Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Qog0RnQG211tehfJzX3fFG3ChUw.roa
File: Qog0RnQG211tehfJzX3fFG3ChUw.roa (raw, json)
Hash identifier: aKtgOTNXBBGY4+t00dgg1slNb55J3ceZU/I9aDIPvtk=
Subject key identifier: 42:88:34:46:74:06:DB:5D:6D:7A:17:C9:CD:7D:DF:14:6D:C2:85:4C
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019903BF2E1F16CF2E0B477F8BD0F2F06FC4
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Qog0RnQG211tehfJzX3fFG3ChUw.roa
Signing time: Mon 01 Sep 2025 05:28:04 +0000
ROA not before: Mon 01 Sep 2025 05:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 80.66.72.0/24 maxlen: 24
87.251.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:03:bf:2e:1f:16:cf:2e:0b:47:7f:8b:d0:f2:f0:6f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Sep 1 05:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=428834467406db5d6d7a17c9cd7ddf146dc2854c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:8d:eb:b1:0e:15:85:26:9b:19:25:42:ca:
0b:ae:00:c4:d9:4e:c6:fe:1b:61:e9:a5:3f:45:90:
ed:d1:d9:06:0f:b4:67:6e:ca:51:d7:70:4b:20:88:
6c:93:dc:f9:9e:a1:d8:a3:9c:34:37:f4:06:0d:03:
fe:02:d6:34:10:a1:ae:da:64:1e:14:ba:8c:5c:f8:
71:44:61:30:e3:3b:dc:94:2a:4c:23:9a:80:35:0a:
34:09:cd:f5:1e:e1:19:ea:56:e7:cb:19:0e:2c:1b:
fe:62:11:51:bf:7e:ca:c5:98:72:d5:da:77:7d:bf:
4e:bc:89:01:ff:42:9b:44:b1:24:51:5c:6b:be:f0:
56:87:12:92:30:55:4a:0e:2e:b6:22:da:c2:9a:ff:
f5:b6:55:7a:53:85:33:42:88:1b:14:74:2c:ed:e4:
c8:9f:40:b7:d2:42:9f:2e:42:2b:a2:9f:5b:21:1c:
32:7c:24:5c:90:98:cd:38:48:70:78:06:72:e9:e6:
df:ae:b9:4b:a4:61:8e:19:de:64:95:bb:a8:f6:af:
3a:d1:34:d8:af:91:4e:5b:31:53:bb:ba:a4:2c:50:
d8:26:2a:2d:aa:b1:bf:de:18:aa:47:23:82:49:a6:
b2:d1:1c:a7:e0:71:bd:73:5c:1b:8b:31:47:d6:fd:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:88:34:46:74:06:DB:5D:6D:7A:17:C9:CD:7D:DF:14:6D:C2:85:4C
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Qog0RnQG211tehfJzX3fFG3ChUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.72.0/24
87.251.69.0/24
Signature Algorithm: sha256WithRSAEncryption
25:34:12:5d:da:66:18:2f:44:30:28:14:c3:fd:78:a6:c2:be:
b6:51:68:59:01:04:62:05:2b:ae:cc:1a:d1:d4:42:bb:52:df:
df:13:09:5a:a3:d6:9f:55:f4:59:bc:55:9b:d2:9a:68:ad:88:
6f:0f:85:d6:49:4d:98:db:7a:13:f3:a8:4c:eb:55:8f:64:16:
1a:01:8c:d9:f2:08:52:21:ad:85:8f:b0:3d:e8:a4:fd:2a:05:
e4:5e:b5:75:bc:29:16:b3:1f:34:ab:f1:0e:dc:ad:90:8e:04:
43:cb:12:9f:06:41:aa:ee:18:94:a0:56:f5:b4:c4:23:3e:b5:
45:f4:34:f2:aa:f5:05:36:2e:a9:44:53:ef:32:59:83:49:2d:
37:08:2d:00:64:18:45:b8:20:77:69:62:1e:75:01:74:e1:aa:
63:0b:b2:2c:02:be:94:15:34:67:43:5c:33:55:b2:15:a7:4f:
75:25:85:ec:c4:0a:cb:dc:72:12:8d:38:37:d4:72:6a:7d:c7:
36:50:a8:9b:b8:6c:85:17:a3:4b:6d:08:ae:62:3b:40:ae:df:
24:35:90:f3:74:e0:34:b6:f9:cc:db:60:7a:84:2e:af:c7:dc:
16:a7:30:fa:4c:96:77:bf:99:04:13:ca:28:f3:c0:85:eb:6c:
44:dc:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:18:24 2025 by rpki-client