Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/cQXbLD3t1saXEnISbFZ-Z9wBcuo.roa
File: cQXbLD3t1saXEnISbFZ-Z9wBcuo.roa (raw, json)
Hash identifier: BitU7YdfmBPoL8mPTYZZ6Qt04sbtc1LwooL1j4vtw7k=
Subject key identifier: 71:05:DB:2C:3D:ED:D6:C6:97:12:72:12:6C:56:7E:67:DC:01:72:EA
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019946F4D988165F91D6AE350955285EF73E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/cQXbLD3t1saXEnISbFZ-Z9wBcuo.roa
Signing time: Sun 14 Sep 2025 06:41:15 +0000
ROA not before: Sun 14 Sep 2025 06:41:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215285
IP address blocks: 37.32.42.0/24 maxlen: 24
185.243.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:46:f4:d9:88:16:5f:91:d6:ae:35:09:55:28:5e:f7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 14 06:41:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7105db2c3dedd6c6971272126c567e67dc0172ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:22:0f:94:1f:99:31:46:03:32:77:8c:a1:
53:f6:d9:8f:10:78:7d:4b:46:d0:1f:b6:64:e5:b1:
c2:a0:06:cb:f8:5f:1c:7b:b8:51:e2:13:f0:bd:d3:
32:ac:df:e8:b8:d1:92:d7:69:8c:f9:d2:59:92:6b:
4e:e1:31:eb:fd:3d:00:ac:d9:94:5b:87:b9:18:8f:
a8:34:d9:f3:26:94:bc:1f:ae:90:86:95:cb:dd:78:
00:f0:68:ec:f0:78:7f:69:81:8b:c3:23:03:90:26:
0b:b6:2d:50:96:00:a7:54:f1:70:02:9a:1e:2f:a5:
72:e7:28:37:6d:a2:07:e4:cb:b7:b0:68:14:97:48:
f1:33:a4:b3:23:a3:e4:25:6f:f4:c7:e9:59:d9:71:
a7:ab:3f:d9:53:83:51:90:8e:5a:0d:f0:8d:ad:be:
86:17:69:e9:ae:93:7d:a0:75:ab:c7:e3:6c:0b:0b:
c3:c4:54:b1:ee:f3:c6:90:55:6c:af:7d:00:d9:3c:
5d:4c:38:4f:a5:7d:26:2a:51:de:73:f0:a4:27:76:
e7:45:e8:0d:9e:66:85:6d:ca:77:48:4c:fb:bc:19:
bc:64:a7:81:31:a7:97:c7:18:11:fe:b0:d6:91:47:
67:5d:b4:35:b2:fe:f5:17:48:c8:cf:e3:cd:36:94:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:05:DB:2C:3D:ED:D6:C6:97:12:72:12:6C:56:7E:67:DC:01:72:EA
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/cQXbLD3t1saXEnISbFZ-Z9wBcuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.42.0/24
185.243.49.0/24
Signature Algorithm: sha256WithRSAEncryption
60:be:da:98:00:92:ae:8c:88:46:d2:69:76:87:30:b0:77:80:
66:04:0a:7a:a8:99:31:5f:58:42:6e:08:7d:1e:51:80:fa:db:
58:03:79:72:84:5e:54:45:90:10:2c:93:1a:6b:76:7a:50:1a:
26:28:fc:5e:1f:2d:a5:9b:65:8d:77:99:78:71:12:5b:f9:cd:
26:2d:bd:8f:28:3b:2b:e8:b2:79:97:08:32:d7:9a:b8:9c:6d:
51:fc:46:4b:6d:85:74:fd:0d:b5:30:27:be:3c:5c:88:2d:a7:
84:9d:aa:c3:52:55:5e:e0:34:0f:4a:3d:a2:b3:dd:9e:77:f2:
ab:4f:de:63:b8:74:33:99:8d:0a:6c:2c:00:41:fe:e6:84:e9:
e1:52:de:4b:d5:b8:87:2b:e1:9d:bc:65:b7:33:23:22:9d:95:
02:c4:85:32:f6:5e:ee:a6:c5:f0:f2:40:e7:72:ca:02:b1:4f:
f4:7b:04:7c:ee:c7:18:61:80:c4:63:ab:cb:82:d4:e3:fd:31:
4b:cf:42:54:af:9e:d9:f2:e9:06:46:fe:f0:ce:2c:55:2b:00:
19:9c:9a:4b:2b:a6:20:28:98:8e:9a:3b:64:ed:d0:47:dc:a7:
38:02:c0:ed:10:d3:5c:23:8e:ca:f3:81:a5:b0:15:51:8c:fb:
4e:ca:69:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:01 2025 by rpki-client