Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/QYL-bJP18_uE1vIYufetQA8LNBw.roa
File: QYL-bJP18_uE1vIYufetQA8LNBw.roa (raw, json)
Hash identifier: 5iykeFNsIB7WkpEwkyxi6tSK6cOuYKMgbt5OfyYFMpc=
Subject key identifier: 41:82:FE:6C:93:F5:F3:FB:84:D6:F2:18:B9:F7:AD:40:0F:0B:34:1C
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 0199438D4403789CB83A93B248259EC9C719
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/QYL-bJP18_uE1vIYufetQA8LNBw.roa
Signing time: Sat 13 Sep 2025 14:49:15 +0000
ROA not before: Sat 13 Sep 2025 14:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a14:b000::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:43:8d:44:03:78:9c:b8:3a:93:b2:48:25:9e:c9:c7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Sep 13 14:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4182fe6c93f5f3fb84d6f218b9f7ad400f0b341c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d6:43:b6:45:4b:03:92:65:0d:30:e9:24:e1:
ac:0c:35:61:e7:b9:41:a8:f7:ca:7e:6e:f5:00:1a:
8f:58:51:18:3c:fc:6d:45:f7:fc:e6:c9:be:18:a4:
a5:da:39:6b:87:81:6b:1a:2b:50:4e:d6:69:38:e3:
e1:8b:16:38:c3:6f:7a:2a:d2:7e:66:34:47:47:ee:
d6:a0:30:1f:15:0d:9b:81:78:35:08:ef:7c:da:2c:
e1:57:4c:fb:64:d1:f8:31:34:c9:12:1d:8c:3f:62:
03:05:ac:01:37:b3:89:a5:8d:3f:d9:49:77:cd:58:
2c:a7:d5:93:84:fe:0b:62:ca:d2:78:18:e0:f3:98:
dc:e3:6c:e3:60:6b:f1:d6:c1:50:ac:b8:0b:34:18:
da:3c:7b:9a:e4:e9:1f:33:1f:c8:5b:57:8a:c0:1d:
67:a1:4e:21:a8:0a:34:82:02:b0:22:6f:fa:33:44:
9a:77:c6:59:80:bf:fe:34:3c:46:69:d0:70:95:c6:
b0:43:0c:94:f9:81:23:62:36:e3:44:61:b1:a6:14:
df:b6:12:8b:f4:f6:4b:46:e5:2d:5b:81:f0:45:b3:
78:69:48:c2:8b:13:06:2e:9c:89:37:e0:30:9c:1a:
27:09:32:98:e5:9f:64:3e:3b:bd:c2:a1:a7:ff:e1:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:82:FE:6C:93:F5:F3:FB:84:D6:F2:18:B9:F7:AD:40:0F:0B:34:1C
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/QYL-bJP18_uE1vIYufetQA8LNBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:b000::/29
Signature Algorithm: sha256WithRSAEncryption
49:7e:32:e0:7c:40:dc:b8:ad:ee:73:12:db:1f:8a:99:45:47:
85:74:cf:63:7e:0c:0b:24:48:e5:a2:73:42:3d:52:64:57:6c:
f3:49:36:39:a7:55:2c:68:b5:4f:56:86:ec:ab:cb:06:8a:b2:
cc:75:25:f9:61:de:3a:7f:2b:ae:05:f6:95:95:83:4d:c9:68:
db:a0:1b:ea:7f:ed:d8:8e:7d:ad:87:e2:eb:ef:cf:84:d8:d9:
f6:f9:ca:0d:54:99:39:22:4d:1c:1a:84:24:80:b2:5b:0a:5a:
65:7e:c2:dc:a5:fe:e4:f8:2e:a9:d6:9f:d9:65:f9:07:13:52:
bf:b1:74:3c:c2:80:e8:84:83:44:0a:c4:bb:72:b2:d0:0b:e2:
25:67:fb:81:c1:b2:62:67:ba:27:b4:5c:d6:83:23:58:66:f0:
0d:2d:bb:5a:0a:b1:5f:5c:13:66:7f:13:2e:31:72:b8:05:31:
a6:0d:b4:15:6a:db:60:b4:f8:58:d4:93:5b:5c:78:11:ca:5b:
12:40:da:ac:0c:47:85:05:31:81:9f:64:3d:a5:df:b9:77:39:
b2:12:05:58:e1:4c:fa:69:9b:ad:57:db:be:98:0b:7f:6a:a3:
35:15:6e:81:ea:31:39:fe:66:dc:71:87:db:74:e6:0c:02:0d:
64:8d:a2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:48:51 2025 by rpki-client