Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qeVRyMRpIRTCiyhGNW5TvImuLoU.roa
File: qeVRyMRpIRTCiyhGNW5TvImuLoU.roa (raw, json)
Hash identifier: Bhrzoir6Tlp9wvICiMqlrrB2pSweMYoRLQcA6V92TT8=
Subject key identifier: A9:E5:51:C8:C4:69:21:14:C2:8B:28:46:35:6E:53:BC:89:AE:2E:85
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 0198BC197F21A94856AA5DBB793DCFE58D7C
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qeVRyMRpIRTCiyhGNW5TvImuLoU.roa
Signing time: Mon 18 Aug 2025 07:34:04 +0000
ROA not before: Mon 18 Aug 2025 07:34:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213934
IP address blocks: 80.232.163.0/24 maxlen: 24
94.100.0.0/20 maxlen: 24
94.100.0.0/24 maxlen: 24
94.100.2.0/24 maxlen: 24
94.100.6.0/24 maxlen: 24
94.100.7.0/24 maxlen: 24
94.100.8.0/24 maxlen: 24
94.100.9.0/24 maxlen: 24
94.100.11.0/24 maxlen: 24
94.100.12.0/24 maxlen: 24
94.100.13.0/24 maxlen: 24
94.100.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:19:7f:21:a9:48:56:aa:5d:bb:79:3d:cf:e5:8d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Aug 18 07:34:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9e551c8c4692114c28b2846356e53bc89ae2e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:42:b5:f8:18:81:00:02:3b:98:8b:e3:50:
2e:3d:67:ea:e7:07:47:f0:a6:b6:99:05:ee:55:c0:
e2:ca:c9:f4:13:e9:fe:19:24:24:28:31:81:55:3e:
dc:d0:fc:e6:d0:f2:1b:7c:10:f8:a8:eb:3e:49:b9:
95:15:48:a1:60:b7:0f:99:1b:cd:20:fd:ec:c0:6a:
8c:0d:12:ae:d5:86:df:fe:de:df:1e:ae:ab:d7:cc:
6c:bb:d9:8d:c0:35:3e:e3:6e:c0:47:d6:76:61:ac:
0f:17:5c:ed:c8:7b:a6:93:e7:4e:96:d1:fe:32:15:
ad:ba:8d:40:60:47:07:4f:fc:0f:6c:73:28:5a:70:
f7:66:fc:78:94:f4:82:c3:6d:36:bb:9b:4f:91:52:
cf:6f:2a:2a:a0:53:1c:f9:ce:4b:fb:76:08:3c:32:
f9:4f:6f:6a:ab:05:05:3b:65:c2:b4:83:28:d1:69:
e3:9a:16:64:ca:71:be:f9:67:70:dc:fe:ca:b1:62:
8e:87:11:56:b4:0c:af:1e:39:df:8f:fc:1b:3d:87:
ce:aa:47:45:df:31:57:61:09:84:1d:3f:1e:e3:93:
4f:bf:3d:6b:d3:74:0b:32:60:42:86:23:4c:cc:51:
9a:80:6f:b6:0f:9a:84:4b:30:c5:78:d3:98:e4:0b:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E5:51:C8:C4:69:21:14:C2:8B:28:46:35:6E:53:BC:89:AE:2E:85
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qeVRyMRpIRTCiyhGNW5TvImuLoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.232.163.0/24
94.100.0.0/20
Signature Algorithm: sha256WithRSAEncryption
31:25:8a:e4:85:dc:5f:6e:48:26:40:76:bb:f8:e7:66:05:d2:
05:81:5f:95:7e:fc:ba:1c:d1:43:bf:0a:cb:aa:8a:c1:bf:84:
dc:03:7f:8b:2c:ef:4c:2d:61:a2:6b:52:50:c5:3f:ed:2b:e7:
49:9a:80:15:53:6e:7e:17:f4:03:9a:e5:dc:07:25:b7:29:a7:
d7:e1:f1:e3:dc:3e:ba:05:e4:00:7f:03:1c:24:0f:60:83:e7:
31:9a:7c:5b:4d:ae:35:94:3d:84:e4:5d:2d:1a:62:f6:0f:5c:
35:df:11:d4:62:fb:00:5b:7e:fc:dc:ca:d5:1d:1d:c5:09:f0:
ac:0c:32:d9:45:94:01:21:f3:d6:26:b1:86:9a:ee:71:71:37:
53:08:29:94:59:a8:08:38:71:7e:a6:e7:17:82:cf:02:66:2b:
b9:df:f9:aa:d5:1a:e6:04:9c:2c:61:3c:c3:85:15:8f:4d:ab:
6b:5b:c7:00:ac:39:c5:6e:26:53:10:20:c7:ac:76:42:43:c9:
38:f3:0c:e1:05:33:ee:35:13:fa:63:69:3f:58:3c:02:0f:00:
58:fe:25:d8:e3:ea:74:82:1f:43:67:43:51:8a:e9:d9:0e:d6:
a3:3d:98:d6:c4:cc:b8:58:4c:95:f3:a4:63:46:b2:88:2f:25:
d5:1c:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:08:38 2025 by rpki-client