Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa
File: QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa (raw, json)
Hash identifier: B0QgrQfgkvXm7vAQLsl/pTmN0f26n576ETmzI38WdjE=
Subject key identifier: 42:A4:5D:60:02:8F:D7:5C:8A:FD:8E:58:A1:ED:46:94:22:EF:3C:83
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0198095F767BAAA7D33F7945031AF8EE6075
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa
Signing time: Mon 14 Jul 2025 14:38:27 +0000
ROA not before: Mon 14 Jul 2025 14:38:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209186
IP address blocks: 2a0d:d940:900d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:5f:76:7b:aa:a7:d3:3f:79:45:03:1a:f8:ee:60:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 14 14:38:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42a45d60028fd75c8afd8e58a1ed469422ef3c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:94:f6:e2:52:d0:15:e5:e8:70:fc:4a:9d:
31:f5:92:2f:a8:48:ea:7d:29:2c:21:22:d2:3e:49:
16:df:03:32:22:b1:df:f0:7e:02:2a:ad:c8:80:0d:
b7:b5:0c:53:a4:1f:51:fb:4b:1d:7f:1c:68:1b:2c:
8a:0d:0d:15:50:75:b3:1a:62:65:26:9a:a1:b9:38:
82:cf:22:82:dd:06:82:aa:0b:37:05:f5:8b:80:ef:
6f:1d:79:0c:d3:01:0d:8a:e2:c2:b0:c3:b5:c4:08:
8e:b4:5e:70:02:cc:f9:58:78:ba:d9:23:a3:1a:66:
44:26:49:07:65:f5:48:e9:9a:e6:e6:9f:5c:40:2f:
26:a1:fa:92:eb:5d:33:46:0f:9e:35:51:64:61:81:
30:f8:0a:94:a4:68:5d:20:31:25:bd:12:a2:ad:31:
ca:4e:18:4f:4f:be:7a:a2:8b:82:9f:d2:30:ed:cd:
ae:1f:33:91:9c:da:f3:e2:d6:2f:e8:50:dd:9a:33:
1f:4f:5b:e7:c7:ef:90:9d:ba:73:4b:ca:89:9b:ec:
22:1a:0a:aa:aa:7f:98:81:e9:64:05:f1:a9:e3:4a:
cb:9c:4d:f0:11:41:01:6d:01:e9:d4:62:10:f1:c6:
00:18:f6:a0:2c:d7:80:5c:88:89:b3:6e:e4:7d:c0:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A4:5D:60:02:8F:D7:5C:8A:FD:8E:58:A1:ED:46:94:22:EF:3C:83
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:900d::/48
Signature Algorithm: sha256WithRSAEncryption
51:9d:6b:6e:68:5b:14:a7:41:e3:15:ab:ac:29:5e:f3:b6:04:
ec:a1:5a:84:f9:cf:f4:3b:8c:c0:ee:99:46:a8:f0:86:8f:82:
db:a3:b9:03:d7:60:f5:e8:74:7d:bc:86:79:29:e7:90:15:be:
26:26:bf:da:ca:9a:97:ef:c5:89:07:30:f4:33:65:3c:48:64:
a1:2a:53:20:00:81:1b:97:89:d6:6f:50:73:be:f3:09:1d:cd:
bf:e0:68:d2:f1:e7:79:43:b8:05:d0:4e:6a:0c:5d:4a:ca:e0:
5a:fd:b1:63:eb:32:84:0d:10:c1:f7:dc:2b:c6:a4:9a:39:47:
7a:c6:9e:49:00:cf:51:5f:0c:b0:32:de:16:5b:e4:45:2f:c0:
76:b6:8d:75:9d:43:a5:93:0d:1d:1f:10:37:f1:6f:ae:12:7f:
04:c8:10:e5:3d:41:dc:26:fc:ff:ce:7c:d3:3d:c7:4f:9c:41:
9f:db:41:b3:e8:10:78:26:28:07:dd:f6:24:37:ba:ae:45:77:
7d:79:3c:44:2a:3e:be:23:c3:3c:c8:71:aa:bd:42:ed:9d:2e:
16:76:83:cc:86:b3:b5:37:db:b9:fd:4b:17:44:e7:f2:19:76:
1d:16:45:c5:f8:ff:bf:d3:85:93:15:ad:07:1d:07:ee:26:cd:
d5:b8:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 21:41:27 2025 by rpki-client