Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/qKcCLtEG432D5WJB88yhMQT2crs.roa
File: qKcCLtEG432D5WJB88yhMQT2crs.roa (raw, json)
Hash identifier: DjjEwdV67kxPopToL5gQtYQLfwXVH8iDrqBq6qd58Es=
Subject key identifier: A8:A7:02:2E:D1:06:E3:7D:83:E5:62:41:F3:CC:A1:31:04:F6:72:BB
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 0198253151FC96D6B61A6FB137FD0EEBC263
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/qKcCLtEG432D5WJB88yhMQT2crs.roa
Signing time: Sun 20 Jul 2025 00:17:25 +0000
ROA not before: Sun 20 Jul 2025 00:17:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36131
IP address blocks: 5.150.156.0/24 maxlen: 24
5.150.157.0/24 maxlen: 24
5.150.158.0/24 maxlen: 24
5.150.159.0/24 maxlen: 24
185.22.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:25:31:51:fc:96:d6:b6:1a:6f:b1:37:fd:0e:eb:c2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jul 20 00:17:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8a7022ed106e37d83e56241f3cca13104f672bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:53:18:d5:1a:42:16:9f:84:66:22:43:e6:
49:8f:a2:85:dd:e6:07:21:81:4c:47:da:f1:97:dd:
e8:ae:27:df:76:e7:2a:1c:f0:8a:87:fe:5b:47:1e:
fa:67:18:b5:43:f6:8e:95:75:ec:98:4d:81:2c:3f:
8e:cc:f3:8d:e7:d0:01:8c:c7:fd:36:cb:43:35:27:
c5:9a:47:a5:08:ab:c8:bd:bf:75:a7:0f:c6:8f:93:
b5:72:dc:ff:df:33:08:37:86:08:e6:a1:94:b6:b9:
31:c5:c1:6b:05:94:88:3e:7a:3d:5b:f7:c6:4a:1d:
67:be:00:96:fc:c1:6b:8a:4c:07:1e:54:70:d5:3a:
0e:fe:a2:d9:d4:95:a6:a2:b4:9e:e8:37:e3:90:f1:
fe:c4:25:88:be:49:71:07:6a:f4:7a:37:f3:47:b7:
00:72:91:7f:3a:e7:b9:e2:e6:ae:b2:b2:5f:33:3c:
e4:9f:58:74:7c:bf:49:89:07:67:cd:95:39:9f:1b:
01:ab:4b:04:46:32:93:0b:bd:1b:0d:84:d7:77:c8:
d4:75:c5:dd:74:06:fb:d1:57:a3:be:14:4d:8d:67:
76:d9:56:44:86:06:43:de:f7:39:f1:d3:06:16:63:
e9:b1:c5:46:2b:46:e6:db:e0:20:b9:54:9e:b9:8e:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A7:02:2E:D1:06:E3:7D:83:E5:62:41:F3:CC:A1:31:04:F6:72:BB
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/qKcCLtEG432D5WJB88yhMQT2crs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.156.0/22
185.22.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:aa:15:8f:8f:2e:ce:cf:14:b4:5b:02:72:ae:c9:0b:d3:23:
e1:c7:c3:63:41:5f:cb:78:15:d1:6b:80:18:18:39:10:01:7f:
1f:87:de:4c:49:ad:67:b2:41:d9:23:e2:68:70:72:71:04:3f:
8c:4f:29:3a:8d:a8:dd:ae:00:e8:e7:ce:3f:bb:78:e4:9c:94:
46:9c:b4:54:66:8c:c4:ac:c1:a0:f5:4e:92:11:7f:c9:1e:04:
9a:02:16:5a:96:6d:84:97:b5:65:fa:46:b2:6f:73:c4:d7:26:
5b:09:a5:21:df:8c:de:11:a9:31:95:2e:ab:cf:0b:df:17:ac:
26:65:5e:49:36:2e:78:14:f2:e9:76:4a:03:ef:6c:c7:73:d4:
a9:5e:19:96:e1:f4:d8:52:8e:1f:b6:3e:73:2d:08:f0:c4:80:
00:2b:08:a1:39:5e:9d:10:c6:d0:c3:13:a7:fe:05:d9:b9:77:
7b:13:b9:37:ba:b5:73:75:4d:14:f5:f3:08:1a:43:68:6c:ce:
24:cb:9a:f1:41:2a:1b:de:3c:78:d5:62:e7:3f:ee:e3:9b:11:
46:e9:fb:2f:e3:f3:23:37:81:5a:4f:5e:dd:ac:41:96:27:b4:
68:0a:24:f1:89:04:d1:92:d0:05:e4:85:4c:9f:6a:c7:94:54:
a3:2c:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:40 2025 by rpki-client