Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/cq_1j-d1kfo1p9Be3sTMytcMD24.roa
File: cq_1j-d1kfo1p9Be3sTMytcMD24.roa (raw, json)
Hash identifier: JNpsnNRxrePb5e9Un324eWpFZYp8SbD0XvG6AqlNJIM=
Subject key identifier: 72:AF:F5:8F:E7:75:91:FA:35:A7:D0:5E:DE:C4:CC:CA:D7:0C:0F:6E
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 0197DEF93168E92904A7B113D4D88A6232BA
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/cq_1j-d1kfo1p9Be3sTMytcMD24.roa
Signing time: Sun 06 Jul 2025 09:02:42 +0000
ROA not before: Sun 06 Jul 2025 09:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204702
IP address blocks: 185.157.148.0/22 maxlen: 24
185.157.148.0/24 maxlen: 24
185.157.149.0/24 maxlen: 24
185.157.151.0/24 maxlen: 24
2a0c:f380::/29 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:de:f9:31:68:e9:29:04:a7:b1:13:d4:d8:8a:62:32:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Jul 6 09:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72aff58fe77591fa35a7d05edec4cccad70c0f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:e1:e0:40:6b:82:68:4f:9a:4f:6c:6b:30:
a7:2a:6a:3d:52:e9:16:b0:8f:04:2b:0e:0f:ab:ae:
ff:92:bf:88:64:2b:4c:42:f1:cb:b1:05:40:dc:85:
54:24:50:93:d5:81:42:e6:6f:d1:ac:96:78:6d:c8:
04:6a:7d:e0:86:65:22:16:52:5e:73:19:74:cd:95:
85:3f:04:84:89:a6:9b:6f:cd:66:6e:2c:60:86:ec:
93:82:d1:88:03:9b:62:d5:16:e7:43:f1:d7:ec:8f:
80:63:ab:fe:a6:3e:61:57:5d:7b:92:54:56:79:fb:
f9:dd:be:0d:ec:a0:14:25:e3:a0:99:ac:2c:59:b2:
07:1a:d1:b3:81:b1:1f:c0:de:8d:75:46:8f:ef:74:
48:9c:7a:d7:31:d7:10:3a:25:1d:9d:09:20:b4:5f:
c1:40:76:c6:10:dd:c8:61:d6:d9:5f:fc:fc:cc:d4:
36:28:91:d7:3f:55:54:6a:f6:9e:b4:30:10:ac:ee:
d0:9d:b7:65:79:9b:b5:e4:01:c9:6c:95:52:9e:62:
56:bb:aa:ed:a3:dd:3c:24:5a:46:f9:e2:9c:23:f4:
0b:0f:a7:df:7e:07:ec:c9:63:b6:65:a5:54:9f:26:
0f:6d:7e:bc:51:d7:f4:ff:78:90:31:8e:35:b5:7b:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AF:F5:8F:E7:75:91:FA:35:A7:D0:5E:DE:C4:CC:CA:D7:0C:0F:6E
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/cq_1j-d1kfo1p9Be3sTMytcMD24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.148.0/22
IPv6:
2a0c:f380::/29
Signature Algorithm: sha256WithRSAEncryption
1c:89:ef:98:42:60:50:69:13:aa:06:42:56:b6:22:90:9d:b3:
70:3e:de:f8:87:0a:d9:bc:0b:10:ef:78:06:57:85:10:ed:1f:
1c:e7:ec:d8:b7:a4:e7:f8:97:71:d6:ec:ae:a5:78:64:ec:3a:
4e:b7:aa:e0:67:5d:86:db:0a:6b:98:6d:48:44:f7:11:fd:ea:
96:e2:33:9b:d3:c9:4e:20:0b:51:5d:ef:4f:a1:2c:75:b6:ff:
89:07:0c:fd:4e:fc:2c:a8:0b:85:5b:ef:4c:12:c1:e1:26:b1:
85:f9:9f:7e:7f:2b:d6:50:a7:4d:c8:d8:04:1b:57:66:9e:40:
01:71:f8:b1:eb:34:9f:7a:15:c8:31:67:96:f6:43:62:4f:60:
0d:69:a0:82:af:fa:11:37:40:40:83:bc:f1:70:41:4c:ac:05:
54:d4:3b:47:c8:09:f2:68:d4:17:88:d3:23:22:94:57:93:63:
9b:a8:61:86:4b:b4:46:f5:cf:d9:57:2e:50:39:20:d7:4f:49:
bb:2d:22:c5:46:73:19:8b:2d:b3:75:58:c0:a3:28:fb:72:5f:
27:a9:7e:b8:3a:43:32:48:c4:39:7c:99:73:a0:94:61:be:c2:
e6:9a:b3:42:74:ec:87:0f:0e:51:4e:95:a6:87:43:be:64:41:
b6:cd:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:23 2025 by rpki-client