Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/1-Qc-jMtuCJmDJ99XnaveA8pYcIY.roa
File: 1-Qc-jMtuCJmDJ99XnaveA8pYcIY.roa (raw, json)
Hash identifier: n91DHx85S8Gjw41fymDMOdRoZ/qxlLYICezT8ZEtkRM=
Subject key identifier: F9:07:3E:8C:CB:6E:08:99:83:27:DF:57:9D:AB:DE:03:CA:58:70:86
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0197AC90D6F701FE95FF65F4A2D48D4CE65B
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/1-Qc-jMtuCJmDJ99XnaveA8pYcIY.roa
Signing time: Thu 26 Jun 2025 14:07:42 +0000
ROA not before: Thu 26 Jun 2025 14:07:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.10.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:90:d6:f7:01:fe:95:ff:65:f4:a2:d4:8d:4c:e6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jun 26 14:07:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9073e8ccb6e08998327df579dabde03ca587086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:83:eb:36:39:dc:e8:0f:8c:6b:80:ba:ac:
84:06:f9:ea:52:03:ec:9b:3b:26:f2:d9:2d:4f:25:
0f:d5:7e:15:fe:89:ab:ec:eb:07:8a:9f:64:2b:84:
af:ec:dc:19:82:9e:9a:4e:ec:03:20:3f:06:f6:84:
d3:96:af:72:29:5c:c2:fa:cf:37:6e:e9:4a:8f:5e:
6b:09:73:bd:18:b0:99:e7:b7:36:07:1b:02:88:98:
7d:73:50:3f:12:b9:6f:7d:d1:e7:36:4f:48:1c:c8:
1f:b1:95:2a:a7:31:82:e3:e8:0d:58:43:f3:4d:39:
0c:54:60:1a:ed:08:26:db:56:e1:f7:48:75:df:56:
91:29:71:83:65:0d:d9:26:3c:f8:78:09:35:a7:65:
52:de:bc:5f:70:f0:34:8f:23:e7:f7:e4:d1:bc:eb:
49:cf:31:67:4a:e0:05:7f:3a:bf:4c:c5:de:02:4e:
cd:de:96:3a:42:1c:0d:4f:7c:41:b5:b4:09:b9:2a:
3a:fe:b9:82:97:f4:10:bc:cc:b7:16:58:75:61:7c:
f3:07:69:c8:05:79:cf:27:be:2f:24:96:57:37:bb:
71:2b:a5:24:49:63:16:48:63:9e:6e:ef:cb:6a:28:
df:6f:df:c9:c6:7b:88:dc:0f:9a:a6:20:f7:a5:39:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:3E:8C:CB:6E:08:99:83:27:DF:57:9D:AB:DE:03:CA:58:70:86
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/1-Qc-jMtuCJmDJ99XnaveA8pYcIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.218.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:94:9c:67:49:a2:38:61:e2:5c:29:46:2a:29:c2:01:23:61:
f8:42:52:7c:10:ad:59:bc:fe:54:2b:0f:94:4a:e3:ab:00:d6:
a4:3a:72:35:0b:35:c6:9b:52:bb:ca:87:fb:b9:99:5c:95:f3:
db:bf:5c:5a:9d:0e:68:49:1b:f1:eb:8f:31:31:a1:d3:17:68:
ff:5e:66:bf:0c:30:00:9c:9a:a0:64:79:70:73:9a:64:0d:70:
8a:8e:9d:6d:92:90:4c:7a:12:b6:1b:c3:6d:9b:e0:aa:f8:e7:
5e:d2:61:85:0c:61:58:b4:ec:99:f0:11:dd:c7:14:93:47:af:
be:2a:39:34:d7:c2:d1:58:67:0e:1a:06:57:15:39:4f:7b:f1:
d7:4c:94:1d:4b:7f:d1:04:83:e2:51:f3:2f:ed:99:00:09:0e:
95:4d:ba:77:9e:a7:d7:21:ee:11:c6:f5:50:e2:9e:0f:9e:00:
e8:8d:74:00:46:91:4e:a7:59:26:9c:e8:2e:2e:59:31:f1:a9:
a9:33:de:f6:9e:45:c9:77:c9:c6:e8:9f:66:7c:3d:88:3a:a7:
d6:44:7b:6c:f5:2d:17:d4:a4:49:65:6a:c2:33:9e:de:b1:ab:
64:dd:a6:a7:85:8d:43:c5:56:96:9f:fa:b3:4a:4f:b8:94:a9:
7f:0d:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:05:18 2025 by rpki-client