Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/CQXjCa3yi8toyI8D2iyn1nJHCCE.roa
File: CQXjCa3yi8toyI8D2iyn1nJHCCE.roa (raw, json)
Hash identifier: zzTAvRa0dIhKCaLz0Z33rjK8d1jpJKtgjFLfVr4tcRc=
Subject key identifier: 09:05:E3:09:AD:F2:8B:CB:68:C8:8F:03:DA:2C:A7:D6:72:47:08:21
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 0199DD813C1AA03AA510686CCBF9BA6F3FDC
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/CQXjCa3yi8toyI8D2iyn1nJHCCE.roa
Signing time: Mon 13 Oct 2025 12:17:38 +0000
ROA not before: Mon 13 Oct 2025 12:17:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12796
IP address blocks: 94.190.128.0/20 maxlen: 24
94.190.160.0/19 maxlen: 24
94.190.192.0/23 maxlen: 24
94.190.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:81:3c:1a:a0:3a:a5:10:68:6c:cb:f9:ba:6f:3f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Oct 13 12:17:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0905e309adf28bcb68c88f03da2ca7d672470821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:31:75:21:90:8f:99:82:72:36:e5:79:02:
84:90:68:48:0f:63:69:63:db:28:e4:a3:85:5e:e6:
ef:54:6f:54:21:78:30:d4:d8:dd:d9:27:37:03:03:
88:2a:21:a2:c9:5f:26:44:17:ca:bf:fa:2e:cd:0d:
16:e1:8e:8a:2d:57:81:d3:7b:71:f5:e0:5d:e1:d5:
13:62:1a:72:23:e4:2f:6c:23:c8:f4:b3:a7:65:d4:
d9:92:61:db:22:9c:09:9b:1f:3f:81:6c:c6:3f:e9:
80:0a:ff:b6:a9:4e:29:bb:54:2d:0a:c9:2a:86:38:
a2:ed:ea:75:bd:9e:64:07:a2:ef:0e:d3:1b:dc:91:
02:d9:f6:00:ab:2b:33:7a:5e:53:77:e8:80:86:3c:
d0:e3:88:e8:20:84:ac:e2:52:7c:33:21:db:d1:51:
cc:c7:05:01:49:4b:92:5a:5e:85:e3:a7:19:24:55:
1b:3f:fe:dc:74:08:d0:f3:81:3f:2d:40:82:90:66:
bc:1d:35:7d:4d:13:86:1b:6d:1c:b7:3b:35:f2:a0:
9a:54:75:b4:ee:5b:dd:d8:ed:b5:b2:de:d4:58:e0:
5c:09:e1:38:4b:de:7c:a0:da:94:41:d3:e7:fe:56:
68:29:3e:3c:c2:72:97:4b:0b:04:ee:b6:0f:81:81:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:E3:09:AD:F2:8B:CB:68:C8:8F:03:DA:2C:A7:D6:72:47:08:21
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/CQXjCa3yi8toyI8D2iyn1nJHCCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.128.0/20
94.190.160.0-94.190.194.255
Signature Algorithm: sha256WithRSAEncryption
57:76:ad:e0:23:56:5e:4f:ee:25:f3:bf:8b:d1:b8:20:da:54:
c6:3c:e6:ad:76:a2:09:d5:fe:0d:ed:36:c4:58:69:1a:26:48:
2b:91:69:55:c9:c4:b4:0d:e6:11:2f:2f:a5:a4:f7:fc:2b:ff:
fe:4e:6d:55:08:e1:3b:4a:fe:e8:07:98:77:13:5e:60:84:fb:
1c:40:9e:50:4c:bd:42:50:57:0c:18:2e:2f:aa:c0:b9:62:b8:
54:f1:52:78:fa:cd:d4:0b:bb:a9:db:6c:88:f0:e9:d3:67:7e:
62:a7:43:5c:ba:e2:97:c8:1d:00:16:e8:09:4b:ed:bb:8a:f2:
af:b6:c5:f8:7a:d3:47:56:93:0e:21:18:4a:b9:e2:4c:4f:1d:
4e:6f:ce:f8:ca:61:e6:84:cc:f8:ba:80:2b:eb:1e:d3:3d:4a:
97:4d:e1:4c:31:e1:e1:59:5d:af:03:7d:84:39:8b:5c:a8:37:
4f:80:fc:79:8e:f8:52:46:22:dd:33:1a:ca:e1:3c:d5:5a:14:
a4:f5:4f:6e:e4:7f:86:98:ae:75:83:53:f1:47:71:ad:b9:ca:
63:22:02:89:e5:53:be:b6:18:18:e0:e3:0e:eb:2a:26:1e:64:
3a:66:c4:f1:5b:0b:c8:c6:12:b2:cc:60:22:e4:01:92:4a:0a:
d9:03:77:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:09 2025 by rpki-client