Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cqgXLtdLDPVWnhdBOxllkNkQHX4.roa
File: cqgXLtdLDPVWnhdBOxllkNkQHX4.roa (raw, json)
Hash identifier: eshG4u9YV7QxMhKeac1gYxuTgfkvsmYCjEftL3M/FVU=
Subject key identifier: 72:A8:17:2E:D7:4B:0C:F5:56:9E:17:41:3B:19:65:90:D9:10:1D:7E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197A1B5449DA69FD334C1E7F6A6E3FE7E62
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cqgXLtdLDPVWnhdBOxllkNkQHX4.roa
Signing time: Tue 24 Jun 2025 11:31:40 +0000
ROA not before: Tue 24 Jun 2025 11:31:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214783
IP address blocks: 5.83.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:b5:44:9d:a6:9f:d3:34:c1:e7:f6:a6:e3:fe:7e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 24 11:31:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72a8172ed74b0cf5569e17413b196590d9101d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:71:f1:2d:3b:9e:32:6c:9d:5d:1b:5a:4a:
34:2d:a9:b9:5d:9b:4b:e6:20:3e:b9:5e:f6:11:c7:
5e:ea:ae:85:12:15:86:95:96:7c:34:f5:ad:16:c5:
62:da:51:ad:df:0f:0a:59:02:4f:64:1d:45:f8:eb:
c3:ca:9b:62:13:b0:87:c1:5e:18:b5:a5:cd:24:04:
76:ca:ff:76:be:37:be:44:a7:da:01:f1:5f:02:9a:
e2:51:db:9a:2c:3a:e7:cd:c2:42:1e:15:f8:7f:9a:
d7:c3:03:27:90:fd:46:da:e5:a3:fd:33:40:10:b7:
6a:21:81:bc:65:66:ca:8f:c8:80:eb:0d:a0:8d:d5:
cd:f6:19:85:7f:19:75:38:02:1e:b1:e5:1b:9d:ad:
b5:7d:4a:8b:99:c6:b2:70:8d:34:67:c0:66:c6:9b:
12:55:ed:8d:a7:3f:af:f1:25:a9:5e:51:c6:97:f6:
ea:5d:d9:0e:dc:96:5b:ad:3e:65:26:1d:7a:f3:6b:
8d:97:9f:22:ac:2e:7e:0a:e6:3b:2e:b7:13:95:e6:
1b:3f:35:0e:ee:0e:67:05:1b:4b:ed:75:ff:03:97:
05:ca:24:7b:b2:a7:53:0b:36:4f:02:35:37:56:f8:
8d:0d:2f:fb:bf:b0:78:8a:13:cb:77:db:19:ff:fc:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A8:17:2E:D7:4B:0C:F5:56:9E:17:41:3B:19:65:90:D9:10:1D:7E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cqgXLtdLDPVWnhdBOxllkNkQHX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.151.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8e:87:bd:c6:a0:00:82:3e:8a:12:f4:0f:0b:46:53:82:93:
bb:75:41:82:f5:ad:ed:27:62:7a:ae:2c:9b:6d:04:b7:56:34:
79:30:b4:bb:2f:ed:65:10:b1:1e:c0:9f:2d:2b:81:f4:21:7f:
f8:19:5d:40:48:3d:e4:53:9f:40:83:6e:d6:88:39:6b:13:d2:
29:c2:0e:1a:37:51:4b:bd:d2:62:85:0a:3a:11:29:bf:93:37:
ea:83:dc:31:fc:4b:96:17:42:25:7a:66:6c:ab:37:fc:4b:a9:
5d:50:2a:0b:c0:56:dc:26:ed:96:ad:11:61:54:56:bc:01:8d:
67:0d:78:86:fa:d4:ae:02:00:ec:87:5a:73:e0:12:46:bf:ed:
fc:e7:c0:02:7d:da:ae:be:8a:80:8a:63:a2:0a:c0:47:20:1a:
12:f2:ca:4c:0c:4e:5b:fe:74:60:4b:f6:1b:83:b8:4e:10:e4:
2a:03:28:ad:34:66:0a:88:fd:89:f3:3e:43:7f:4c:e6:da:a7:
54:b1:d9:8b:2f:21:77:d9:09:a3:bb:09:dd:c0:e6:57:12:3f:
54:08:ff:8a:45:d6:e2:cb:66:bb:04:c5:b7:e5:95:c2:27:96:
cd:82:1f:2f:d5:90:60:cc:26:72:c6:90:d9:ba:d0:98:14:57:
04:7f:c1:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZehtUSdpp/TNMHn9qbj/n5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNjI0MTEzMTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmE4MTcyZWQ3NGIwY2Y1NTY5ZTE3NDEzYjE5NjU5MGQ5MTAxZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW1x8S07njJsnV0bWko0Lam5XZtL
5iA+uV72Ecde6q6FEhWGlZZ8NPWtFsVi2lGt3w8KWQJPZB1F+OvDyptiE7CHwV4Y
taXNJAR2yv92vje+RKfaAfFfApriUduaLDrnzcJCHhX4f5rXwwMnkP1G2uWj/TNA
ELdqIYG8ZWbKj8iA6w2gjdXN9hmFfxl1OAIeseUbna21fUqLmcaycI00Z8BmxpsS
Ve2Npz+v8SWpXlHGl/bqXdkO3JZbrT5lJh1682uNl58irC5+CuY7LrcTleYbPzUO
7g5nBRtL7XX/A5cFyiR7sqdTCzZPAjU3VviNDS/7v7B4ihPLd9sZ//y1iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHKoFy7XSwz1Vp4XQTsZZZDZEB1+MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvY3FnWEx0ZExEUFZXbmhkQk94bGxrTmtRSFg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVOXMA0G
CSqGSIb3DQEBCwUAA4IBAQA4joe9xqAAgj6KEvQPC0ZTgpO7dUGC9a3tJ2J6riyb
bQS3VjR5MLS7L+1lELEewJ8tK4H0IX/4GV1ASD3kU59Ag27WiDlrE9Ipwg4aN1FL
vdJihQo6ESm/kzfqg9wx/EuWF0IlemZsqzf8S6ldUCoLwFbcJu2WrRFhVFa8AY1n
DXiG+tSuAgDsh1pz4BJGv+3858ACfdquvoqAimOiCsBHIBoS8spMDE5b/nRgS/Yb
g7hOEOQqAyitNGYKiP2J8z5Df0zm2qdUsdmLLyF32QmjuwndwOZXEj9UCP+KRdbi
y2a7BMW35ZXCJ5bNgh8v1ZBgzCZyxpDZutCYFFcEf8EA
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:05:11 2025 by rpki-client