Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/qxsheS1XzS3dymYbKGRvC_3BiO4.roa
File: qxsheS1XzS3dymYbKGRvC_3BiO4.roa (raw, json)
Hash identifier: VtweZ6shC74Bgwh1irW6gEbqeXbHeH8CL8orxJ3cqko=
Subject key identifier: AB:1B:21:79:2D:57:CD:2D:DD:CA:66:1B:28:64:6F:0B:FD:C1:88:EE
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 0197D0C4B9A2CD37B5507AF8D5A722FAA360
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/qxsheS1XzS3dymYbKGRvC_3BiO4.roa
Signing time: Thu 03 Jul 2025 14:50:42 +0000
ROA not before: Thu 03 Jul 2025 14:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25151
IP address blocks: 2.57.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:c4:b9:a2:cd:37:b5:50:7a:f8:d5:a7:22:fa:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jul 3 14:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab1b21792d57cd2dddca661b28646f0bfdc188ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:60:8d:42:5c:48:3c:12:fa:eb:fb:23:46:
c5:a1:55:fc:b6:a2:46:7b:3f:e9:1b:c2:92:ed:39:
66:89:17:90:b5:61:33:2c:98:a0:0f:dc:10:cc:22:
fd:8e:dc:c2:8a:ae:d4:da:a0:f2:26:4c:70:95:db:
48:f6:a0:d4:c4:dd:8d:01:3f:22:f3:3d:11:6f:61:
95:24:69:79:10:1b:87:70:2d:81:44:7e:ef:71:cc:
05:88:26:62:dc:f4:78:f1:a4:18:be:28:d5:8d:02:
af:e8:83:d8:d2:ff:49:74:d6:44:18:ed:2a:c7:5c:
43:ea:78:99:dd:85:7f:55:a5:91:c4:f6:a8:6c:5a:
75:68:af:3b:5c:db:2c:6d:11:b5:99:2e:31:36:14:
af:b2:f4:25:c5:4e:3c:6f:77:04:29:bf:ad:b0:05:
dc:c3:ae:27:30:77:db:79:cb:f9:de:47:be:88:9b:
d7:fb:6a:7f:19:0e:a9:99:de:92:18:79:f8:f2:02:
3a:98:fb:84:34:65:2d:3a:69:3f:81:ec:6b:c2:c1:
a9:11:8b:02:13:85:ea:b0:51:f1:79:f1:be:d2:3b:
76:9a:78:0c:e4:f7:39:a3:be:13:c5:60:fd:a3:71:
0c:73:8d:3e:d3:2d:22:3e:e1:63:93:da:fd:05:2c:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1B:21:79:2D:57:CD:2D:DD:CA:66:1B:28:64:6F:0B:FD:C1:88:EE
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/qxsheS1XzS3dymYbKGRvC_3BiO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ed:26:71:29:e7:38:34:9f:48:99:5c:3a:9c:0c:23:b2:c6:
a5:d6:86:52:a6:84:b9:c7:c0:c4:5c:02:24:1b:cd:5d:2f:c6:
3f:fe:42:4e:6b:4c:38:22:d9:ff:bf:00:3a:d5:92:a6:5c:cc:
f6:3f:cb:a3:b0:41:59:af:74:6a:98:86:de:1d:db:fd:c9:d8:
63:5e:33:8e:5c:4a:aa:7d:3c:e5:46:5c:9c:8f:5a:73:50:09:
4f:0f:a9:ce:5e:b3:0c:c2:b0:06:76:d9:6d:a7:68:ee:0b:b4:
9c:56:39:b5:c9:da:ac:51:8a:0c:c6:ff:d8:f2:18:5f:20:96:
dd:05:a2:e3:86:5c:15:99:18:33:1d:20:fe:29:f0:6d:cb:9f:
d4:42:b9:bf:9e:6f:9f:f2:5c:5d:09:58:f1:4c:8d:75:04:04:
0e:fd:45:f7:1e:a7:e6:14:f7:15:b6:d5:ff:07:16:38:ed:66:
df:54:43:d4:f0:14:4d:6b:58:98:51:1d:d9:31:51:3b:53:de:
4b:97:bd:98:3d:9f:0e:2b:f3:f9:e7:9d:e0:66:d4:23:63:c8:
56:40:2e:fa:d6:6d:0a:10:80:f3:16:fd:cf:bc:c7:05:f3:d5:
88:97:07:09:ac:8d:d0:76:f1:ad:ec:38:84:4b:77:81:e8:bb:
8e:44:bd:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfQxLmizTe1UHr41aci+qNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4
NGU4YzYwHhcNMjUwNzAzMTQ1MDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjFiMjE3OTJkNTdjZDJkZGRjYTY2MWIyODY0NmYwYmZkYzE4OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFNgjUJcSDwS+uv7I0bFoVX8tqJG
ez/pG8KS7TlmiReQtWEzLJigD9wQzCL9jtzCiq7U2qDyJkxwldtI9qDUxN2NAT8i
8z0Rb2GVJGl5EBuHcC2BRH7vccwFiCZi3PR48aQYvijVjQKv6IPY0v9JdNZEGO0q
x1xD6niZ3YV/VaWRxPaobFp1aK87XNssbRG1mS4xNhSvsvQlxU48b3cEKb+tsAXc
w64nMHfbecv53ke+iJvX+2p/GQ6pmd6SGHn48gI6mPuENGUtOmk/gexrwsGpEYsC
E4XqsFHxefG+0jt2mngM5Pc5o74TxWD9o3EMc40+0y0iPuFjk9r9BSx3fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKsbIXktV80t3cpmGyhkbwv9wYjuMB8GA1UdIwQY
MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt
YjBkNzJlOTEwZWZlLzEvcXhzaGVTMVh6UzNkeW1ZYktHUnZDXzNCaU80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl
LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjk4MA0G
CSqGSIb3DQEBCwUAA4IBAQA77SZxKec4NJ9ImVw6nAwjssal1oZSpoS5x8DEXAIk
G81dL8Y//kJOa0w4Itn/vwA61ZKmXMz2P8ujsEFZr3RqmIbeHdv9ydhjXjOOXEqq
fTzlRlycj1pzUAlPD6nOXrMMwrAGdtltp2juC7ScVjm1ydqsUYoMxv/Y8hhfIJbd
BaLjhlwVmRgzHSD+KfBty5/UQrm/nm+f8lxdCVjxTI11BAQO/UX3HqfmFPcVttX/
BxY47WbfVEPU8BRNa1iYUR3ZMVE7U95Ll72YPZ8OK/P5553gZtQjY8hWQC761m0K
EIDzFv3PvMcF89WIlwcJrI3QdvGt7DiES3eB6LuORL0R
-----END CERTIFICATE-----
Generated at Fri Jul 25 14:39:08 2025 by rpki-client