
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/xmUPQ3mViYNMsd0xxgPFv7m_tqs.roa
File: xmUPQ3mViYNMsd0xxgPFv7m_tqs.roa (raw, json)
Hash identifier: +gYQmZnNpgxAgMFZUWEb+q/wfWqMiMPHDDY/N16WFvs=
Subject key identifier: C6:65:0F:43:79:95:89:83:4C:B1:DD:31:C6:03:C5:BF:B9:BF:B6:AB
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 019984B5FB5C95B959836FBE3B16AA6EB160
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/xmUPQ3mViYNMsd0xxgPFv7m_tqs.roa
Signing time: Fri 26 Sep 2025 06:29:02 +0000
ROA not before: Fri 26 Sep 2025 06:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48152
IP address blocks: 81.88.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:84:b5:fb:5c:95:b9:59:83:6f:be:3b:16:aa:6e:b1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Sep 26 06:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6650f43799589834cb1dd31c603c5bfb9bfb6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:b5:ec:26:76:cc:ac:5b:73:31:58:4b:88:
9b:ec:c6:1f:70:6a:60:61:af:84:f7:0c:4f:90:47:
22:bf:c7:41:9d:b3:55:93:95:8d:e6:08:be:90:27:
39:a4:cb:98:fa:d6:f7:4b:63:cc:6a:5f:64:f0:a0:
92:6c:73:ca:26:8b:20:39:b3:af:4a:48:53:b5:cb:
d5:70:5c:8e:b5:b3:a9:ca:f3:60:6a:36:4a:e3:2f:
10:97:92:a5:cc:25:8f:a0:e8:15:88:e9:f9:a3:28:
a8:4d:e2:f1:cd:e0:2b:62:d6:f7:56:c1:a2:12:f2:
ce:22:5d:70:e1:2b:e8:dd:c0:8e:b7:3d:3d:d9:b4:
f4:ff:d6:a3:33:c4:d8:c4:98:d2:c4:66:a9:cf:31:
69:f8:b7:54:eb:ba:56:7d:4f:46:8a:31:3c:f7:87:
4f:2d:e0:c1:7b:83:c2:5d:c8:67:f2:64:95:e3:ad:
b9:50:e5:fc:25:af:27:ca:df:28:9d:cf:73:30:e9:
dd:84:1b:b7:fd:bf:52:e5:8b:d3:ea:83:bd:b7:54:
b3:e0:bf:28:b9:e7:36:d9:82:ef:7b:fd:ed:a2:c0:
b9:6f:96:7a:d1:21:aa:13:bf:2b:ec:32:9a:34:08:
e2:82:13:f0:3a:82:fe:92:19:99:21:6a:ba:cc:1a:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:0F:43:79:95:89:83:4C:B1:DD:31:C6:03:C5:BF:B9:BF:B6:AB
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/xmUPQ3mViYNMsd0xxgPFv7m_tqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.104.0/22
Signature Algorithm: sha256WithRSAEncryption
41:57:62:2f:cf:b6:95:23:98:e4:1a:ee:82:98:4e:80:5a:f1:
b9:fc:0d:6e:c0:9b:de:58:c7:25:1b:94:08:59:37:53:0c:1e:
d8:7c:39:b8:db:ee:50:ad:6d:c2:8f:44:60:1f:03:43:2c:c6:
d9:dd:d6:4c:a4:e3:03:db:60:02:c9:5b:88:d7:0b:94:7e:43:
7a:29:91:27:5b:72:15:ed:56:d9:8d:05:ef:60:04:61:11:ff:
81:9a:43:37:2b:ab:f2:a6:ec:24:e6:c3:3f:9c:1f:9d:d7:00:
c3:11:e5:cc:e4:67:34:00:a5:71:d2:a0:fe:69:a9:c6:67:3d:
c5:01:66:98:f8:3e:13:47:7b:f3:71:be:76:11:f3:b8:e8:bf:
ae:d9:e7:98:41:2c:75:da:2a:a9:20:b5:dc:d1:8a:54:8f:fa:
41:a7:84:ed:f0:71:40:49:ac:8a:5a:7e:e5:40:46:2c:c3:ce:
fc:99:23:83:cf:00:f9:44:cb:4f:a1:77:1f:8c:bc:1b:02:c7:
5f:25:8f:81:04:a3:e5:1b:15:21:a5:f2:56:ac:8a:22:35:76:
57:f6:ff:61:84:f3:d0:d5:14:52:63:91:0c:53:f3:7f:33:39:
74:e2:40:c3:22:c7:41:4d:68:09:5d:6f:2b:bf:99:28:ee:d7:
d3:8f:17:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:40 2025 by rpki-client