Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/6QyQI-UDdi5VvsW7wlBSbMul1zE.roa
File: 6QyQI-UDdi5VvsW7wlBSbMul1zE.roa (raw, json)
Hash identifier: y5T4O4QEdcHKwszAqbm3ZgBGBRWTXgNEu9vHIrgVcwo=
Subject key identifier: E9:0C:90:23:E5:03:76:2E:55:BE:C5:BB:C2:50:52:6C:CB:A5:D7:31
Certificate issuer: /CN=49e514e7b7d67d933739b5161d3d624f3c239af9
Certificate serial: 019986018F8DFEC1492E8764C63464B2BFF3
Authority key identifier: 49:E5:14:E7:B7:D6:7D:93:37:39:B5:16:1D:3D:62:4F:3C:23:9A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/6QyQI-UDdi5VvsW7wlBSbMul1zE.roa
Signing time: Fri 26 Sep 2025 12:31:13 +0000
ROA not before: Fri 26 Sep 2025 12:31:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58275
IP address blocks: 176.118.96.0/21 maxlen: 21
176.118.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:01:8f:8d:fe:c1:49:2e:87:64:c6:34:64:b2:bf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e514e7b7d67d933739b5161d3d624f3c239af9
Validity
Not Before: Sep 26 12:31:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e90c9023e503762e55bec5bbc250526ccba5d731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:74:83:ad:53:6b:d9:8f:84:95:ed:22:1e:
6f:80:a6:99:7a:45:82:e0:2c:b4:3a:db:79:cc:e6:
73:d8:15:c4:3e:42:c3:bf:a0:1c:3e:de:ee:c3:dd:
d1:46:91:52:9e:a0:8e:71:e9:a2:8f:17:4b:76:3e:
2b:bb:c0:1e:29:21:91:81:0b:3d:ec:e4:9f:97:ce:
18:54:71:e6:f8:0f:83:00:80:ea:6d:43:e1:2c:12:
ba:3a:ab:46:cd:b6:f6:9d:72:c1:2a:09:68:21:60:
3e:89:b9:7a:bb:89:bf:03:b7:33:49:e0:30:13:a4:
16:80:ff:d2:6b:c1:bd:7d:10:69:d8:fc:68:87:ce:
6a:fb:fa:f3:73:37:bc:21:12:6d:77:96:44:b7:5f:
0a:a2:30:58:b6:31:8f:ee:96:f0:3a:d0:6a:e5:c2:
4a:74:17:30:af:1f:91:1f:17:30:4b:cb:ca:f7:e8:
e3:d0:56:bb:16:c9:be:7c:78:7c:35:66:30:46:fc:
a3:92:97:b6:e7:b0:89:c7:b5:85:f2:cb:87:04:ba:
cf:6f:ba:43:68:a5:8c:6c:06:00:f5:38:78:ef:ea:
28:bc:3a:88:33:70:de:9d:cf:61:03:db:15:cb:c8:
59:8f:d8:77:7a:5c:ed:d4:2a:66:8e:d7:ca:83:3f:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0C:90:23:E5:03:76:2E:55:BE:C5:BB:C2:50:52:6C:CB:A5:D7:31
X509v3 Authority Key Identifier:
keyid:49:E5:14:E7:B7:D6:7D:93:37:39:B5:16:1D:3D:62:4F:3C:23:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/6QyQI-UDdi5VvsW7wlBSbMul1zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.96.0/20
Signature Algorithm: sha256WithRSAEncryption
24:b9:45:6e:98:64:1c:c5:4d:74:c4:b0:39:b2:62:ee:d1:79:
b3:1f:41:a1:29:7e:50:79:7c:c8:62:fd:d4:b0:4f:4a:41:54:
58:c4:4a:b5:6b:f2:83:6a:93:9e:6a:d0:ec:a6:2a:9b:06:d1:
66:d6:44:76:e1:0e:66:7d:63:18:b7:6e:43:21:68:2b:35:01:
2b:ac:f8:56:70:85:37:fb:1f:f9:e2:3f:b6:07:97:4a:af:1f:
a1:30:37:ab:5e:a6:d3:b5:d1:c0:22:9e:76:e7:22:a5:fe:e2:
0d:be:3e:c7:13:0e:32:a4:14:71:85:81:78:e8:6a:29:15:c0:
7f:59:c4:d3:fe:f7:f1:f1:04:29:65:5e:b5:ad:70:76:a8:f4:
cb:6d:cc:a7:3f:48:5a:1f:36:af:0d:d6:09:cc:18:81:77:bc:
78:3e:bb:c9:5b:cc:b0:03:69:80:cc:32:9b:0a:a6:df:96:43:
2b:16:78:e3:d4:2b:ea:23:df:2a:c7:03:d0:c3:62:11:aa:a2:
ed:e1:98:8f:b5:f3:5b:94:d9:6c:32:8d:21:b0:eb:61:b4:09:
0d:b0:71:5a:1e:b9:bb:70:56:a2:c9:75:e1:df:d7:81:e2:f2:
f5:fc:d5:62:4d:5d:69:d7:75:89:97:d2:b2:90:95:d7:92:3d:
6f:09:64:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:32 2025 by rpki-client