Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/QXixlGT-IWBWMs-K9puON_m-KlA.roa
File: QXixlGT-IWBWMs-K9puON_m-KlA.roa (raw, json)
Hash identifier: hug41wpb3u0mBV1YR0lUs8u3c04vJ26g36R8fCXqj3A=
Subject key identifier: 41:78:B1:94:64:FE:21:60:56:32:CF:8A:F6:9B:8E:37:F9:BE:2A:50
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01980A2A6AD96C99D89CAC395A4775C31B6D
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/QXixlGT-IWBWMs-K9puON_m-KlA.roa
Signing time: Mon 14 Jul 2025 18:20:08 +0000
ROA not before: Mon 14 Jul 2025 18:20:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 185.215.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:2a:6a:d9:6c:99:d8:9c:ac:39:5a:47:75:c3:1b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jul 14 18:20:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4178b19464fe21605632cf8af69b8e37f9be2a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:59:9a:a5:9d:fa:8b:44:d1:96:da:cc:25:
f1:1d:a3:f2:eb:4b:68:da:84:10:d1:66:0b:22:17:
33:d7:9b:31:7f:cb:48:df:5c:47:5e:f3:74:f3:f6:
f3:51:34:e4:4b:75:5b:fc:a2:11:c8:9d:7d:5f:0c:
66:03:e4:e2:36:ec:c1:2c:28:fc:b5:7a:22:1f:43:
25:66:9d:dc:64:e2:0c:31:81:cb:6e:b9:a9:da:78:
1c:9d:32:17:28:ff:84:ab:3c:9a:ff:06:8e:d8:c7:
2e:fa:f2:87:36:ac:f3:fd:da:84:24:b8:44:b5:9c:
47:4a:71:70:c0:99:8c:49:5e:f9:ee:b2:d4:59:f7:
47:7e:65:ab:29:07:fa:fb:4d:82:c7:ac:3f:9f:ed:
6a:35:31:d2:51:15:fd:c9:e7:74:16:13:64:65:8d:
e6:f7:0c:c1:5a:29:84:ee:8e:90:fa:6d:fc:f7:3b:
55:cd:93:9d:10:ed:66:7b:f1:b4:bb:39:c3:51:c9:
cc:64:af:d2:56:6c:e8:6c:4f:36:2d:76:81:ea:a7:
6c:0b:79:3d:84:1c:ec:2e:85:ff:9b:2e:52:88:1d:
2d:c9:1e:0a:51:5e:41:d2:60:9e:97:ce:39:51:6b:
14:d0:ae:c5:f0:b4:cb:e3:ad:bb:30:a0:27:c4:49:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:78:B1:94:64:FE:21:60:56:32:CF:8A:F6:9B:8E:37:F9:BE:2A:50
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/QXixlGT-IWBWMs-K9puON_m-KlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.228.0/24
Signature Algorithm: sha256WithRSAEncryption
12:33:16:da:6b:7f:29:4b:c0:42:d2:16:3d:44:7c:05:c6:4e:
4d:4b:5e:43:29:b3:b2:60:2a:1a:fb:e1:36:b6:5d:8d:33:25:
6b:22:d6:a5:9b:f7:75:35:a0:d3:b6:b3:72:44:fe:89:21:ac:
8b:2b:b7:b7:d8:be:e6:cd:2f:cc:40:e6:97:3c:67:eb:14:36:
7f:aa:05:ae:68:fc:6a:71:2a:03:ae:52:17:56:8e:35:94:76:
89:97:e2:4a:bf:8c:b2:3d:e7:e8:e7:14:e2:f6:8e:ef:92:b4:
70:cf:2b:87:93:ca:a2:68:95:f7:90:6e:c3:ab:0e:fc:e6:e9:
48:b1:aa:91:4c:05:aa:bf:56:a3:25:7d:92:1e:50:46:1c:e4:
0f:ad:f4:ef:81:64:23:88:a6:32:a2:7d:1d:b9:63:36:4c:40:
c5:ad:a1:2f:8f:a2:fa:93:a6:d8:76:9c:1c:51:67:18:60:d9:
39:b4:f5:78:80:ed:47:5b:f7:e2:23:3d:e6:a9:3f:a9:7c:43:
6d:03:cd:d1:27:46:01:04:93:b2:a9:9b:a1:c1:3b:b6:17:34:
fb:a1:91:f2:95:a9:4b:6d:f2:88:3a:38:8b:cc:5f:36:9e:d4:
3e:cb:f9:18:bc:fb:f5:3b:d4:5b:ee:86:6d:16:cd:96:1b:f7:
38:2f:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:10:42 2025 by rpki-client