Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QoBZeDcdn1HekYPitTw1y7PJ3PE.roa
File: QoBZeDcdn1HekYPitTw1y7PJ3PE.roa (raw, json)
Hash identifier: Jb8jm2Clu5Bxn3LS7mxzTeJPZ734OQuRUuPe45IVkpg=
Subject key identifier: 42:80:59:78:37:1D:9F:51:DE:91:83:E2:B5:3C:35:CB:B3:C9:DC:F1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0199E1BF0C91002B16CC1564F7969D98C3D4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QoBZeDcdn1HekYPitTw1y7PJ3PE.roa
Signing time: Tue 14 Oct 2025 08:03:38 +0000
ROA not before: Tue 14 Oct 2025 08:03:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215898
IP address blocks: 185.246.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:bf:0c:91:00:2b:16:cc:15:64:f7:96:9d:98:c3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 14 08:03:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42805978371d9f51de9183e2b53c35cbb3c9dcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:2b:c2:26:ff:3e:6a:49:37:2f:c4:08:41:
32:c3:2d:49:91:f7:03:ca:86:fb:9d:0d:df:9e:d6:
9d:3a:10:2b:ec:8f:92:e5:75:da:37:18:0a:db:2a:
bd:39:4b:ac:52:20:41:78:69:bf:de:af:bf:0e:5a:
cb:7c:3b:33:ec:c5:f9:bc:a7:f5:60:19:de:d4:2c:
48:66:b9:bd:82:36:27:dd:bd:a3:a5:ea:cf:84:da:
e7:16:f7:b5:12:d8:12:99:c7:69:c8:fe:fb:2d:d0:
a8:16:e9:2a:0f:00:57:59:ab:11:6f:0f:06:f2:10:
59:9e:50:cd:82:8d:2e:af:9f:46:9b:ce:08:78:17:
3a:42:b5:b9:d6:02:c3:88:e5:3a:0d:a4:8a:b6:ea:
f4:78:d3:b0:05:b2:fe:62:22:fd:3d:2d:11:e3:6f:
01:e7:89:50:5a:c3:24:61:a5:c6:f8:f6:aa:5f:55:
1e:40:95:57:12:9d:b1:30:db:98:fc:77:02:27:5c:
74:d3:3f:e4:06:6b:83:c4:9d:fe:7c:59:d7:23:13:
86:9f:79:7e:a8:f4:84:94:67:7e:c4:56:cb:48:2b:
87:5f:a3:00:da:9a:b3:c9:bb:ab:fb:63:3d:34:8f:
21:95:64:e1:f7:25:63:df:70:94:b0:13:65:5e:b7:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:59:78:37:1D:9F:51:DE:91:83:E2:B5:3C:35:CB:B3:C9:DC:F1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QoBZeDcdn1HekYPitTw1y7PJ3PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7a:d3:36:fb:4c:1d:21:bb:2b:dd:12:71:1c:1c:b4:b2:e6:
c7:5e:12:d7:94:6f:94:9c:4d:8d:84:c1:46:54:65:ef:ff:65:
ac:45:f2:5c:f7:04:a1:14:8a:b4:87:c7:14:de:5a:4f:55:9a:
e9:0f:49:10:83:f6:72:ba:6b:a3:ad:99:3f:99:ee:38:5a:8e:
6a:8b:6d:c1:e2:9c:44:2a:70:f4:a9:a8:82:f2:08:ef:7f:03:
5e:ab:7d:99:fe:bd:5e:74:9e:54:83:d3:1c:6f:f9:dc:40:be:
7e:9b:46:02:44:73:dc:56:1a:64:d2:ad:e5:12:64:a5:ad:36:
e9:58:48:3d:8a:21:e4:be:27:f7:28:9f:60:11:cf:96:eb:b4:
d1:e6:43:ca:56:30:fc:d4:04:6b:33:d6:78:7d:40:bf:cf:28:
75:d8:c0:14:8c:62:bf:4a:cd:28:a5:ce:8a:7e:c8:53:4e:0f:
c3:e7:14:f0:13:e9:b6:1d:2d:8d:cd:30:89:02:63:bf:2c:52:
d3:ee:97:c6:5b:00:59:b4:f4:fb:81:13:f6:e1:fc:e5:33:22:
83:03:7c:96:b8:e5:24:ae:eb:c5:c2:fc:d5:34:b9:5b:ee:2e:
3c:e1:9b:66:3a:03:50:c2:ff:66:45:13:32:b2:ec:e5:42:7e:
66:3d:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:31 2025 by rpki-client