Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/QOnOX-qgjRMjz_SNK9ZpG_NDO98.roa
File: QOnOX-qgjRMjz_SNK9ZpG_NDO98.roa (raw, json)
Hash identifier: N/XUOamSaDoqkQC9NmUkQgS+Uf69LEs+brVxUPL9rfU=
Subject key identifier: 40:E9:CE:5F:EA:A0:8D:13:23:CF:F4:8D:2B:D6:69:1B:F3:43:3B:DF
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 019A11205603851495622156AA8CC0E6C4B1
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/QOnOX-qgjRMjz_SNK9ZpG_NDO98.roa
Signing time: Thu 23 Oct 2025 12:52:02 +0000
ROA not before: Thu 23 Oct 2025 12:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209377
IP address blocks: 152.89.4.0/22 maxlen: 22
152.89.4.0/24 maxlen: 24
2a09:2c40::/29 maxlen: 29
2a09:2c40:a::/48 maxlen: 48
2a09:2c40:b::/48 maxlen: 48
2a09:2c40:c::/48 maxlen: 48
2a09:2c40:d::/48 maxlen: 48
2a09:2c40:e::/48 maxlen: 48
2a09:2c40:f::/48 maxlen: 48
2a09:2c40:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:20:56:03:85:14:95:62:21:56:aa:8c:c0:e6:c4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Oct 23 12:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40e9ce5feaa08d1323cff48d2bd6691bf3433bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:eb:70:7a:f6:e6:d8:3c:ef:cc:e2:73:32:
d1:22:0f:c0:b9:4c:09:0c:8b:c6:dd:8a:12:d0:47:
68:bc:06:6e:4c:7c:b2:16:1d:f1:9c:c3:b7:d0:4e:
3b:da:c4:3b:74:4a:af:88:28:76:b7:bb:57:cf:56:
eb:00:06:54:42:c6:09:2c:f9:3e:52:19:21:5d:a3:
b5:b3:1d:00:e7:74:8d:c4:e1:c3:e4:08:4a:c0:79:
4b:54:3b:84:c3:dd:e7:36:b5:a5:85:82:85:a1:0e:
fa:72:9e:f4:82:b1:ad:56:5a:0c:c5:85:1e:f9:ca:
c2:2e:96:d2:a5:75:76:8a:14:87:5b:d2:9c:b4:71:
1c:0e:cf:ae:30:32:7a:6e:99:b7:54:03:6a:c3:fa:
64:3c:97:62:8b:e2:ce:f4:a7:49:27:a9:09:5a:ed:
47:54:6b:7c:d0:af:bd:9d:e3:4f:b8:13:03:98:f6:
c5:29:62:70:d0:5b:21:87:20:96:0d:df:8e:8d:de:
a5:66:2e:86:89:b2:a7:b6:cc:33:b2:61:4f:8c:84:
85:72:f4:ed:51:44:9a:e3:e1:40:ef:59:37:7a:93:
58:57:f7:df:8e:17:5e:79:1d:79:cb:61:a0:f6:06:
6d:ba:22:06:e7:eb:ca:7a:ae:62:84:50:d1:65:94:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:CE:5F:EA:A0:8D:13:23:CF:F4:8D:2B:D6:69:1B:F3:43:3B:DF
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/QOnOX-qgjRMjz_SNK9ZpG_NDO98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.4.0/22
IPv6:
2a09:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
64:40:e0:b9:b1:0b:6f:14:db:03:f9:88:f9:be:67:85:38:e8:
d7:aa:22:74:37:c5:a1:9b:88:86:a6:1e:5a:ec:22:e8:10:da:
66:c2:cf:1f:43:48:0c:31:44:af:5c:09:d6:02:fa:22:3e:cb:
fa:af:68:72:6c:c3:10:56:2e:65:c2:65:80:c5:a4:ae:fa:ad:
e4:7d:3c:2b:bf:d1:7a:e9:18:3e:de:96:12:02:59:ac:dc:ec:
ef:c9:ac:7b:a2:8d:02:f4:cd:7c:cb:7a:c2:8a:48:7f:d7:15:
ac:24:48:67:66:a7:5e:03:df:3e:bb:6d:a0:45:fb:ef:be:41:
87:eb:08:5a:31:f8:94:35:fa:f9:a4:9a:2c:b4:d2:2b:91:48:
c7:99:58:b9:e8:80:73:56:e7:a9:30:64:3c:b6:0c:1e:88:57:
61:c5:2d:9f:e1:e8:36:fe:a1:6b:c3:03:b1:cd:99:f4:ee:77:
10:fd:55:d7:31:0a:61:e8:d9:a0:2d:39:ce:03:c9:57:51:ff:
72:e0:7a:74:a8:c3:23:0f:f4:18:2e:e8:66:c0:e9:c2:59:57:
81:c2:62:e8:78:db:cc:82:ba:7a:3d:5d:27:f3:1d:c1:db:d6:
89:c9:a2:bf:47:a3:e9:6d:1f:16:1b:26:31:5c:be:04:5b:3c:
c7:e6:02:3f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZoRIFYDhRSVYiFWqozA5sSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjUzNjYxZjYyMWI2ZjU3NGE1ZjM4ZjExNjJjYTY3OWMz
YjMwZWUwHhcNMjUxMDIzMTI1MjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGU5Y2U1ZmVhYTA4ZDEzMjNjZmY0OGQyYmQ2NjkxYmYzNDMzYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmfrcHr25tg878ziczLRIg/AuUwJ
DIvG3YoS0EdovAZuTHyyFh3xnMO30E472sQ7dEqviCh2t7tXz1brAAZUQsYJLPk+
UhkhXaO1sx0A53SNxOHD5AhKwHlLVDuEw93nNrWlhYKFoQ76cp70grGtVloMxYUe
+crCLpbSpXV2ihSHW9KctHEcDs+uMDJ6bpm3VANqw/pkPJdii+LO9KdJJ6kJWu1H
VGt80K+9neNPuBMDmPbFKWJw0FshhyCWDd+Ojd6lZi6GibKntswzsmFPjISFcvTt
UUSa4+FA71k3epNYV/ffjhdeeR15y2Gg9gZtuiIG5+vKeq5ihFDRZZTZxwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEDpzl/qoI0TI8/0jSvWaRvzQzvfMB8GA1UdIwQY
MBaAFIK1NmH2Ibb1dKXzjxFiymecOzDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAt
NjQ5YmZjNTQ4NTg3LzEvUU9uT1gtcWdqUk1qel9TTks5WnBHX05ETzk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iNzRhZDYtYWE1YS00OTQ5LWI4NjAtNjQ5YmZjNTQ4NTg3
LzEvZ3JVMllmWWh0dlYwcGZPUEVXTEtaNXc3TU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCmFkEMA0E
AgACMAcDBQMqCSxAMA0GCSqGSIb3DQEBCwUAA4IBAQBkQOC5sQtvFNsD+Yj5vmeF
OOjXqiJ0N8Whm4iGph5a7CLoENpmws8fQ0gMMUSvXAnWAvoiPsv6r2hybMMQVi5l
wmWAxaSu+q3kfTwrv9F66Rg+3pYSAlms3Ozvyax7oo0C9M18y3rCikh/1xWsJEhn
ZqdeA98+u22gRfvvvkGH6whaMfiUNfr5pJostNIrkUjHmVi56IBzVuepMGQ8tgwe
iFdhxS2f4eg2/qFrwwOxzZn07ncQ/VXXMQph6NmgLTnOA8lXUf9y4Hp0qMMjD/QY
LuhmwOnCWVeBwmLoeNvMgrp6PV0n8x3B29aJyaK/R6PpbR8WGyYxXL4EWzzH5gI/
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:46 2025 by rpki-client