Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/tq7CQBp7Hq4xNJlzwyH-4Sc1LDc.roa
File: tq7CQBp7Hq4xNJlzwyH-4Sc1LDc.roa (raw, json)
Hash identifier: ERiDa3qSUTy4z76OEMu4pDL44NVgIEtbghpVZdjpp9k=
Subject key identifier: B6:AE:C2:40:1A:7B:1E:AE:31:34:99:73:C3:21:FE:E1:27:35:2C:37
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0198181E25C5F7770486D6A65A4F57E839FB
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/tq7CQBp7Hq4xNJlzwyH-4Sc1LDc.roa
Signing time: Thu 17 Jul 2025 11:21:25 +0000
ROA not before: Thu 17 Jul 2025 11:21:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 94.74.182.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:1e:25:c5:f7:77:04:86:d6:a6:5a:4f:57:e8:39:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 17 11:21:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6aec2401a7b1eae31349973c321fee127352c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:af:b7:16:71:6c:94:54:eb:3d:c4:ab:3f:
13:ac:18:e5:42:8c:87:f3:66:cc:d4:05:71:08:52:
bd:59:81:34:4b:dc:56:31:27:cd:53:8e:ba:fb:65:
d5:d7:cc:ee:1c:6b:dd:d9:8b:ea:0c:da:9f:b8:91:
8d:db:b2:52:da:eb:06:02:7d:2d:69:58:a3:ea:9c:
57:1d:5b:b7:eb:af:f2:bb:9d:0b:84:9c:c5:be:45:
94:76:47:97:dc:74:6d:41:e0:0b:d5:05:37:49:da:
f7:f3:85:0d:ea:ff:5e:b5:82:82:44:6d:29:1a:a7:
65:b5:0f:8d:a1:22:3d:b1:89:8b:b6:a1:86:8d:99:
8c:76:6d:63:8f:48:eb:2d:d0:33:79:28:34:33:a7:
40:3c:0c:10:25:7c:6f:eb:8e:05:1e:c6:ef:5b:ce:
40:34:c6:41:5a:61:f6:90:d9:ff:4e:6e:31:8c:03:
37:e3:bd:2a:25:f4:2f:1b:dd:93:ba:89:1e:58:30:
e6:63:9b:ed:58:02:65:f3:d0:14:c6:56:b9:85:32:
bb:1c:67:aa:fb:9f:e2:55:61:90:c0:8f:fa:bd:41:
ba:f6:11:11:59:06:42:04:16:f6:ac:0e:00:b9:b9:
64:4d:12:94:b6:ee:61:f4:cb:51:f0:0c:39:33:72:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AE:C2:40:1A:7B:1E:AE:31:34:99:73:C3:21:FE:E1:27:35:2C:37
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/tq7CQBp7Hq4xNJlzwyH-4Sc1LDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.182.0/24
94.74.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7a:93:cb:62:bb:9d:0e:d9:0c:22:fc:80:92:0a:eb:60:cd:
4d:b5:2f:40:1d:10:27:1b:86:45:cb:cb:cc:d2:35:76:a0:69:
c4:a9:c2:91:88:f2:c2:10:b7:b7:6d:7b:53:99:40:29:29:99:
72:81:f6:95:22:52:83:3d:81:01:b7:e1:61:4f:88:67:20:df:
0b:07:dd:d6:a4:56:72:54:10:29:90:58:f5:3c:06:5c:63:e9:
9a:24:bc:08:b1:8d:0b:e3:08:3f:41:44:68:74:db:f2:39:61:
45:5d:9b:5b:97:e7:37:7c:a2:b1:c5:79:c0:57:09:f9:3c:4b:
99:24:4d:4f:b8:b5:54:4e:dc:3d:96:35:00:6d:1a:a5:54:08:
f7:c6:71:5b:ae:fe:7b:33:b2:12:e8:f6:88:5c:8d:14:52:69:
88:b4:b2:61:da:f5:85:ed:71:fe:be:a8:c3:a2:cd:9f:4d:c0:
70:a3:79:0d:23:11:02:2a:df:87:c1:a7:c1:f8:9a:d7:9d:df:
46:0e:27:ab:bc:2e:cc:17:f5:a2:e8:15:ec:47:ad:99:40:d8:
ac:2d:61:21:ea:47:bc:3f:6f:40:d4:63:5b:13:12:ea:d3:d3:
d0:57:a8:44:fe:65:bf:c4:68:c3:39:38:2c:dd:e6:c3:a5:3e:
70:0c:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:25:18 2025 by rpki-client