Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/QibeyjSv1hfxKFEaKrbqmDXpj2I.roa
File: QibeyjSv1hfxKFEaKrbqmDXpj2I.roa (raw, json)
Hash identifier: ifdoDGnGJbL7K4fA7Xk5/reVlWdHN5zJyJBNdlq2ay8=
Subject key identifier: 42:26:DE:CA:34:AF:D6:17:F1:28:51:1A:2A:B6:EA:98:35:E9:8F:62
Certificate issuer: /CN=38183150af290d0f6d25b036136f1cbf6b0f17c9
Certificate serial: 0199E7899BF1F07A68158A613A285BC3805A
Authority key identifier: 38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/QibeyjSv1hfxKFEaKrbqmDXpj2I.roa
Signing time: Wed 15 Oct 2025 11:02:59 +0000
ROA not before: Wed 15 Oct 2025 11:02:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213421
IP address blocks: 194.117.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:89:9b:f1:f0:7a:68:15:8a:61:3a:28:5b:c3:80:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38183150af290d0f6d25b036136f1cbf6b0f17c9
Validity
Not Before: Oct 15 11:02:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4226deca34afd617f128511a2ab6ea9835e98f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:85:8e:28:47:ba:11:e1:69:8f:a8:ab:90:
de:55:52:f8:14:96:d2:9c:0c:17:97:28:76:5a:aa:
73:56:ec:f6:c7:d5:21:22:91:4c:18:d0:7c:1a:6f:
03:49:33:5e:50:1c:f1:df:ec:71:d8:2b:5a:62:90:
b5:9a:f0:5c:55:fe:bf:cd:a8:1a:fd:14:a2:7c:b2:
d9:bb:5b:f1:28:96:ab:f8:4c:6d:66:7f:ab:82:93:
71:e7:3e:0a:64:4e:e6:0a:43:67:bf:13:35:0f:d5:
8a:91:d4:35:f3:88:fb:25:40:07:66:09:c1:32:ec:
9b:82:fe:6c:45:14:4a:09:26:c3:ca:64:7f:17:dc:
42:54:c8:e9:01:49:41:f6:53:62:72:81:7e:88:69:
dd:39:63:c7:91:67:b5:a1:7a:09:32:62:c4:f6:86:
ca:07:1c:45:a6:09:83:70:ac:fa:d4:33:16:78:03:
77:56:ca:92:1e:a1:f3:68:73:08:24:da:26:d1:93:
8d:c9:1d:44:ac:79:05:ec:54:af:37:74:cf:cd:06:
9d:ac:9d:6c:84:62:36:c3:49:3e:d9:0f:f2:af:da:
4f:a5:54:c2:a2:84:ee:5e:84:cb:aa:0e:b6:1e:00:
ca:68:9b:2f:60:60:20:44:48:71:71:d8:0f:98:78:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:26:DE:CA:34:AF:D6:17:F1:28:51:1A:2A:B6:EA:98:35:E9:8F:62
X509v3 Authority Key Identifier:
keyid:38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/QibeyjSv1hfxKFEaKrbqmDXpj2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:36:02:63:8c:37:0c:e0:f4:2c:bd:6e:e9:12:28:95:5b:9b:
ea:ad:b6:59:c4:5d:6b:51:b6:3c:5e:fc:17:e3:1d:79:65:65:
e2:0a:df:bf:16:07:da:a1:2a:3b:c0:cb:b8:43:b3:83:53:40:
d4:d4:48:93:7f:e9:17:04:d2:18:34:73:23:ab:45:b2:1f:10:
65:17:b5:a4:3b:e1:0d:2c:50:87:5b:ba:91:58:1d:c8:f2:68:
25:54:17:20:29:ee:8e:ce:61:a1:68:f9:4b:eb:b6:83:44:d2:
05:78:87:b1:c0:e7:39:db:f7:49:4f:0e:3c:a0:54:4b:5e:b6:
be:60:2f:dd:6a:e5:64:66:ca:e5:c1:ee:26:96:1d:05:ad:54:
62:1d:52:ee:9b:af:32:2c:44:f5:72:41:3d:dd:56:63:42:e6:
3f:cd:b5:84:cc:eb:37:1f:5a:16:60:40:45:c2:6c:34:9b:99:
47:e8:6c:db:47:da:80:82:a5:bf:65:d4:2e:cc:a8:39:57:88:
97:5e:35:2b:c6:39:42:f7:86:7b:d9:81:10:6c:eb:f5:66:ad:
ac:eb:ed:97:27:28:3b:49:af:a2:61:29:25:8c:d0:bf:49:78:
d3:f3:71:c1:3a:75:64:36:f4:b6:e1:a0:ec:cc:76:50:c5:2e:
df:71:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:34 2025 by rpki-client