Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/QgExJsLM6ckB_bwe9qRnk4o5HhA.roa
File: QgExJsLM6ckB_bwe9qRnk4o5HhA.roa (raw, json)
Hash identifier: P6xf+cz+/i4pkIjOYnliYy5pmyQWXuehaFAXXoyCR5k=
Subject key identifier: 42:01:31:26:C2:CC:E9:C9:01:FD:BC:1E:F6:A4:67:93:8A:39:1E:10
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 01977002BF85C779AB65E55A7538B12A30E7
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/QgExJsLM6ckB_bwe9qRnk4o5HhA.roa
Signing time: Sat 14 Jun 2025 19:55:17 +0000
ROA not before: Sat 14 Jun 2025 19:55:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34177
IP address blocks: 46.255.160.0/21 maxlen: 24
91.207.254.0/23 maxlen: 24
185.100.4.0/22 maxlen: 24
194.110.192.0/24 maxlen: 24
195.144.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:02:bf:85:c7:79:ab:65:e5:5a:75:38:b1:2a:30:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Jun 14 19:55:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42013126c2cce9c901fdbc1ef6a467938a391e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:af:d7:1c:d5:23:8c:3a:d3:81:f8:db:3c:
56:94:26:8f:e4:34:24:16:0a:1e:d4:cd:aa:e3:56:
b6:36:6f:b0:34:e8:df:8b:ad:8f:52:3f:7e:a8:3b:
e8:0f:f9:6c:61:63:bf:ce:c5:1b:30:b8:cc:f7:02:
93:71:09:54:89:04:de:09:87:42:5e:92:27:77:99:
bd:eb:ed:26:1b:a2:2a:72:95:fd:89:ba:52:b3:36:
43:a9:73:b3:ce:84:18:13:75:01:72:70:66:81:87:
6a:b7:4a:4c:9f:17:39:9a:ec:99:a1:7b:b3:b2:f6:
a8:1d:c0:f7:c1:1d:f6:ae:90:52:66:04:9b:0f:26:
7d:22:b5:ca:06:05:4e:15:90:5c:c2:a6:84:93:01:
4b:53:dc:7e:82:af:23:55:63:c3:a2:9a:e5:23:85:
e0:b8:c2:a9:38:b5:7c:f3:6d:ce:12:c2:21:f2:f7:
c4:db:72:b0:06:e7:b9:9f:c5:bb:d5:93:76:65:70:
e5:4d:e2:69:14:69:6a:2f:d3:fb:e6:26:77:53:9d:
5b:bf:89:3d:5f:b0:6e:0c:3b:3b:cc:0d:ed:9c:e8:
19:00:06:57:95:9a:61:92:19:51:61:dd:fb:80:8f:
48:71:2c:4c:2d:39:cd:a4:01:ed:d4:ff:2f:e4:e3:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:01:31:26:C2:CC:E9:C9:01:FD:BC:1E:F6:A4:67:93:8A:39:1E:10
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/QgExJsLM6ckB_bwe9qRnk4o5HhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.160.0/21
91.207.254.0/23
185.100.4.0/22
194.110.192.0/24
195.144.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:83:31:4a:c2:5b:14:4f:2f:b2:7e:1e:68:1d:e4:b9:22:cc:
c4:3f:3c:48:9c:4e:be:aa:46:36:f1:b1:3f:a7:7a:f1:fb:5f:
63:f9:eb:54:49:05:2f:e9:3d:06:b1:c3:20:09:7c:99:fa:38:
fe:f4:bb:57:33:3e:b5:e2:d1:65:82:a6:81:c7:c0:21:42:79:
5c:a5:4e:2b:ac:5d:90:1e:1a:83:02:f5:93:0e:64:92:7b:cb:
3c:9a:c6:80:d1:57:68:55:d8:dd:d9:75:c1:66:00:0e:17:77:
3f:96:1c:2e:af:85:13:aa:b6:28:ee:c4:41:6b:c1:4b:46:be:
7d:fc:c3:a8:ef:de:61:d2:16:c8:71:80:e1:a1:c2:e8:81:9f:
b5:b8:5c:be:aa:0e:50:2a:ff:41:4e:01:73:60:b3:f8:c7:3c:
27:13:ac:63:e3:91:7e:84:31:09:23:76:f1:89:99:f6:9a:a8:
42:54:13:2f:c1:c8:9f:82:1b:d0:dc:24:a1:a9:4e:e8:fa:c6:
1f:38:ac:82:34:27:07:7c:3c:08:10:10:f5:ff:48:f1:d8:f1:
01:66:0c:3f:f4:0d:51:69:e9:82:5a:dd:38:a0:84:5d:03:4f:
ee:8f:e7:52:0a:0c:73:69:ab:95:a2:60:b5:27:f0:8b:a3:5d:
de:b1:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:28 2025 by rpki-client