Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/QvSUoh-rI9Gvmqnf3gaD-EyYzvM.roa
File: QvSUoh-rI9Gvmqnf3gaD-EyYzvM.roa (raw, json)
Hash identifier: 1F8ucRvIFuu84dA53eWFWrKHkTSo7KSN0HYCCmPI/ew=
Subject key identifier: 42:F4:94:A2:1F:AB:23:D1:AF:9A:A9:DF:DE:06:83:F8:4C:98:CE:F3
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01980E6AFA7A9230A25521C3F75B8B57D3B4
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/QvSUoh-rI9Gvmqnf3gaD-EyYzvM.roa
Signing time: Tue 15 Jul 2025 14:09:08 +0000
ROA not before: Tue 15 Jul 2025 14:09:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208084
IP address blocks: 2a03:5840:12b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:6a:fa:7a:92:30:a2:55:21:c3:f7:5b:8b:57:d3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jul 15 14:09:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42f494a21fab23d1af9aa9dfde0683f84c98cef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:ec:d8:ca:5e:0a:c2:f0:f2:0d:7f:19:f2:
f0:86:b3:eb:83:b9:0a:ff:04:b7:89:54:a4:be:5c:
ef:7b:41:8d:ff:0e:70:c3:e2:e8:ec:ac:9d:d0:fb:
21:23:97:3a:35:49:0b:ce:c5:ff:b0:2a:3e:2c:64:
71:d7:3c:0a:06:f9:b2:cf:d5:52:41:aa:cf:f3:30:
54:df:f4:fa:72:46:01:ab:42:0b:c3:1d:3a:f1:da:
1d:3a:60:41:45:50:1c:fc:3b:f8:62:93:2b:d9:0e:
9e:c8:fb:18:1f:25:6d:0e:cc:13:32:19:38:2a:f8:
fe:b1:61:a3:1a:bd:5e:ae:78:90:bd:c7:f9:7a:3b:
8a:bb:f4:50:3b:f0:b0:e5:88:3d:b3:f8:5e:eb:fe:
76:c2:b8:d0:03:b8:63:47:72:51:ab:24:ef:5d:4f:
94:63:af:82:66:8f:49:1e:f4:29:84:ee:a4:5f:fd:
80:f0:68:c0:ec:09:e3:e2:8e:20:c8:2f:3c:7e:fc:
a1:63:d4:a8:90:3f:93:72:cf:d2:84:fa:f9:6f:15:
27:74:ac:f3:0c:c0:3b:f2:5a:37:da:42:d0:7f:04:
74:17:c9:c7:55:ae:9d:cd:74:0f:71:f3:23:df:47:
19:d8:b6:a9:05:5f:f4:10:e0:07:8d:ff:b8:ef:16:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:94:A2:1F:AB:23:D1:AF:9A:A9:DF:DE:06:83:F8:4C:98:CE:F3
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/QvSUoh-rI9Gvmqnf3gaD-EyYzvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:12b::/48
Signature Algorithm: sha256WithRSAEncryption
8e:a9:15:6e:a2:f8:9f:48:35:1e:c5:e2:79:9e:59:16:63:4a:
58:e8:c9:12:b6:5d:f7:7c:4e:a3:28:5d:30:73:9c:5b:93:b8:
28:be:ba:ca:af:1f:b9:31:c9:be:48:df:da:02:e9:86:c3:50:
cb:37:42:79:22:a6:38:a3:a3:2f:35:7d:26:1f:d5:94:9e:ea:
74:53:1e:a9:54:59:f2:be:e3:fa:3b:2b:9a:73:95:40:94:a1:
5d:92:fb:46:71:b4:fe:9b:18:79:e0:b2:32:ec:cd:ea:b5:8a:
09:0b:04:b8:f2:c0:92:4e:59:1f:9b:74:08:17:52:74:0b:5f:
6b:39:ef:2b:c9:72:b1:02:66:6b:cf:bd:b4:8e:ab:3c:01:c8:
f7:31:06:cd:7f:f8:9f:d0:3f:63:7f:32:f8:db:8b:54:86:ac:
be:6e:48:e7:41:73:f9:43:14:8f:99:2c:19:f2:1a:4f:53:bd:
72:56:bf:3d:9a:02:ff:51:c3:67:76:a6:4c:b5:0e:34:c9:80:
2e:fa:8d:8a:e8:60:40:ce:4b:bf:8a:a7:12:79:4c:58:77:67:
8f:90:1b:90:97:2a:73:8d:3a:b6:e9:d1:71:2e:ae:28:d3:5f:
64:82:a1:7a:c9:d7:eb:4a:de:e7:95:b5:02:bb:5e:33:55:41:
14:a1:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:46:12 2025 by rpki-client