Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q5V_b6LOPstgdCcu6sZa6YMmV5w.roa
File: q5V_b6LOPstgdCcu6sZa6YMmV5w.roa (raw, json)
Hash identifier: /A6T/ZgM6vG9e+cyjFzNAOACoKzOSESRKNFp8gQTFnU=
Subject key identifier: AB:95:7F:6F:A2:CE:3E:CB:60:74:27:2E:EA:C6:5A:E9:83:26:57:9C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019A8E5DB7477A4630624BF5D412B6AA06D4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q5V_b6LOPstgdCcu6sZa6YMmV5w.roa
Signing time: Sun 16 Nov 2025 20:31:37 +0000
ROA not before: Sun 16 Nov 2025 20:31:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 84.32.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:8e:5d:b7:47:7a:46:30:62:4b:f5:d4:12:b6:aa:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 16 20:31:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab957f6fa2ce3ecb6074272eeac65ae98326579c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:82:a9:07:68:55:37:9e:96:f4:7f:4b:e9:
d7:73:26:5d:5f:4b:33:de:06:9e:34:d4:32:bb:0d:
3f:d7:00:e5:27:f7:cc:d4:9d:74:a4:eb:03:65:52:
6e:93:3b:5a:de:00:63:4f:87:c0:30:01:7a:00:eb:
da:49:34:16:61:7e:f3:ac:c7:61:c8:13:43:98:4e:
46:48:7f:9a:5e:1b:ae:f3:6c:65:7c:e9:ba:4d:3c:
7c:e4:e8:59:1d:ce:7a:05:33:9a:a5:67:41:75:bd:
ec:d8:f0:0b:98:46:98:18:ff:87:29:96:60:cd:42:
64:dd:d4:ed:0d:e1:e4:1c:16:3c:59:60:66:1d:a2:
78:e8:9a:5c:8f:db:8f:fe:4b:77:aa:61:b3:65:81:
8b:4b:63:74:10:d4:c5:c0:c9:e2:f9:c2:b0:f6:d2:
18:92:c7:e2:33:9d:b3:83:10:61:a7:56:3f:a4:59:
a9:99:59:0a:7d:6f:9a:38:1f:07:80:89:2c:ab:70:
f9:54:69:2d:39:2d:1b:a8:6d:21:5f:3c:1b:c7:be:
59:c0:4e:55:59:83:3a:48:64:98:9f:1e:46:a7:f7:
9b:6d:ba:3a:22:ce:2c:c1:35:f9:f0:c3:d4:d1:b1:
37:be:49:55:7c:eb:af:f2:65:92:20:1a:cd:65:79:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:7F:6F:A2:CE:3E:CB:60:74:27:2E:EA:C6:5A:E9:83:26:57:9C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q5V_b6LOPstgdCcu6sZa6YMmV5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a2:17:95:91:c9:fc:0c:1d:af:67:89:c4:12:ec:97:01:92:
d2:cc:67:31:35:91:50:93:42:14:21:97:f4:d8:34:ff:50:8b:
9d:a5:7b:01:a1:fa:82:9f:e1:a1:02:1b:f5:dd:e6:7d:5d:a1:
fe:ea:9d:0b:09:75:28:cb:f4:14:80:2e:43:88:c8:af:2a:b9:
e9:20:08:99:a8:71:1f:53:01:d5:b7:d8:ad:72:de:44:19:f4:
65:37:73:15:f4:c0:b8:a6:3f:93:42:40:83:5e:1e:03:ec:d9:
1d:91:e5:d5:03:87:84:48:f9:c9:f1:da:bb:47:0c:6e:8e:55:
3a:47:92:d5:ae:f9:43:90:99:05:b5:c4:68:3a:fe:39:74:13:
e9:ca:94:44:89:fb:e4:04:25:f5:91:90:ea:fb:6e:f1:5d:54:
17:fc:dc:aa:dd:a8:d7:67:49:79:eb:de:ec:68:60:ca:b3:61:
d8:be:1f:7a:c6:47:92:5a:e9:e3:ef:7a:78:9a:af:64:8d:94:
b5:07:06:59:8e:14:99:ad:f9:cb:99:b3:ce:5f:7f:b8:e4:1b:
f7:78:5e:db:22:60:bd:66:aa:47:fa:21:dd:0a:a3:fd:fe:5a:
e2:f1:bc:ca:53:7a:d1:c8:38:5e:73:ed:80:f9:dc:ce:5f:cd:
d5:1e:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 06:22:38 2025 by rpki-client