Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/mqcBsZguJ4u7DQyG9frvwf0EmHo.roa
File: mqcBsZguJ4u7DQyG9frvwf0EmHo.roa (raw, json)
Hash identifier: 0n6BWPSoOW6nqo6SiNgRiIzfLmFx0RVI3omPqv7vWao=
Subject key identifier: 9A:A7:01:B1:98:2E:27:8B:BB:0D:0C:86:F5:FA:EF:C1:FD:04:98:7A
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 0197ABDF3B17DAD9DA47BDED5775B595AFE2
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/mqcBsZguJ4u7DQyG9frvwf0EmHo.roa
Signing time: Thu 26 Jun 2025 10:53:43 +0000
ROA not before: Thu 26 Jun 2025 10:53:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52088
IP address blocks: 46.30.30.0/23 maxlen: 23
2a02:22f0:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:df:3b:17:da:d9:da:47:bd:ed:57:75:b5:95:af:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Jun 26 10:53:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aa701b1982e278bbb0d0c86f5faefc1fd04987a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:fe:02:e0:bb:4e:0d:b4:ed:1d:68:9c:06:
99:ef:f4:a5:0d:cf:e5:eb:a8:42:0d:dd:f9:e5:88:
07:44:e7:c9:f7:77:ac:06:19:5b:a3:a4:df:8d:00:
ca:43:5a:07:1e:03:e7:82:ea:7f:62:9a:95:fd:b6:
f4:b7:cb:90:e8:11:df:f3:04:88:77:28:9a:5e:62:
f7:ce:f0:04:af:35:3f:88:fb:be:59:d4:ec:07:7c:
80:94:c2:4e:d8:ff:d5:06:de:e2:3c:0d:d8:17:75:
ec:b1:18:e3:93:c5:f4:0f:fc:4b:59:f6:b7:76:b9:
37:83:6b:92:e3:88:c1:53:81:ad:f7:37:70:fd:03:
70:2a:d9:b6:dd:ce:d5:33:b7:c5:97:72:bd:01:5b:
37:05:6b:31:49:1f:53:30:c0:d3:ef:a8:b1:09:2e:
a4:30:4b:46:ff:27:93:6b:d9:87:ae:8d:1c:b9:79:
53:d0:02:e3:3c:8e:e3:9d:55:58:bb:f6:8e:51:88:
01:f8:22:91:2c:85:8e:07:aa:46:8d:db:d0:64:7f:
c2:c3:47:cf:f2:12:95:f8:9a:77:f0:6d:d9:61:76:
ca:6c:11:4e:a1:16:8a:45:70:5d:a7:9b:8a:9e:b1:
06:2a:94:f1:0c:1b:62:51:0e:27:77:c5:2b:e7:2a:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A7:01:B1:98:2E:27:8B:BB:0D:0C:86:F5:FA:EF:C1:FD:04:98:7A
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/mqcBsZguJ4u7DQyG9frvwf0EmHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.30.0/23
IPv6:
2a02:22f0:13::/48
Signature Algorithm: sha256WithRSAEncryption
3d:11:2c:84:5b:b2:e9:a2:fe:a8:b1:71:bb:94:0e:fb:28:7c:
b1:ea:51:81:e7:d2:c0:06:de:64:37:20:f4:70:e7:ca:a2:36:
fc:28:69:06:cd:a1:2c:a6:a6:7d:be:77:48:86:18:ae:ed:7e:
fc:33:ee:83:a8:4b:97:82:bb:a0:30:65:c8:46:e5:26:0e:5c:
8c:be:2b:9f:71:d8:63:a5:26:25:69:9c:84:ce:a6:dd:d2:c4:
50:0d:ea:3a:cd:8f:1e:cd:11:6d:d7:13:09:e0:15:6e:91:02:
50:36:76:46:c0:5c:6f:77:21:a7:22:66:0d:ea:0e:fe:8f:a1:
a2:38:74:e9:06:e8:1f:51:b0:60:13:f1:1a:23:18:23:16:a3:
74:8f:bd:3b:6b:ab:d2:39:02:cf:f7:f1:52:d2:05:03:e9:bd:
72:0c:cc:0f:3f:95:f5:2f:c4:a0:b3:a3:fe:3d:8a:a1:2a:13:
ad:70:fb:a2:88:8e:c9:ab:96:11:6f:e8:00:0d:87:35:d2:6a:
be:c8:ff:7d:2f:ab:9d:73:74:64:36:f1:dc:63:14:c3:b5:67:
44:e7:84:dd:e9:7d:7f:d7:2d:74:c1:f5:a6:b3:02:80:16:01:
c8:2b:b3:33:2f:76:59:6d:58:96:17:07:0d:f5:a9:07:b5:b9:
65:e5:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:29:11 2025 by rpki-client