Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/QfAqEIrfh5GlI2pgvhMIdjzs2sM.roa
File: QfAqEIrfh5GlI2pgvhMIdjzs2sM.roa (raw, json)
Hash identifier: dMt2CrdZCWtAfbu3OjW6t5fx1eVLHzaohbZwBE6VIR4=
Subject key identifier: 41:F0:2A:10:8A:DF:87:91:A5:23:6A:60:BE:13:08:76:3C:EC:DA:C3
Certificate issuer: /CN=a8ab7d68d69a52aa50c799990b9218419c147935
Certificate serial: 0197F9361001733C2338ADAB23DA32D28ADA
Authority key identifier: A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/QfAqEIrfh5GlI2pgvhMIdjzs2sM.roa
Signing time: Fri 11 Jul 2025 11:19:18 +0000
ROA not before: Fri 11 Jul 2025 11:19:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211676
IP address blocks: 185.244.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:36:10:01:73:3c:23:38:ad:ab:23:da:32:d2:8a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ab7d68d69a52aa50c799990b9218419c147935
Validity
Not Before: Jul 11 11:19:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41f02a108adf8791a5236a60be1308763cecdac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4c:9a:1c:ad:3e:73:0c:a6:76:50:ad:f7:95:
ce:9c:52:26:f8:ca:47:5b:24:5f:b6:b3:30:7b:1d:
27:af:a9:0d:e9:1a:6d:69:8b:32:19:57:eb:71:2f:
9d:1c:81:43:1d:0a:e0:15:af:64:05:82:89:ca:92:
2b:95:41:54:9a:ae:cb:bc:82:72:cd:f5:e2:56:aa:
16:b8:63:50:f2:c2:a7:fa:1a:8f:9d:e1:fa:90:29:
2a:9d:37:6f:7c:c8:aa:e3:57:4b:15:74:22:4c:66:
01:88:d5:17:bd:8f:56:e4:68:0e:82:3b:13:1d:11:
e8:9a:79:f8:55:d4:65:9d:0e:50:7d:47:2d:5c:0b:
42:03:da:59:12:bc:70:3f:f2:70:68:57:da:69:76:
33:95:3f:af:04:59:84:7c:03:b3:dd:2b:f5:9b:42:
37:17:0d:de:88:ba:88:e0:a6:34:c6:ab:09:72:33:
f4:21:4f:f6:25:de:f1:c8:bb:10:9b:09:04:d4:c3:
d9:27:87:c2:d7:81:4f:d4:5e:c1:0c:a6:dc:99:0f:
bf:80:01:2f:b1:52:4e:2e:b9:91:7d:2d:c0:34:e8:
82:3b:35:b6:57:06:12:5b:d5:72:92:0f:01:0c:e2:
c7:ee:59:89:cf:ff:df:8d:76:81:b9:ea:f3:9c:33:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F0:2A:10:8A:DF:87:91:A5:23:6A:60:BE:13:08:76:3C:EC:DA:C3
X509v3 Authority Key Identifier:
keyid:A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/QfAqEIrfh5GlI2pgvhMIdjzs2sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:11:24:01:bf:89:ea:70:eb:17:35:4e:06:6a:bd:b3:01:fd:
75:43:bd:be:be:e2:ff:f1:e7:9e:54:51:82:1a:7e:d7:11:74:
16:d0:4e:1d:76:de:f3:63:06:4b:b6:80:d0:da:50:7e:d1:2f:
05:fe:f4:71:bb:d1:77:49:97:0f:89:a4:e5:e4:e8:24:89:4f:
23:c1:85:2d:29:23:97:fd:b1:fc:5f:0c:a9:af:c5:97:ff:a6:
28:1f:94:d5:40:c0:0c:fb:8c:6c:23:c5:f8:b4:68:b2:2c:10:
4b:20:c7:bf:48:63:ca:7d:26:d5:3b:21:bf:48:43:33:9b:94:
2b:1b:62:38:da:00:17:96:29:1d:b5:9d:9f:b9:bc:5f:93:c6:
7c:39:dd:80:26:70:50:cf:59:16:ff:4e:ec:bf:5c:05:76:d9:
83:8c:98:cb:9e:a6:70:c3:9b:ca:de:09:27:e5:b6:af:2f:ff:
61:ba:cb:c3:cc:cc:b3:85:33:9b:14:a9:24:97:b8:3d:77:ea:
5d:02:5f:5e:ca:39:82:a2:06:fe:56:00:b2:82:cc:c4:77:eb:
d7:e7:a6:6a:65:fe:d7:90:8d:ea:24:9c:b3:ec:a1:2a:fe:b7:
81:93:59:da:ee:54:e5:63:06:08:89:4d:82:d6:e6:8b:32:12:
e7:47:d9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:29:12 2025 by rpki-client