Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QLaLmn8vtQCSMSInTsR6xj6CoXk.roa
File: QLaLmn8vtQCSMSInTsR6xj6CoXk.roa (raw, json)
Hash identifier: z3Xx4IWkwbvaWLFYloNA/YEQCDLySMv+0HuJZBWlWM4=
Subject key identifier: 40:B6:8B:9A:7F:2F:B5:00:92:31:22:27:4E:C4:7A:C6:3E:82:A1:79
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01991D3D5A8D353A0DAC1E67BA248521E84C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QLaLmn8vtQCSMSInTsR6xj6CoXk.roa
Signing time: Sat 06 Sep 2025 04:16:24 +0000
ROA not before: Sat 06 Sep 2025 04:16:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 46.37.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:3d:5a:8d:35:3a:0d:ac:1e:67:ba:24:85:21:e8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 6 04:16:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40b68b9a7f2fb500923122274ec47ac63e82a179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:c8:1a:ac:34:f5:11:84:68:9a:20:84:9f:
81:52:a3:b7:7f:17:de:d3:5b:86:b0:6d:14:2b:c5:
b0:b1:2a:7d:5d:2a:1e:37:2b:57:80:45:ea:3c:28:
b2:70:5d:25:e7:b7:c2:b2:a5:2b:e5:52:85:19:04:
78:41:85:89:10:1c:01:30:33:93:42:8b:c7:b8:f9:
1f:5e:06:e4:db:11:53:15:e6:ee:1c:dd:d6:a1:22:
f8:da:d7:bd:21:cc:1e:7b:9e:cf:d4:59:9b:b3:74:
09:16:da:8a:df:1d:ef:d8:4e:05:7c:ea:fb:2b:7b:
d0:5d:8c:e8:c9:d9:a6:8e:04:10:cc:88:d4:e2:2a:
f6:f7:23:a7:a9:f2:a8:1c:cd:ea:de:ea:02:9f:e5:
cb:62:91:46:54:2e:e3:fd:7a:ba:18:33:cc:b0:ab:
63:84:0d:aa:da:8d:eb:9a:9e:29:6a:16:ac:b3:95:
9e:54:1d:61:b5:2d:a7:96:13:2d:d7:ba:16:42:e4:
46:32:0c:ec:a4:33:38:92:88:1d:ab:b1:9b:f3:dc:
87:aa:69:1c:11:3b:7c:c6:31:55:f9:03:cd:f4:ea:
de:9b:b5:c1:cb:3a:42:7c:e9:84:20:37:cf:fb:70:
32:df:a8:ed:2f:2e:45:1e:2d:b1:b2:c4:20:2e:24:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B6:8B:9A:7F:2F:B5:00:92:31:22:27:4E:C4:7A:C6:3E:82:A1:79
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QLaLmn8vtQCSMSInTsR6xj6CoXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.110.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d1:46:97:69:0d:b6:bd:53:48:a5:12:bc:cc:92:56:d8:64:
5f:b4:0a:1d:b1:fb:aa:8e:51:98:ae:a3:c4:49:9b:c2:a3:ac:
38:47:fa:1b:3b:4f:ac:ac:0d:f4:63:4c:80:60:76:fe:03:f3:
78:ff:df:e0:53:fd:e5:54:3c:a3:6a:1c:23:bf:0d:2c:01:b3:
86:20:91:88:f8:4a:6c:1f:6f:42:14:d6:cc:70:48:77:a4:ee:
fb:9f:e7:03:2c:38:3f:37:51:61:7a:3c:28:11:01:6e:48:ff:
70:4a:3e:46:07:c1:ed:9f:d5:75:54:b8:0e:f6:77:8b:88:5b:
98:d5:32:17:0d:46:c9:b5:35:24:1b:a4:9a:13:02:96:45:8a:
ed:20:4c:8d:4d:5d:3d:f1:a6:db:b7:58:33:e0:08:d9:f0:da:
2f:c3:e4:b7:63:e7:29:1a:30:c3:7e:c0:7a:7b:cc:fb:d9:79:
a4:ad:63:b8:b6:63:ab:66:ba:88:6d:6f:74:cf:84:6b:9f:3f:
1b:c8:f2:2f:7b:01:2f:59:18:a8:ca:5a:f4:5a:d1:6a:9a:55:
8a:19:02:ec:6d:37:99:c8:44:2b:32:08:4d:3a:2f:81:de:82:
27:a5:78:3e:67:48:c0:e0:31:18:a9:85:4f:8b:6e:63:52:8b:
84:46:e3:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkdPVqNNToNrB5nuiSFIehMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwOTA2MDQxNjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGI2OGI5YTdmMmZiNTAwOTIzMTIyMjc0ZWM0N2FjNjNlODJhMTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x/IGqw09RGEaJoghJ+BUqO3fxfe
01uGsG0UK8WwsSp9XSoeNytXgEXqPCiycF0l57fCsqUr5VKFGQR4QYWJEBwBMDOT
QovHuPkfXgbk2xFTFebuHN3WoSL42te9Icwee57P1Fmbs3QJFtqK3x3v2E4FfOr7
K3vQXYzoydmmjgQQzIjU4ir29yOnqfKoHM3q3uoCn+XLYpFGVC7j/Xq6GDPMsKtj
hA2q2o3rmp4pahass5WeVB1htS2nlhMt17oWQuRGMgzspDM4kogdq7Gb89yHqmkc
ETt8xjFV+QPN9Orem7XByzpCfOmEIDfP+3Ay36jtLy5FHi2xssQgLiRzhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEC2i5p/L7UAkjEiJ07EesY+gqF5MB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvUUxhTG1uOHZ0UUNTTVNJblRzUjZ4ajZDb1hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVuMA0G
CSqGSIb3DQEBCwUAA4IBAQBr0UaXaQ22vVNIpRK8zJJW2GRftAodsfuqjlGYrqPE
SZvCo6w4R/obO0+srA30Y0yAYHb+A/N4/9/gU/3lVDyjahwjvw0sAbOGIJGI+Eps
H29CFNbMcEh3pO77n+cDLDg/N1FhejwoEQFuSP9wSj5GB8Htn9V1VLgO9neLiFuY
1TIXDUbJtTUkG6SaEwKWRYrtIEyNTV098abbt1gz4AjZ8Novw+S3Y+cpGjDDfsB6
e8z72XmkrWO4tmOrZrqIbW90z4Rrnz8byPIvewEvWRioylr0WtFqmlWKGQLsbTeZ
yEQrMghNOi+B3oInpXg+Z0jA4DEYqYVPi25jUouERuMD
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:16 2025 by rpki-client