Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/qXbTND87m9kq_oOHnJNLc8fg148.roa
File: qXbTND87m9kq_oOHnJNLc8fg148.roa (raw, json)
Hash identifier: 2oi3EjBDp5VOcsS+jhxxC8jNjfjQeC4aw46ML+KCI9g=
Subject key identifier: A9:76:D3:34:3F:3B:9B:D9:2A:FE:83:87:9C:93:4B:73:C7:E0:D7:8F
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019A0D924DA9A6473E6F6B6AD21F39FE7258
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/qXbTND87m9kq_oOHnJNLc8fg148.roa
Signing time: Wed 22 Oct 2025 20:18:03 +0000
ROA not before: Wed 22 Oct 2025 20:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23422
IP address blocks: 193.56.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:92:4d:a9:a6:47:3e:6f:6b:6a:d2:1f:39:fe:72:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 22 20:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a976d3343f3b9bd92afe83879c934b73c7e0d78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:44:7f:1c:89:e2:45:c1:dd:67:c4:67:9d:
fe:66:bf:4f:7c:d3:f4:2d:97:06:88:6a:1e:7c:e3:
7a:bb:a1:8c:4d:8e:93:53:3f:15:25:70:5d:96:32:
cd:2d:28:f4:a0:2f:27:fa:6c:59:72:f6:a7:1f:86:
17:5b:b3:a0:41:48:a3:c5:83:b5:a4:19:70:64:dd:
da:ba:0b:a1:d8:93:a9:6b:98:8c:93:cc:e0:e0:e3:
b3:8a:8f:0c:7f:0a:16:3d:8b:0c:5b:e2:b9:2a:93:
0f:07:30:4c:53:ea:60:d0:62:a5:0f:07:59:b9:b3:
81:51:ab:5a:33:ae:39:33:9d:f7:6b:f8:ee:bf:3c:
a8:a5:da:12:cf:79:be:8f:3e:98:ba:c1:1f:c1:a9:
92:ef:34:fe:2f:13:5f:70:7e:4a:28:06:80:8e:33:
4b:a6:13:e6:41:02:7c:d6:fe:50:14:48:c1:08:6e:
54:59:c6:d2:54:6d:5e:de:8c:e5:c8:92:30:67:73:
03:21:ec:e3:13:b9:34:45:73:b3:ba:f7:9c:65:ef:
27:28:5f:2f:28:0d:46:b1:37:5b:36:f9:07:3c:b7:
d3:6c:f3:61:3b:d3:c3:6f:4a:16:f6:db:e2:96:7a:
b8:db:0e:bc:a0:44:0f:ac:75:15:97:6d:69:22:a6:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:D3:34:3F:3B:9B:D9:2A:FE:83:87:9C:93:4B:73:C7:E0:D7:8F
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/qXbTND87m9kq_oOHnJNLc8fg148.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e6:d3:ae:60:52:00:79:55:ae:fa:ab:41:64:dd:bf:f3:9b:
a4:6f:10:86:bc:7d:8e:cc:8f:e8:3c:7e:17:44:51:19:6a:aa:
19:0f:55:35:9a:de:e0:43:a1:71:fc:3e:08:c7:d2:d7:a1:80:
2a:c2:b3:9f:bb:b0:70:ff:86:ed:24:f9:a3:e2:88:05:d4:02:
33:cb:22:ac:fc:ce:a7:43:07:05:34:d4:02:d9:a9:f4:2d:cc:
01:78:a6:b1:31:f7:42:08:63:48:56:31:6a:42:aa:f8:e4:05:
74:1a:7e:3f:9f:f5:0d:81:83:a2:11:d9:7e:e8:4d:f9:a9:6d:
d4:f7:e1:f2:9a:10:24:a2:f6:af:3e:3b:40:0c:05:f3:72:03:
c7:2c:50:4c:f1:cc:09:8a:80:af:5c:66:ec:47:75:cf:0b:f8:
45:ab:0b:db:a9:77:24:f8:28:9a:43:3d:2d:83:5d:68:ab:a1:
11:69:b3:95:8a:6a:39:9c:87:ef:05:3c:be:90:71:6b:f8:c3:
df:12:20:b7:dc:8e:b7:ea:eb:f7:24:3c:f2:ba:ba:c9:c8:11:
ba:15:fd:e8:e6:c4:cc:91:65:f9:2f:24:bb:cf:ae:4c:12:e0:
b6:43:7b:ea:a7:11:36:14:e6:7b:66:4a:40:af:31:b9:c8:8e:
f0:c8:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:09:37 2025 by rpki-client