Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/QH7PkD5ZK8D91RHK6lOrj_AnwS0.roa
File: QH7PkD5ZK8D91RHK6lOrj_AnwS0.roa (raw, json)
Hash identifier: 3W6raDOuTY1+pLUCyy05Kr7smlg3BwEP4vah6MOQHS0=
Subject key identifier: 40:7E:CF:90:3E:59:2B:C0:FD:D5:11:CA:EA:53:AB:8F:F0:27:C1:2D
Certificate issuer: /CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732
Certificate serial: 0199EC5AFA12A1C30C15AB911759614C8D8F
Authority key identifier: AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/QH7PkD5ZK8D91RHK6lOrj_AnwS0.roa
Signing time: Thu 16 Oct 2025 09:30:09 +0000
ROA not before: Thu 16 Oct 2025 09:30:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215906
IP address blocks: 176.118.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:5a:fa:12:a1:c3:0c:15:ab:91:17:59:61:4c:8d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732
Validity
Not Before: Oct 16 09:30:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=407ecf903e592bc0fdd511caea53ab8ff027c12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:00:d0:9e:a8:16:0c:62:51:21:1d:4d:24:8c:
41:9a:96:03:31:21:a2:00:cc:8a:df:c5:d4:40:71:
d9:68:f0:fa:81:20:41:56:65:3f:73:e3:a5:8f:b0:
02:e6:e7:6a:1b:ed:24:59:a0:db:a6:d1:cb:84:f6:
84:08:7e:42:38:96:af:6e:36:c1:ae:dd:fc:e3:d4:
d4:66:11:d3:e5:5f:24:23:b5:a1:fb:86:03:a3:18:
28:18:21:fe:5d:90:65:40:21:ae:b9:c3:ba:9d:1d:
f8:47:ad:94:e1:8b:2d:57:67:41:26:36:37:b9:0f:
be:02:b2:0f:f9:24:7a:23:e0:b6:34:b3:8f:8c:bc:
a1:4c:2a:93:e1:aa:74:2c:eb:96:36:31:ae:68:d7:
72:98:72:5f:76:dc:44:a7:cc:1d:99:00:f5:45:34:
11:4c:ef:e3:3f:06:49:0d:39:48:53:42:a8:b5:43:
b2:8c:19:97:c8:4d:bd:fc:02:23:9f:ef:37:93:08:
04:ac:77:89:3b:88:50:b9:4d:55:3d:84:a8:e1:76:
38:d5:ff:2f:e3:a6:bf:44:6c:c0:c7:71:35:52:c2:
e3:7d:ae:7a:e0:8a:76:53:92:13:6f:3d:64:94:7c:
cf:b9:a1:83:ee:5b:b7:f6:a9:b1:33:0a:dd:53:89:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7E:CF:90:3E:59:2B:C0:FD:D5:11:CA:EA:53:AB:8F:F0:27:C1:2D
X509v3 Authority Key Identifier:
keyid:AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/QH7PkD5ZK8D91RHK6lOrj_AnwS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.179.0/24
Signature Algorithm: sha256WithRSAEncryption
35:33:19:e9:a9:e2:99:a0:38:39:b8:ad:d9:b6:32:f3:3e:d1:
60:6d:16:1c:3a:6e:a3:8b:e6:ca:d3:bb:60:57:b9:63:86:ae:
a7:35:45:cc:45:a4:72:1a:56:3f:1c:26:18:a3:49:76:85:60:
96:0b:04:2c:e7:c7:58:69:4e:60:58:9f:5d:c5:3b:6e:89:0b:
6c:04:13:08:b9:60:ae:2c:43:c4:f8:38:b8:e8:5e:1d:38:7e:
39:36:81:5b:d2:b7:58:20:ad:6f:14:b8:dd:d9:f8:0b:02:23:
99:b1:3f:6e:ca:26:9b:62:6d:0e:eb:32:4d:29:44:97:9d:0e:
03:48:8b:c0:d4:55:6d:45:c3:4d:12:67:62:6f:a4:c5:7c:44:
30:aa:fc:17:32:57:5a:9c:03:23:f7:e1:94:ee:23:6a:c8:ea:
42:87:97:01:46:0d:ed:96:ee:8f:39:e4:3f:24:bd:c3:02:9e:
a4:ff:f6:34:21:8c:c3:44:09:77:cb:81:fd:bd:94:4c:ed:c6:
4f:41:a6:e8:2d:4a:b2:20:42:1b:d0:ef:74:af:3b:e6:17:7f:
54:ab:3f:db:a5:ac:a8:89:9e:ad:bd:e9:b3:89:f4:34:a5:9f:
5e:ab:74:3e:c7:b0:1f:46:3b:34:54:a0:63:64:d6:9f:9d:3d:
e8:3c:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:22 2025 by rpki-client