Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/qYUhOlm7rxtE24ifggtJupvHC-U.roa
File: qYUhOlm7rxtE24ifggtJupvHC-U.roa (raw, json)
Hash identifier: Eq0prYYqmBCy3NmWTbhlJMhDQOJrr51MgbHFrPYHpts=
Subject key identifier: A9:85:21:3A:59:BB:AF:1B:44:DB:88:9F:82:0B:49:BA:9B:C7:0B:E5
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 0197FEAEABAAF63BF88BB658E88398880F1F
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/qYUhOlm7rxtE24ifggtJupvHC-U.roa
Signing time: Sat 12 Jul 2025 12:49:09 +0000
ROA not before: Sat 12 Jul 2025 12:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 87.248.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:ae:ab:aa:f6:3b:f8:8b:b6:58:e8:83:98:88:0f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 12 12:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a985213a59bbaf1b44db889f820b49ba9bc70be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:0a:d4:31:90:b3:9b:63:23:38:85:34:88:
11:7d:4e:12:bf:1b:69:6e:89:c9:eb:dd:8f:06:af:
0f:b4:e2:41:82:e5:ab:e7:17:f7:78:72:f2:17:5d:
2b:5a:65:32:97:2b:4c:bb:49:75:50:05:be:e2:87:
82:82:54:99:3b:e6:6d:2a:06:be:c7:62:4a:f1:fd:
e3:c0:0c:88:f9:f6:cc:d3:dc:7c:cc:54:02:2e:98:
f6:72:e4:f9:90:44:76:65:00:bf:f2:8c:6b:9e:47:
31:79:f6:53:97:6c:72:c2:d7:47:26:48:5d:3c:8d:
07:f4:77:97:3d:71:7a:dd:b4:94:03:6a:5b:de:7f:
61:8a:21:78:75:68:11:c7:46:c3:b7:18:a7:c3:69:
fa:80:2f:c4:15:9a:78:51:bb:d6:a9:6c:39:b5:ff:
4f:3b:0a:33:62:c6:b1:c2:87:18:4c:15:2c:fb:fb:
1a:ee:d4:1d:aa:89:d7:cd:d3:f8:fd:1c:5c:44:97:
78:97:6a:ce:3f:3e:93:16:c4:ca:02:84:c5:5d:69:
3a:f7:d9:c8:bf:84:df:d0:fc:29:5e:26:b1:36:30:
58:39:01:2b:c2:07:22:cf:28:cf:63:4a:49:8d:6f:
08:1a:f7:c3:cd:6d:04:ed:75:a0:6f:40:02:37:08:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:21:3A:59:BB:AF:1B:44:DB:88:9F:82:0B:49:BA:9B:C7:0B:E5
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/qYUhOlm7rxtE24ifggtJupvHC-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:69:83:8b:de:6d:8a:90:e9:ac:ee:2e:b9:c7:63:7c:fa:3a:
8e:02:af:0c:72:2c:2a:99:0d:37:e5:62:e7:f9:b7:c9:9a:20:
7f:3f:ce:ac:b2:b0:1f:78:59:32:9f:75:d0:3f:2b:6c:83:78:
f7:19:b0:86:5c:54:ed:89:33:03:d9:fe:ae:17:17:bf:da:87:
15:64:7e:b8:02:66:b7:c8:ec:0c:ac:d2:0c:ea:56:4a:14:a0:
52:83:ef:e7:5c:f3:a7:e8:6c:29:85:85:ec:61:a5:22:cb:7d:
79:ea:d0:eb:e1:29:80:fd:95:63:5e:5c:a6:6d:90:c8:9e:f9:
3a:55:1a:1f:88:01:cd:e5:22:5c:09:fa:33:e0:df:e5:ec:fc:
66:79:41:c9:b5:1d:f3:d2:d8:27:d8:68:c0:7b:d3:a6:69:12:
85:5c:2b:4f:7a:10:f6:4b:d4:62:6f:23:c0:43:14:80:8f:62:
e9:f1:a8:7a:9f:b9:3c:c6:91:92:8f:a2:97:e5:6c:ba:11:5a:
72:05:b4:a1:a3:01:c9:7c:63:0d:03:0d:8d:f0:d9:f3:3d:6c:
0f:af:02:0f:74:84:be:90:ec:80:f5:63:5f:d7:06:fd:6a:e8:
e4:3e:26:03:81:60:66:3b:83:61:25:41:a8:2c:96:b5:9c:58:
99:b8:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:12:20 2025 by rpki-client