:
02:25:88:13:46:c4:e7:9a:0c:08:d0:f6:e5:93:48:aa:89:62:
cf:4f:84:97:8b:94:1f:58:6e:75:f2:f3:b2:9f:e0:2a:7e:de:
1c:60:07:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZm1SKPbUapHdj82HYPfpk7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi
OWQ2MDgwHhcNMjUxMDA1MTY1MTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmYwZDRlMGJhNTg1Yjk4OGM1OTZiZTlkN2MyOGM5MGY1Yjg4ZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ+5eh1slLIDpOWbJiw6sCDOlgO8
S/9VlFwenmCMrU8BZ+nmSUJRYINIEGZsszcgvF/sRqqaRa4o/CPo0Lywl9tVJ/kX
OxDfQMtfepvvdd8ksVM5zHiCJISEEbP6OBU/MfBGjCUsRvlRNi2rMZ/hCLUq1+b+
1FCNzRxZhLEIlTp6evOqfMfNzLJXUuxc4TGcGoLWSX93BgbvUKVJSoueQ89hC87K
S5DEPlqdUhccYOuUKzuo3mo29gOtIVSBCxKyVVEfhNaBBTJhgPoe4C+vh5C1HuFd
TavK1qlEDbFuAtnYN4EaKiRcRiBRKQxRTdQAHtapUnSBYT0bUEtwB7LUtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKvw1OC6WFuYjFlr6dfCjJD1uI8hMB8GA1UdIwQY
MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt
YmM5M2NhNjc5ZTFmLzEvcV9EVTRMcFlXNWlNV1d2cDE4S01rUFc0anlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm
LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSPmMA0G
CSqGSIb3DQEBCwUAA4IBAQCdl4q3cYeffXhwqlrVcjk99gv1KqlEEHsrn8aWAP/x
4GzIU+oSbhnILpRK1bbHjlG0J09SO5R2+kicKmsjb1ssy9sOpEbZnUzQ2BiTANc3
u+aPi+yv9N0sSDvJl8YxallN7PZWHgewuMKaeuKsaLVLfhQ7Uz80dDRM0zuH6IFq
x8tuEDU2lokMmvzCUzC6h1dI5rLJfjZdM6w6F988pSZKg3OhOqRqRT5MkSnt2/lA
EBEInj8b/gzC4OJY6CNMVUkNv6q8h4x+hYHE9BfG4Uztxfn2ClKzDeoCJYgTRsTn
mgwI0Pblk0iqiWLPT4SXi5QfWG518vOyn+Aqft4cYAfo
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:08 2025 by rpki-client