Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/QUetVN6X86rvvQoO6G_tbqbRIGw.roa
File: QUetVN6X86rvvQoO6G_tbqbRIGw.roa (raw, json)
Hash identifier: RyB2mund6fN4oswJYJTqjpu2U30ovkwRYiiHktnKMJw=
Subject key identifier: 41:47:AD:54:DE:97:F3:AA:EF:BD:0A:0E:E8:6F:ED:6E:A6:D1:20:6C
Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial: 0198F5DBC03BEC2B789F142F00565E075007
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/QUetVN6X86rvvQoO6G_tbqbRIGw.roa
Signing time: Fri 29 Aug 2025 12:44:36 +0000
ROA not before: Fri 29 Aug 2025 12:44:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56559
IP address blocks: 147.78.96.0/22 maxlen: 24
167.150.160.0/22 maxlen: 24
185.149.188.0/22 maxlen: 24
2a10:b440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:db:c0:3b:ec:2b:78:9f:14:2f:00:56:5e:07:50:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
Validity
Not Before: Aug 29 12:44:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4147ad54de97f3aaefbd0a0ee86fed6ea6d1206c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:2e:9a:21:5b:a1:0f:d6:b8:8f:1c:65:ae:
c7:69:f4:da:92:35:c3:74:31:28:f2:6c:0e:1f:cc:
32:a2:38:c4:7c:7d:5e:18:21:63:ff:b9:03:98:fb:
69:e1:c2:a1:8a:9b:39:c3:c9:85:e5:1a:71:b3:f5:
42:de:3c:03:12:66:3e:f6:ce:cc:ae:d8:1e:d1:1c:
96:40:ba:b1:80:38:0d:94:c4:c0:80:5d:8e:4a:e9:
4a:1e:5a:6c:9d:e7:4f:24:96:19:61:74:b2:0e:8a:
6d:b0:d0:b1:fe:35:2c:73:42:e2:30:f5:02:a0:4b:
b1:6d:d5:fe:d9:e6:46:b4:1a:19:54:29:ee:99:fb:
47:11:7c:01:68:1e:b8:05:bb:91:94:0e:f5:8d:70:
5c:b1:e6:98:28:38:ed:9a:a4:84:78:dc:f6:db:39:
c4:18:f4:1a:77:12:fa:11:f2:96:bb:9b:4b:72:96:
74:43:0b:0e:84:3e:2e:5f:60:9c:7d:73:88:e2:ef:
ff:d0:7d:88:16:05:a4:58:24:47:0a:90:48:1f:c0:
63:1a:bf:9b:37:be:07:1d:67:c5:74:8e:f7:bd:f1:
90:0d:80:98:2a:30:72:84:a6:17:39:00:ed:f5:8d:
f3:e2:1a:a5:6e:6b:c8:e3:20:00:4c:79:0e:38:aa:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:47:AD:54:DE:97:F3:AA:EF:BD:0A:0E:E8:6F:ED:6E:A6:D1:20:6C
X509v3 Authority Key Identifier:
keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/QUetVN6X86rvvQoO6G_tbqbRIGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.96.0/22
167.150.160.0/22
185.149.188.0/22
IPv6:
2a10:b440::/29
Signature Algorithm: sha256WithRSAEncryption
09:11:2c:8f:8b:ee:d0:f0:6d:35:e0:2e:63:86:af:c9:cc:bf:
a2:2a:d6:20:f0:7f:63:87:b2:93:3f:06:42:fd:1e:2f:78:5d:
4d:70:af:04:f8:1f:6e:ab:7d:83:47:fd:d6:ef:c8:81:f2:97:
b9:31:50:85:75:87:a9:af:16:d0:99:50:14:5d:5b:51:bb:13:
51:56:33:2b:b5:77:5e:4e:e8:10:b1:6b:d8:82:c9:b2:41:5b:
05:a7:68:f9:04:23:c5:a5:36:57:53:5f:c0:cb:18:aa:ee:03:
3f:d6:76:ce:11:e8:f2:5f:81:4c:3d:45:7c:1e:90:be:b3:e0:
03:a2:de:77:97:41:f9:20:67:6c:2f:c2:19:0f:db:df:8d:e8:
65:6d:8e:bd:6a:b0:63:03:ff:ba:16:e0:cc:61:50:d8:10:42:
c3:e8:52:43:3c:fd:0b:2c:a3:54:ff:ec:0e:ad:22:11:b5:95:
1b:73:15:97:bf:60:f7:0c:5b:7a:9e:dc:91:54:44:0b:00:62:
c2:5f:4b:1a:e0:3a:8c:ca:29:7c:e3:12:48:05:29:4d:4f:5b:
d8:76:e0:b1:4b:2f:80:75:7f:30:82:e6:3d:ab:d2:72:a2:f8:
96:93:24:a3:37:e6:2a:d9:30:95:53:d6:fb:ea:6a:f8:6f:3b:
7d:81:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:38:53 2025 by rpki-client