Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QXwKi-EYsjXq95nx_uhh0UNZiu4.roa
File: QXwKi-EYsjXq95nx_uhh0UNZiu4.roa (raw, json)
Hash identifier: /tVo9nZSrnwYHXWdhkjm0MSdJvdbTmNsj8vSDpBdklA=
Subject key identifier: 41:7C:0A:8B:E1:18:B2:35:EA:F7:99:F1:FE:E8:61:D1:43:59:8A:EE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199BDF212B03F9FC27EEEB1D105C4F4B8F6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QXwKi-EYsjXq95nx_uhh0UNZiu4.roa
Signing time: Tue 07 Oct 2025 09:13:02 +0000
ROA not before: Tue 07 Oct 2025 09:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210448
IP address blocks: 217.60.13.0/24 maxlen: 24
2a14:6e40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:f2:12:b0:3f:9f:c2:7e:ee:b1:d1:05:c4:f4:b8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 7 09:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=417c0a8be118b235eaf799f1fee861d143598aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:a1:96:bb:d5:ee:47:72:a2:2f:16:9c:ba:
39:4d:72:d3:99:44:31:28:fb:bb:6f:94:e4:2f:58:
37:46:f3:e7:62:75:8c:36:07:c1:36:78:50:2f:d9:
a7:f7:79:32:a2:82:a7:ee:b6:94:3b:87:5e:04:bd:
88:3d:b8:80:98:89:a3:d7:bc:f0:b3:90:d7:b4:f2:
c8:a5:3e:de:97:33:a1:1a:b6:76:b9:70:63:e9:de:
d4:8c:e0:32:35:c9:bd:b2:b9:a3:2d:92:fa:75:43:
7b:d6:17:c6:21:7b:60:77:82:22:72:f4:b2:88:42:
01:cb:7d:3c:26:90:2c:83:62:87:6d:cd:37:d8:ed:
96:f1:5c:03:57:01:a7:9a:1c:68:97:51:42:3e:e1:
07:9b:c2:db:d3:b3:b9:c7:cc:17:0e:8c:1f:9f:3f:
f5:05:14:3b:77:b0:ee:c6:65:9e:d8:49:7b:19:95:
ec:de:81:64:86:31:27:c1:0e:b1:0d:aa:09:01:57:
1e:0c:33:2e:3c:61:ca:fd:4c:d1:e3:1e:82:f9:af:
3d:0d:1d:30:e4:df:7b:f4:42:86:f7:a1:b7:2b:fa:
fd:ff:51:be:a9:e1:fc:af:3c:e7:eb:41:d0:18:c0:
e5:34:81:7d:58:e5:ef:99:f6:a0:39:1b:7e:3f:94:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7C:0A:8B:E1:18:B2:35:EA:F7:99:F1:FE:E8:61:D1:43:59:8A:EE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QXwKi-EYsjXq95nx_uhh0UNZiu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.13.0/24
IPv6:
2a14:6e40:2::/48
Signature Algorithm: sha256WithRSAEncryption
2e:1a:f0:a7:c6:a4:b4:1d:cd:64:51:e4:82:56:b9:52:b6:b1:
68:42:2d:88:1f:2e:2e:a5:cb:87:0e:f4:75:58:43:3d:ea:da:
ad:e8:62:43:e3:31:c8:09:df:48:77:13:b6:ad:31:c5:89:96:
55:20:25:c4:ec:bf:ae:61:68:ec:73:2c:90:5c:d5:2d:bc:eb:
c3:ba:7c:ea:eb:69:a3:10:f1:95:3f:b9:f8:e7:b7:22:29:a5:
68:65:82:bc:65:cb:6a:f3:59:24:fa:f7:78:36:f3:7c:f4:55:
03:35:fd:bf:00:7f:57:f2:54:9d:d0:ff:02:3a:03:6b:e9:3a:
e8:54:1d:4b:16:47:b3:64:78:9a:7a:70:93:e7:ca:c5:b5:1c:
b4:c7:8a:72:4b:68:40:8e:a1:1e:b7:57:61:00:89:cb:41:8b:
9b:62:91:74:46:5d:38:b5:09:86:69:a4:b2:dc:12:da:05:2b:
3c:7f:57:9f:4a:4e:08:40:ad:7f:76:43:13:d9:6b:ef:e9:6f:
08:83:ec:d6:ce:52:bd:3d:57:9a:93:de:1b:2f:14:93:a4:d7:
c1:1a:00:2f:1f:48:9a:8e:87:e3:c5:85:72:bb:09:e1:6c:fc:
58:7f:35:ae:1d:ef:e6:5f:b1:87:1e:88:0d:ea:32:4a:7b:60:
da:df:ae:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:56 2025 by rpki-client