Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/QDogk9LeixWbk7Okb-SPGo3DZsc.roa
File: QDogk9LeixWbk7Okb-SPGo3DZsc.roa (raw, json)
Hash identifier: UXsKXqumkYzMjQANzxQvweH31V1wu92CHEL8JuHdFNw=
Subject key identifier: 40:3A:20:93:D2:DE:8B:15:9B:93:B3:A4:6F:E4:8F:1A:8D:C3:66:C7
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019841C41084A89C43A80D1F91604591CD1A
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/QDogk9LeixWbk7Okb-SPGo3DZsc.roa
Signing time: Fri 25 Jul 2025 13:27:04 +0000
ROA not before: Fri 25 Jul 2025 13:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25255
IP address blocks: 45.3.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:c4:10:84:a8:9c:43:a8:0d:1f:91:60:45:91:cd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jul 25 13:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=403a2093d2de8b159b93b3a46fe48f1a8dc366c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:65:4e:f7:5d:76:7e:98:e1:d2:ce:41:40:
0f:bb:ba:09:b8:78:a6:69:50:9f:bc:79:a5:3a:f2:
8a:3c:a6:80:98:66:8f:e0:0f:a4:5f:bd:57:38:df:
84:1f:bf:cb:3f:19:e0:cb:e1:d8:42:6f:76:4c:96:
38:fb:2f:3e:68:7a:1b:9e:5e:e0:93:45:65:53:2f:
a6:1a:30:2a:7f:85:98:8b:9b:66:53:b1:7e:d7:92:
18:46:11:34:87:a7:72:ef:61:3e:fa:3c:8a:16:46:
0f:fb:d6:d5:9c:15:45:03:ac:09:e2:5c:70:73:b1:
99:8f:99:22:21:50:f5:05:ad:f1:f0:42:1a:8b:f2:
ee:26:36:82:fa:b1:79:e1:a1:dc:12:57:7b:fa:ac:
4b:62:8a:d8:f9:c1:33:e9:80:af:8a:4b:ad:90:3a:
f0:9f:68:19:c0:ea:bb:b6:ed:80:67:99:0d:d9:c6:
e5:31:c5:6c:ce:94:60:23:06:f8:93:74:70:a9:3a:
d1:72:82:d9:33:b2:42:38:64:28:9c:0f:3c:a5:ec:
c3:78:9f:95:32:b7:4a:93:f4:56:e7:20:d5:f9:e3:
ac:00:c5:bf:15:17:0a:41:7a:c0:53:4c:9c:f3:6d:
17:01:f4:c0:c4:ea:a7:bf:59:91:b6:6c:98:4d:27:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3A:20:93:D2:DE:8B:15:9B:93:B3:A4:6F:E4:8F:1A:8D:C3:66:C7
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/QDogk9LeixWbk7Okb-SPGo3DZsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.56.0/24
Signature Algorithm: sha256WithRSAEncryption
61:20:56:e9:7a:97:80:31:4e:75:aa:1f:4e:89:17:66:6c:95:
73:8d:5f:13:7d:2d:35:52:ea:a4:cd:1c:ee:18:83:f1:db:1e:
06:48:8f:a6:dd:88:b1:67:7d:f8:86:fb:bf:c1:9d:dc:0e:18:
a9:3a:08:3d:77:bd:21:f0:cb:27:17:2d:20:6e:4a:d3:11:cf:
fa:87:1d:20:ce:a4:0e:bb:b6:9b:e1:cc:ad:84:35:f6:ac:91:
21:bb:76:6a:8a:8e:84:6f:32:48:18:8a:66:e5:03:b1:9e:f4:
44:4b:7f:c9:fd:57:15:14:12:7c:a1:d3:d1:64:3f:4f:d3:87:
b9:b9:ae:92:2d:f9:ef:ed:b6:b0:48:a5:ed:cf:8d:c6:4e:be:
2d:0a:20:d0:62:ec:4d:f0:2d:0d:db:59:78:40:7e:66:4d:18:
23:7d:c7:6b:83:b6:5f:15:32:f8:d4:5b:eb:c9:a5:f8:cd:93:
ac:f2:54:9e:f6:15:0a:7c:40:5a:06:55:8c:3d:16:b9:ed:5d:
1e:92:86:5c:cd:f9:3b:11:28:f1:e7:5f:b5:15:c0:08:9b:18:
49:1f:64:98:73:1c:fb:9d:e6:e6:cc:da:34:fa:b7:92:42:f5:
d1:9e:a5:23:6f:ac:81:58:d4:c3:83:5c:a0:cb:79:9f:ca:8e:
05:cf:b5:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhBxBCEqJxDqA0fkWBFkc0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk
NTMyYzIwHhcNMjUwNzI1MTMyNzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDNhMjA5M2QyZGU4YjE1OWI5M2IzYTQ2ZmU0OGYxYThkYzM2NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3tlTvdddn6Y4dLOQUAPu7oJuHim
aVCfvHmlOvKKPKaAmGaP4A+kX71XON+EH7/LPxngy+HYQm92TJY4+y8+aHobnl7g
k0VlUy+mGjAqf4WYi5tmU7F+15IYRhE0h6dy72E++jyKFkYP+9bVnBVFA6wJ4lxw
c7GZj5kiIVD1Ba3x8EIai/LuJjaC+rF54aHcEld7+qxLYorY+cEz6YCvikutkDrw
n2gZwOq7tu2AZ5kN2cblMcVszpRgIwb4k3RwqTrRcoLZM7JCOGQonA88pezDeJ+V
MrdKk/RW5yDV+eOsAMW/FRcKQXrAU0yc820XAfTAxOqnv1mRtmyYTSddrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEA6IJPS3osVm5OzpG/kjxqNw2bHMB8GA1UdIwQY
MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt
MWQwYmY1MjA4ZjkwLzEvUURvZ2s5TGVpeFdiazdPa2ItU1BHbzNEWnNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw
LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQM4MA0G
CSqGSIb3DQEBCwUAA4IBAQBhIFbpepeAMU51qh9OiRdmbJVzjV8TfS01UuqkzRzu
GIPx2x4GSI+m3YixZ334hvu/wZ3cDhipOgg9d70h8MsnFy0gbkrTEc/6hx0gzqQO
u7ab4cythDX2rJEhu3Zqio6EbzJIGIpm5QOxnvRES3/J/VcVFBJ8odPRZD9P04e5
ua6SLfnv7bawSKXtz43GTr4tCiDQYuxN8C0N21l4QH5mTRgjfcdrg7ZfFTL41Fvr
yaX4zZOs8lSe9hUKfEBaBlWMPRa57V0ekoZczfk7ESjx51+1FcAImxhJH2SYcxz7
nebmzNo0+reSQvXRnqUjb6yBWNTDg1ygy3mfyo4Fz7Xo
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:49 2025 by rpki-client