Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/qJnDw_Xmq2bfel2_89lbdiftBRQ.roa
File: qJnDw_Xmq2bfel2_89lbdiftBRQ.roa (raw, json)
Hash identifier: O4ff3v5t1d6BKPF64qTARMkRfucrOU0EI+MHTwPLMTc=
Subject key identifier: A8:99:C3:C3:F5:E6:AB:66:DF:7A:5D:BF:F3:D9:5B:76:27:ED:05:14
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 01985599B3DD898B2A1C91801537D1014427
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/qJnDw_Xmq2bfel2_89lbdiftBRQ.roa
Signing time: Tue 29 Jul 2025 09:53:13 +0000
ROA not before: Tue 29 Jul 2025 09:53:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206022
IP address blocks: 185.48.140.0/24 maxlen: 24
185.48.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:99:b3:dd:89:8b:2a:1c:91:80:15:37:d1:01:44:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Jul 29 09:53:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a899c3c3f5e6ab66df7a5dbff3d95b7627ed0514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:02:5e:21:bb:3a:b7:47:6d:da:e5:f5:d2:
ee:c0:32:a6:72:6b:c8:30:a3:16:9d:4b:25:fc:c4:
1a:ba:5d:5b:21:da:47:ce:65:2f:e1:e8:be:8a:6b:
0d:25:95:56:af:00:5a:69:b6:4f:4c:7f:dc:dc:27:
95:cb:4f:7e:a7:bd:53:18:b2:18:dc:e5:d7:20:d3:
ba:f2:d5:2e:24:89:04:ef:a7:fb:2d:3e:e7:23:d3:
71:2b:1c:29:ff:03:fc:4f:2c:02:18:26:d3:4d:d9:
58:46:97:5f:40:5c:ae:8f:a7:b2:20:9f:51:71:4d:
79:06:2b:bf:78:83:1e:4c:42:6b:bc:ee:97:13:7a:
99:5a:4d:7e:24:7d:9a:18:2e:67:37:a5:c3:65:01:
68:28:7f:86:ba:95:36:8f:0f:0c:82:81:a8:3e:73:
94:bb:0f:a2:21:0b:84:ec:7c:cb:9a:53:2c:39:ff:
f7:33:3e:fa:79:c3:83:97:b7:8e:85:55:28:4f:51:
95:29:5c:04:6d:fa:51:56:08:02:2d:fd:39:ec:96:
d6:83:eb:a3:4f:bd:ce:7f:00:65:f3:1f:fc:63:7c:
c5:22:4b:66:9f:36:8c:2a:a4:9a:94:b1:ed:d8:ca:
e2:6c:81:d9:2e:ce:05:38:fd:34:e9:c5:a1:8f:8d:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:99:C3:C3:F5:E6:AB:66:DF:7A:5D:BF:F3:D9:5B:76:27:ED:05:14
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/qJnDw_Xmq2bfel2_89lbdiftBRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.140.0/23
Signature Algorithm: sha256WithRSAEncryption
64:02:3f:a7:71:96:d6:70:5d:c6:9b:69:b9:f5:e9:28:eb:ed:
93:b6:97:7b:5e:97:2e:ea:6a:53:5f:8e:e6:f7:84:62:3b:91:
14:fa:c0:8d:86:c7:78:27:f2:5f:16:91:eb:44:6b:75:9e:93:
9e:61:da:43:8c:96:cc:aa:f6:02:69:c6:61:d3:be:99:84:ce:
ae:ee:9b:54:bb:59:62:9f:d5:cc:c7:58:d3:c5:5a:35:e3:28:
d4:62:ba:69:75:85:ec:ae:fe:cb:60:8e:6d:a8:69:45:ce:28:
96:e6:78:5d:e3:a7:ff:b7:3d:81:23:d0:eb:9b:db:fc:18:02:
09:9f:1c:20:dd:12:99:81:90:5e:1d:bf:10:02:97:28:e9:ab:
da:44:6c:7d:1e:cb:d4:39:fe:58:f9:4c:a6:8e:db:63:62:87:
31:d5:aa:28:26:73:45:14:e0:34:d8:72:16:76:e3:a9:21:60:
53:44:68:ba:2b:41:aa:49:6c:66:c1:76:47:92:4a:94:10:fe:
90:77:28:fb:dc:d0:32:a3:a3:7a:a8:93:92:21:1e:57:4e:06:
38:06:e0:50:33:43:4d:bc:0a:c5:05:83:4b:24:40:35:80:b8:
71:d7:b8:1b:e6:0d:d5:ce:b4:95:88:97:24:18:2b:ab:8e:0a:
84:ba:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:36:06 2025 by rpki-client