Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/p-q5NK4QM7flBgA02ibMGvdXFDA.roa
File: p-q5NK4QM7flBgA02ibMGvdXFDA.roa (raw, json)
Hash identifier: iyRzjTNAy9qfw8qmlS/eRrCPm/exDgyPpvjm/GwckYw=
Subject key identifier: A7:EA:B9:34:AE:10:33:B7:E5:06:00:34:DA:26:CC:1A:F7:57:14:30
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 01991D2F19FC1A158B112491D28B0F866F5D
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/p-q5NK4QM7flBgA02ibMGvdXFDA.roa
Signing time: Sat 06 Sep 2025 04:00:50 +0000
ROA not before: Sat 06 Sep 2025 04:00:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44794
IP address blocks: 185.235.80.0/24 maxlen: 24
185.235.82.0/24 maxlen: 24
2a0a:5b40::/48 maxlen: 48
2a0a:5b40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:2f:19:fc:1a:15:8b:11:24:91:d2:8b:0f:86:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Sep 6 04:00:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7eab934ae1033b7e5060034da26cc1af7571430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:1c:2f:15:bd:81:4d:8f:b9:71:b9:87:f2:
75:8d:e1:84:21:23:b6:6c:33:6e:68:f2:13:99:9a:
2b:7d:9a:38:97:f1:92:5e:85:61:f8:ea:37:01:19:
56:51:c8:dd:b3:1a:47:7a:46:8c:b1:51:5d:95:ff:
4e:5a:6b:99:80:5a:ab:94:1b:b3:26:ee:86:7f:01:
b8:f3:95:a2:ad:46:f9:4c:e9:31:7b:7e:df:91:4a:
de:46:04:00:e3:a4:dc:ca:05:f2:ee:cc:8f:10:4c:
1c:94:82:ed:02:3b:8b:ab:49:5a:43:eb:42:b9:ad:
04:0c:a0:c2:35:a4:9c:f3:c0:2e:01:fa:0a:f5:55:
0d:4c:dd:80:dd:cc:16:70:3e:6e:ce:4f:4f:83:f0:
c9:6b:97:3a:3c:c8:88:9b:ef:0f:cb:31:0f:d6:dd:
77:4e:f7:78:0b:01:50:bc:9c:3c:70:37:00:18:4e:
32:37:36:ad:0f:f8:aa:6b:be:69:c8:50:da:16:8a:
e7:02:fa:ff:51:8c:f8:6a:d7:a4:c0:f3:9f:6b:81:
34:10:26:45:aa:4e:08:b6:59:fc:da:7f:d3:c4:83:
df:ca:0d:76:01:ff:2d:5b:ff:53:a5:7d:b1:2c:13:
b4:d9:be:e8:05:d0:01:df:d7:e3:d5:f8:88:3d:6b:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EA:B9:34:AE:10:33:B7:E5:06:00:34:DA:26:CC:1A:F7:57:14:30
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/p-q5NK4QM7flBgA02ibMGvdXFDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.80.0/24
185.235.82.0/24
IPv6:
2a0a:5b40::/48
2a0a:5b40:2::/48
Signature Algorithm: sha256WithRSAEncryption
41:78:c8:16:d2:a8:0a:69:76:53:1e:52:5c:aa:69:0d:22:62:
89:0d:83:44:33:6c:4f:e5:34:e7:79:91:0b:4a:0f:67:9c:f4:
56:44:54:b8:50:be:f6:20:dc:7a:34:d5:68:c6:34:7f:89:73:
ea:59:3d:64:13:84:1e:a2:de:3d:ed:e3:b9:bc:40:c5:14:d0:
bf:14:7f:69:b8:62:0c:73:7e:22:e0:70:27:69:18:1e:1d:a7:
47:ad:30:85:5a:d1:38:bf:a5:dd:64:ee:68:66:29:64:3f:bf:
cb:8c:7c:35:3a:c2:e9:9f:85:be:c2:80:f0:5c:cc:d0:27:1d:
5c:fe:21:8a:df:1e:df:2a:47:a1:f2:ba:07:9f:f1:f5:9f:33:
b9:83:61:7b:fb:2e:16:98:f4:a5:8b:45:d4:d7:3a:10:45:6c:
45:65:5e:ae:83:d1:05:0d:bc:cc:fc:bd:0a:b8:36:a0:d4:41:
f2:9e:c4:23:0f:9d:68:d1:9e:4d:79:c2:da:5d:03:e0:ce:ea:
34:13:5a:a4:98:bb:b5:e7:9d:fc:b0:81:cf:fe:b9:36:de:0a:
01:e0:d0:d2:28:65:8d:53:a8:89:60:04:a9:47:2f:cd:c4:79:
97:3b:36:74:a3:ef:84:c0:7b:d8:b8:73:76:8b:20:5a:96:0f:
7a:5b:00:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:35:35 2025 by rpki-client