Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/QBK8lPoVvs-33OqaHsy4GGD-WkU.roa
File: QBK8lPoVvs-33OqaHsy4GGD-WkU.roa (raw, json)
Hash identifier: 0GUBtBrdWkItfU5ir9EaRdqIIGetsONKxZfwhY7ap78=
Subject key identifier: 40:12:BC:94:FA:15:BE:CF:B7:DC:EA:9A:1E:CC:B8:18:60:FE:5A:45
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 019898F401CF40B1EC921CF5B86CC668B1C2
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/QBK8lPoVvs-33OqaHsy4GGD-WkU.roa
Signing time: Mon 11 Aug 2025 11:46:24 +0000
ROA not before: Mon 11 Aug 2025 11:46:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215495
IP address blocks: 2a12:4447::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:f4:01:cf:40:b1:ec:92:1c:f5:b8:6c:c6:68:b1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Aug 11 11:46:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4012bc94fa15becfb7dcea9a1eccb81860fe5a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:7f:25:e5:a9:6a:99:ed:ed:fa:9b:e6:a9:
5c:70:7e:48:1f:c5:db:f0:87:cf:ce:01:bc:be:55:
4e:d7:55:98:3c:94:95:dd:f4:e7:9c:0b:c1:d1:aa:
ec:01:f2:71:0b:22:db:5b:46:e4:18:38:92:bd:42:
67:32:d4:03:01:00:c4:f1:e8:5d:9b:59:34:e3:aa:
7a:82:b4:a4:c7:27:2c:7b:00:84:70:5a:a7:55:34:
44:cf:d9:16:54:74:7c:bf:39:04:b8:8f:55:b5:6b:
0c:6f:b6:87:4a:8a:80:00:d2:12:5b:6a:36:b7:30:
5a:11:de:e9:88:aa:5d:c2:11:30:4a:20:4e:91:44:
8d:a9:09:7e:fc:22:24:89:fa:c5:ec:36:e4:ef:b4:
11:ea:e8:d2:23:19:e1:29:7b:25:f2:85:fc:b6:3b:
4a:99:cb:3b:68:d6:b5:ca:1c:bd:c0:01:57:eb:ab:
51:15:6c:26:6d:a4:61:b6:5a:2b:cf:e5:25:85:f8:
8c:d3:82:cf:29:28:93:fc:3b:d2:81:aa:4f:4b:09:
87:f6:a5:e4:c1:28:29:fa:64:bd:45:c2:34:90:a9:
be:c1:e9:b7:e1:f4:6d:b2:b3:2a:59:fa:e5:d8:9b:
64:79:9c:5e:7e:e1:70:be:51:96:49:27:e6:e1:83:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:BC:94:FA:15:BE:CF:B7:DC:EA:9A:1E:CC:B8:18:60:FE:5A:45
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/QBK8lPoVvs-33OqaHsy4GGD-WkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4447::/32
Signature Algorithm: sha256WithRSAEncryption
20:e1:5c:b8:72:b3:f8:c8:97:a0:f2:f3:46:fc:73:7f:08:6a:
7e:7c:08:eb:f7:43:41:8e:1f:61:0c:f2:01:a7:ab:ec:1e:8d:
b9:b3:40:5c:76:2c:4f:ae:f9:96:7f:17:eb:d9:07:ea:d1:3c:
e7:9d:6e:5e:ed:06:a9:17:75:03:43:ce:6e:14:0d:95:4d:1b:
1e:a8:e6:f0:be:98:88:15:9c:ce:b0:cc:e3:cc:74:c9:29:8b:
c9:16:9d:f9:32:79:98:0b:2c:f1:2e:2b:24:74:c6:25:7c:6f:
6e:d0:66:9b:01:92:de:40:f8:19:c8:d9:93:f3:c0:5d:c0:32:
e4:fc:47:65:cc:58:98:1f:c1:65:93:3c:93:11:6a:a8:1b:be:
06:8a:79:df:6f:14:c0:1e:f4:8b:6c:06:b7:62:ac:48:30:9a:
dd:4a:e9:d9:08:a1:c3:a0:58:9f:03:18:f9:95:3e:0c:b6:20:
1b:07:b4:9a:b3:56:c4:52:40:23:7f:2b:b0:36:b7:99:65:27:
5e:75:c6:6e:73:00:2b:78:e5:32:3f:d3:3f:6f:8b:db:69:b3:
3c:1f:9c:fa:42:91:cd:47:3d:92:05:08:5f:10:eb:0c:72:7d:
25:c2:05:c3:14:e9:e3:6b:72:25:c4:1c:57:2c:26:df:58:37:
5d:88:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:34:59 2025 by rpki-client