Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa
File: z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa (raw, json)
Hash identifier: RiWOkvqrTFK0brETv9UpsQbvKc3QbmQ0OasKxFLAePE=
Subject key identifier: CF:44:2F:A3:FA:35:69:AA:C8:29:1F:AA:AE:06:91:62:9B:DF:C2:37
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019804B37EC4A4DDFA12C1A70ADDD81A0168
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa
Signing time: Sun 13 Jul 2025 16:52:08 +0000
ROA not before: Sun 13 Jul 2025 16:52:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 109.111.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:04:b3:7e:c4:a4:dd:fa:12:c1:a7:0a:dd:d8:1a:01:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jul 13 16:52:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf442fa3fa3569aac8291faaae0691629bdfc237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:da:f3:9a:ca:f5:48:c1:40:ab:6b:b0:2c:
f4:36:a8:ce:63:cb:66:ce:45:d7:fe:fd:8a:d5:ba:
31:c7:4a:bc:14:aa:82:6f:bf:8e:d3:4e:de:89:55:
ee:21:21:05:f8:5e:5f:f2:a4:33:93:08:8d:cd:27:
4a:a8:7e:6c:ad:52:63:69:ba:bc:af:c9:f7:82:64:
de:66:a7:2a:f8:43:f5:53:03:00:9d:16:f2:65:8d:
33:2c:bf:ad:dd:13:5c:fe:dd:f5:8c:49:2e:fb:8e:
f2:35:28:41:f0:11:cf:79:15:75:dc:2d:b6:15:c8:
f8:9d:f2:d1:40:55:5d:d3:ae:86:f9:8e:51:02:30:
3c:3c:ae:d3:92:fe:08:e0:3a:b6:11:23:c2:7a:76:
ae:e8:a0:cc:56:6e:b2:e1:50:fe:f6:b9:54:05:b8:
e3:49:e6:e4:a4:dc:7a:a6:af:28:d4:3f:f8:b8:bb:
4b:f6:6c:55:ce:04:d0:41:13:2c:c7:e2:27:fb:77:
bc:f5:5d:8b:3e:0b:02:0d:d6:e3:6d:db:5e:11:7b:
93:97:a6:84:e8:02:92:91:ab:74:e2:3d:e8:51:06:
8f:9b:c2:21:6c:50:71:f9:21:e5:f3:c3:d6:9a:69:
92:29:84:f3:b0:ef:8a:c3:e3:7c:37:f0:b2:37:9c:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:44:2F:A3:FA:35:69:AA:C8:29:1F:AA:AE:06:91:62:9B:DF:C2:37
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.42.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:52:c6:cd:14:a0:11:ca:03:b1:78:c0:ce:91:88:6a:64:21:
d3:28:f7:c5:5f:dd:c5:c9:7a:7f:b3:8b:64:d2:30:b5:c7:ea:
b9:47:0b:38:19:4f:b6:6e:c2:d0:1f:d9:37:d7:a4:64:8c:fa:
a6:6d:a2:b5:1d:49:ee:7a:63:0a:d5:78:ea:70:ac:fb:da:2f:
f0:ea:99:2a:1e:db:bd:12:d7:20:bd:1c:fa:df:97:22:b0:2d:
6c:18:42:d0:f8:f1:cb:02:5c:ee:85:f8:01:11:70:f3:15:7b:
66:95:aa:8b:c6:6a:ce:5a:90:f0:f2:9e:49:a4:e1:56:30:47:
2d:bb:59:31:8f:23:d6:2f:4b:a3:05:18:a8:33:46:f7:13:6f:
6e:5a:e0:c9:2a:7e:9c:6c:ae:e2:bb:52:bf:21:c0:ae:84:8d:
bd:35:39:75:c7:cb:94:f3:0b:a2:58:1e:e0:7d:68:c1:7e:8e:
e0:16:cc:8b:4b:c3:c0:da:a4:87:c0:89:e4:6c:6a:9d:a7:50:
74:c1:29:ac:2e:6f:e4:90:85:e9:2f:16:4c:aa:11:f5:22:32:
35:4d:af:93:50:66:16:d0:d7:ec:bb:03:8d:52:89:ac:c3:db:
c0:4a:e6:1e:1e:5d:74:f6:50:16:e3:14:47:b0:3b:de:a7:a0:
b9:bf:ca:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:10:06 2025 by rpki-client