Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/dqRWzSNCruVCqi7CqPXaFVIAZqc.roa
File: dqRWzSNCruVCqi7CqPXaFVIAZqc.roa (raw, json)
Hash identifier: 1yVtBaBVVLrbvd7QX7NgCFT4elTOPpbTI0QeBKDstSU=
Subject key identifier: 76:A4:56:CD:23:42:AE:E5:42:AA:2E:C2:A8:F5:DA:15:52:00:66:A7
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 01997C285BEA99489AA2D79F1B463B76AAE2
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/dqRWzSNCruVCqi7CqPXaFVIAZqc.roa
Signing time: Wed 24 Sep 2025 14:37:23 +0000
ROA not before: Wed 24 Sep 2025 14:37:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210202
IP address blocks: 107.150.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7c:28:5b:ea:99:48:9a:a2:d7:9f:1b:46:3b:76:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Sep 24 14:37:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76a456cd2342aee542aa2ec2a8f5da15520066a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:9a:28:f4:2c:c9:79:77:21:da:cf:08:54:
37:62:24:54:38:f3:02:50:1b:66:74:6b:b2:e5:02:
68:f0:6a:33:e2:7c:2b:eb:70:11:04:ce:0a:66:b7:
39:a1:1d:1f:1f:81:6c:44:f9:ec:a0:bd:bc:6a:b8:
e1:ea:96:ee:23:38:00:38:37:76:90:65:2f:09:f3:
05:dc:2b:9e:68:8d:98:02:b2:6b:1c:a2:6b:7c:11:
c2:29:49:e3:51:f8:95:ab:46:23:6e:f2:02:cc:4b:
33:b3:81:04:73:38:08:23:05:9e:5b:28:92:63:a2:
23:68:10:a6:2f:e9:a8:09:96:36:92:0d:4c:a6:eb:
b6:ef:78:72:13:83:26:ef:26:08:bf:09:22:b0:78:
4b:ba:dc:cc:ac:a6:f9:a7:10:4f:e6:3f:c7:7b:d8:
05:31:5a:42:b9:2c:ca:a6:67:9e:d0:a9:52:37:30:
1b:09:57:c3:a0:51:59:d7:98:9e:46:28:be:24:7a:
28:dc:1f:02:cd:d1:74:63:d4:6d:4c:72:2e:28:dc:
f4:0f:4f:09:28:ee:3c:ab:0f:61:21:2d:f0:df:e7:
8f:e7:e5:21:cc:64:78:12:90:d2:f2:dd:a1:9a:f1:
28:10:ba:c1:5a:9d:1f:8c:4b:48:85:ae:ed:10:e3:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:56:CD:23:42:AE:E5:42:AA:2E:C2:A8:F5:DA:15:52:00:66:A7
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/dqRWzSNCruVCqi7CqPXaFVIAZqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.164.0/24
Signature Algorithm: sha256WithRSAEncryption
62:50:82:f2:60:24:a3:6f:29:ed:ac:4e:20:89:82:b9:39:cf:
1a:15:f5:c7:f8:f9:ff:37:e7:8c:66:25:aa:24:77:d3:a2:32:
ab:f0:be:de:00:a0:a0:27:52:73:df:a5:c1:da:fd:42:80:6e:
2b:6d:26:21:2c:b4:eb:e8:fe:f0:23:7a:53:b4:72:42:1e:a8:
f4:95:15:7d:66:8f:ab:62:48:21:9a:3a:fb:36:b9:a5:ee:16:
2b:15:80:63:5d:be:c5:c3:bc:82:5b:eb:34:50:27:09:6c:4f:
5e:2f:cd:d7:ca:38:c5:3b:56:85:cf:7b:b3:fb:fb:1a:8a:44:
8c:ad:67:01:16:55:88:4e:8b:25:e5:8d:22:88:34:91:d3:01:
ad:b8:ad:e2:34:98:3d:d3:3a:16:cb:1f:5d:69:43:c7:97:42:
e8:6a:36:0a:e9:06:38:a7:97:9f:74:b8:36:55:74:a8:0e:70:
6f:55:8a:b4:79:d9:87:06:5e:5b:4a:48:4e:b2:68:df:4a:33:
78:f0:d0:40:ca:fe:f7:b0:51:4a:7d:5f:5b:d7:3f:52:6e:a3:
67:41:78:98:5c:fc:e4:3f:58:be:4e:04:c3:b1:9f:82:07:25:
53:97:21:f7:d0:54:a4:4f:21:ac:c7:4f:ec:2b:37:40:03:13:
b3:33:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:49 2025 by rpki-client