Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qs_31FCch_7ewaaIlvJ4NGGNRZQ.roa
File: qs_31FCch_7ewaaIlvJ4NGGNRZQ.roa (raw, json)
Hash identifier: vadsBZT2Dv+P85rXkjYAnRvCNPBJZQnYC71k5HyX7wM=
Subject key identifier: AA:CF:F7:D4:50:9C:87:FE:DE:C1:A6:88:96:F2:78:34:61:8D:45:94
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01994D5E6642D46CFF93E51A4E1F87FD40BA
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qs_31FCch_7ewaaIlvJ4NGGNRZQ.roa
Signing time: Mon 15 Sep 2025 12:34:16 +0000
ROA not before: Mon 15 Sep 2025 12:34:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213200
IP address blocks: 2a13:c3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:5e:66:42:d4:6c:ff:93:e5:1a:4e:1f:87:fd:40:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 15 12:34:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aacff7d4509c87fedec1a68896f27834618d4594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:77:f7:57:0d:4f:ad:cf:a3:e5:c5:61:df:
a6:a6:e5:a2:01:00:5c:04:ed:08:f2:5a:2d:59:d8:
a2:dc:de:84:a8:41:03:96:07:3c:10:4d:0d:ea:37:
5d:11:65:27:65:fe:70:b7:a7:53:c4:c1:8f:90:49:
db:a4:74:de:a0:7e:72:ba:62:bc:78:54:78:ee:bc:
66:85:34:fa:33:c9:52:5c:88:ec:28:75:81:e3:a1:
e0:86:63:f8:69:dc:4d:75:55:83:9c:e4:ce:2f:05:
77:17:53:af:bf:4c:89:94:57:67:bf:8a:0a:cb:08:
f9:9f:92:64:bc:84:13:3b:f2:89:ac:8a:eb:62:bb:
eb:7a:58:eb:c7:02:5c:17:f6:15:3f:d2:0d:b5:48:
28:a5:dd:69:62:d3:d5:6e:3a:39:7a:4a:b5:85:35:
19:40:8f:8b:f7:19:fe:ba:c8:17:d7:f8:0d:fd:90:
99:df:fb:8f:3c:9b:ed:c8:d2:53:7e:d6:89:93:fa:
2e:ea:f1:4a:89:a1:7c:a4:ac:c7:46:ab:89:3d:97:
58:35:59:00:32:71:51:16:d1:42:d8:74:85:83:92:
f9:6f:3a:7a:3b:13:1e:c2:31:33:20:65:80:c0:91:
f7:50:37:a2:00:df:57:98:f7:a2:4b:01:bd:27:ad:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CF:F7:D4:50:9C:87:FE:DE:C1:A6:88:96:F2:78:34:61:8D:45:94
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qs_31FCch_7ewaaIlvJ4NGGNRZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c3c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:1e:6e:3c:f9:97:e9:c0:c8:5e:13:5b:91:05:ec:66:9c:4f:
77:58:e7:eb:23:bd:0b:c8:aa:bc:df:81:81:90:b8:1b:38:76:
9e:02:f9:92:80:9a:4a:c1:5d:e2:c5:e7:61:eb:0d:84:ff:cf:
7a:b3:c6:f5:57:10:83:7e:90:87:91:1f:a3:ff:cf:7d:55:d0:
b7:95:c3:21:34:d4:cc:47:95:04:fb:ea:56:7b:45:ba:60:71:
36:39:b4:26:90:4a:15:0e:db:06:ce:49:a5:90:40:94:c0:c1:
0c:87:76:e8:d5:48:4b:d2:97:19:ac:ce:a2:0b:19:88:a3:81:
15:7c:cc:21:43:f4:4c:9b:a2:24:19:11:c7:9c:2e:e1:f5:11:
e0:d1:58:8f:db:01:d8:e0:71:3d:30:45:5a:52:80:0e:da:6d:
a5:e1:72:d1:f6:62:d3:1d:61:41:f7:bd:de:64:bb:42:3b:49:
5c:ea:ad:b4:8d:0e:49:d1:60:1e:2a:8f:8e:63:46:1b:02:6d:
51:d2:92:be:be:58:6b:39:3d:61:a5:5e:80:89:7e:95:91:0e:
5c:fb:44:a8:7e:c8:fd:33:31:e9:c9:31:9a:8f:e9:a7:89:44:
76:e8:b6:ae:3c:d3:e9:d2:98:b8:35:d6:68:02:a6:f1:69:db:
fa:8d:88:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:41:17 2025 by rpki-client