Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/N1QJr3d4xPAL0pWw7bMpfGQLYDw.roa
File: N1QJr3d4xPAL0pWw7bMpfGQLYDw.roa (raw, json)
Hash identifier: bdncW/PZlPA4ydR5a6GdEoycfKMOIvrr26MW7cKXUvM=
Subject key identifier: 37:54:09:AF:77:78:C4:F0:0B:D2:95:B0:ED:B3:29:7C:64:0B:60:3C
Certificate issuer: /CN=c470b8d4bf871404bca53c77815304ef2ea4e1ca
Certificate serial: 01987F567D05AE6CABC9EC06EEE5E17B0BF1
Authority key identifier: C4:70:B8:D4:BF:87:14:04:BC:A5:3C:77:81:53:04:EF:2E:A4:E1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/N1QJr3d4xPAL0pWw7bMpfGQLYDw.roa
Signing time: Wed 06 Aug 2025 12:23:50 +0000
ROA not before: Wed 06 Aug 2025 12:23:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202561
IP address blocks: 176.117.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:56:7d:05:ae:6c:ab:c9:ec:06:ee:e5:e1:7b:0b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c470b8d4bf871404bca53c77815304ef2ea4e1ca
Validity
Not Before: Aug 6 12:23:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=375409af7778c4f00bd295b0edb3297c640b603c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:80:e9:ee:ea:de:fc:63:a1:fe:fe:f7:8a:
da:22:98:97:4b:5c:ce:da:ff:ee:39:a5:34:b7:11:
b8:a5:d5:f3:2e:4a:b7:67:0f:89:ba:63:e1:39:47:
63:88:06:e6:72:7b:89:39:af:30:83:36:e3:d0:00:
6c:7e:50:01:cb:95:be:79:e0:34:b8:31:cd:db:72:
50:b7:3e:20:fe:cc:55:36:48:59:c7:1b:04:40:ce:
2a:c6:9d:24:e5:61:f6:c3:3b:88:4f:77:ab:d4:df:
ee:18:fe:00:ee:ea:94:93:b9:fd:4c:aa:80:6e:11:
e8:b4:54:47:d7:a2:e1:f7:9e:c5:ce:03:1e:48:47:
1e:c5:9e:e1:96:ea:df:52:b6:d4:43:71:db:2a:2e:
6b:d6:e9:53:a4:bd:e0:1b:1e:6b:7a:a5:d2:99:23:
d1:e2:18:c7:7d:16:77:f1:fb:2b:e9:00:47:e9:44:
24:46:68:4b:c8:ae:87:d0:fb:d8:ff:e3:39:2c:d0:
e0:21:b8:8d:e2:c7:5f:2a:5d:e3:1b:26:85:98:7d:
fa:32:e7:c9:12:9b:4a:3e:df:40:96:c8:78:94:78:
8b:d5:94:35:02:3f:e9:91:8b:90:e9:9d:d4:e2:f1:
ac:da:fc:ef:93:66:0a:71:e4:67:50:3d:d4:82:b5:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:54:09:AF:77:78:C4:F0:0B:D2:95:B0:ED:B3:29:7C:64:0B:60:3C
X509v3 Authority Key Identifier:
keyid:C4:70:B8:D4:BF:87:14:04:BC:A5:3C:77:81:53:04:EF:2E:A4:E1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/N1QJr3d4xPAL0pWw7bMpfGQLYDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:04:ce:24:26:88:5c:98:82:c5:ea:b3:ce:a4:16:7e:d2:84:
50:7d:4d:57:0a:04:9c:e0:cb:f0:1f:17:67:cc:fe:e7:21:e1:
37:de:ff:3d:c3:bd:e9:0d:8f:42:1d:2d:05:cc:b8:e7:b8:39:
2b:f2:8d:73:ba:f1:b1:f3:46:34:b2:f0:92:3e:77:e9:0f:42:
dd:28:b2:05:59:c0:a6:d5:27:4a:69:b1:61:e1:69:42:d5:b9:
b1:37:fc:b1:4f:85:47:22:3e:07:bb:fd:ce:a5:1d:e3:77:97:
62:32:41:ec:e1:13:3b:10:22:8f:ce:47:3a:55:16:04:14:c8:
59:c1:6e:bc:ab:8b:9c:bc:8d:cb:df:89:97:ef:3a:95:80:3a:
f9:81:1c:49:e4:c7:8d:72:cd:ca:1d:7b:db:ec:a9:1d:61:1d:
80:72:f6:cb:75:90:97:f3:43:66:c1:53:9c:2d:15:a2:bd:e3:
fa:10:7e:2d:fb:e7:25:83:76:66:f0:74:79:79:db:d9:82:2d:
e9:92:36:97:00:21:61:39:e1:8f:95:72:82:73:9c:65:89:db:
1f:e8:f5:7e:c8:40:b6:f3:bf:97:98:07:97:35:ea:c4:9c:45:
43:a3:b0:a5:ee:e4:09:76:3b:55:0c:59:44:c7:98:fa:7b:58:
7b:9d:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:30 2025 by rpki-client