Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/qkvMUmepPhpdWAB6-kEpJtY3NgA.roa
File: qkvMUmepPhpdWAB6-kEpJtY3NgA.roa (raw, json)
Hash identifier: qaU4Jh390H+MIqIOppGDPnJrwDH9PpOIvAh+NgpJEXk=
Subject key identifier: AA:4B:CC:52:67:A9:3E:1A:5D:58:00:7A:FA:41:29:26:D6:37:36:00
Certificate issuer: /CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Certificate serial: 019923F68A70A41E11BC27698533BA29DD33
Authority key identifier: E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/qkvMUmepPhpdWAB6-kEpJtY3NgA.roa
Signing time: Sun 07 Sep 2025 11:36:23 +0000
ROA not before: Sun 07 Sep 2025 11:36:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35656
IP address blocks: 87.236.232.0/21 maxlen: 21
87.236.232.0/24 maxlen: 24
87.236.233.0/24 maxlen: 24
87.236.234.0/24 maxlen: 24
87.236.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:f6:8a:70:a4:1e:11:bc:27:69:85:33:ba:29:dd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e400e01a795a9572cfb1acd8596c9ad33c612659
Validity
Not Before: Sep 7 11:36:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa4bcc5267a93e1a5d58007afa412926d6373600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ee:72:99:cb:61:1f:ce:60:3f:2b:78:c4:3f:
fb:79:ce:1b:0a:44:10:95:7b:74:cf:36:76:d3:9e:
af:5d:e0:b6:b5:54:cb:36:7c:d6:d3:28:c6:cc:ee:
d9:60:77:83:26:3c:49:69:3a:03:86:e5:7d:04:bb:
40:65:78:34:d3:8b:73:c6:f8:b3:1f:44:30:ab:83:
df:53:46:25:83:a1:09:2d:78:65:cd:85:9e:b1:82:
f9:9a:1a:a5:40:b0:3a:41:55:d2:70:0b:15:5d:05:
14:73:a8:79:d5:ae:64:17:c0:ee:6a:ac:0a:11:bd:
3d:a4:fe:2c:50:90:e6:1a:9d:fa:78:3f:79:ff:74:
22:b3:d4:65:5e:5e:34:c3:fc:a4:cb:e2:01:f8:73:
7f:91:50:12:a9:09:db:1a:00:b0:2e:11:2f:7c:50:
a7:42:e9:35:b1:5e:6f:81:26:60:73:46:42:a1:87:
ee:00:17:52:26:7e:7a:97:60:89:77:f6:f4:0a:6a:
f9:f5:99:47:58:9f:99:aa:a6:4c:92:41:4b:70:f7:
0a:9b:4f:24:d3:55:97:cf:9f:b2:d5:58:e5:23:c9:
9e:bc:c5:7b:6b:97:6a:0e:ac:cc:dd:4e:a9:84:27:
3e:7f:8a:7e:f8:74:d3:9d:a0:15:e6:ce:d8:86:ff:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:CC:52:67:A9:3E:1A:5D:58:00:7A:FA:41:29:26:D6:37:36:00
X509v3 Authority Key Identifier:
keyid:E4:00:E0:1A:79:5A:95:72:CF:B1:AC:D8:59:6C:9A:D3:3C:61:26:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ADgGnlalXLPsazYWWya0zxhJlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/qkvMUmepPhpdWAB6-kEpJtY3NgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aed261-93bc-4b0f-95f9-0c3eb1a0dd80/1/5ADgGnlalXLPsazYWWya0zxhJlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.232.0/21
Signature Algorithm: sha256WithRSAEncryption
56:44:fd:39:7b:e3:e7:37:4f:e2:39:3c:e7:b6:2c:48:1c:79:
0a:25:66:44:43:85:a4:66:19:2d:53:95:7e:8e:42:ec:a8:4c:
5f:bc:f0:31:c3:c0:d9:d5:6f:2a:d4:49:f7:30:f5:83:d9:3a:
c8:89:c8:ce:3f:1d:d4:49:9d:19:9f:95:40:58:53:0d:c0:9c:
81:71:36:2f:a4:b5:6c:6d:f2:81:7f:6d:c0:31:f6:83:59:45:
23:f6:77:2b:d3:60:b6:12:51:49:3a:5d:70:0c:30:99:b9:21:
41:1b:26:2c:ef:fd:a3:cc:26:f3:61:53:10:8e:1b:5e:d4:95:
af:23:9e:91:1d:87:1e:69:17:cd:1f:c9:d5:67:aa:75:74:08:
97:48:d0:af:62:a0:1b:68:2d:c1:76:7b:63:92:e9:21:b1:0f:
25:3d:29:f9:8c:94:37:3a:6a:16:31:41:52:d5:b8:1f:da:e6:
02:08:b6:b7:6e:2e:5f:d7:7e:74:55:a9:b5:39:86:68:d1:ba:
4d:2e:0a:77:10:1b:3b:cb:49:5e:c2:02:9c:5f:d3:dc:6c:a0:
7b:d3:77:6f:b2:6d:21:b4:12:c5:1f:29:4f:71:bf:0d:04:47:
15:a7:c3:cc:6b:6a:62:c2:3a:6b:1d:87:8e:26:83:45:6c:25:
c2:76:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:31 2025 by rpki-client