Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q9hHtPERvwHzOjqP7qlV4_zPQ6A.roa
File: q9hHtPERvwHzOjqP7qlV4_zPQ6A.roa (raw, json)
Hash identifier: FcqzgeMmU8ttfm531T45W05mlZtIPuGLlsAbTdByc/s=
Subject key identifier: AB:D8:47:B4:F1:11:BF:01:F3:3A:3A:8F:EE:A9:55:E3:FC:CF:43:A0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196D3F59F0AA6F1DC7B9708D643EC85A94E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q9hHtPERvwHzOjqP7qlV4_zPQ6A.roa
Signing time: Thu 15 May 2025 12:40:11 +0000
ROA not before: Thu 15 May 2025 12:40:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213539
IP address blocks: 93.88.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:f5:9f:0a:a6:f1:dc:7b:97:08:d6:43:ec:85:a9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 15 12:40:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abd847b4f111bf01f33a3a8feea955e3fccf43a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:ab:88:b1:8f:64:7f:16:10:e3:48:8b:29:
dc:0d:43:51:c6:25:e3:09:65:33:52:f3:b8:2a:e9:
69:ae:f4:fa:34:ca:3e:cf:5a:ea:6d:17:9d:fe:29:
c7:9b:5e:82:0b:a9:5a:40:c9:58:d6:41:e0:54:e7:
3e:37:bc:c9:a1:48:b2:ad:1b:0b:0c:49:df:4b:77:
1f:ec:15:5d:ff:5c:f0:5c:05:05:05:0c:1e:a7:c7:
8e:7c:8f:89:55:53:5e:fd:67:60:cb:3e:8a:35:28:
e1:7a:72:9c:9c:e6:fc:7c:82:43:aa:94:00:86:99:
ce:9f:e6:ba:4c:a1:00:20:f3:e2:a5:0d:09:24:b2:
05:5f:ee:a0:ee:dc:64:fc:0f:44:3e:e0:20:91:4b:
f1:08:ef:68:c7:d3:f4:69:e0:19:dc:7a:3b:06:56:
c9:3f:43:13:02:99:d0:fa:46:91:52:f6:b6:44:8f:
61:14:42:4a:83:d6:ca:2f:40:b1:98:23:14:cb:3b:
23:d8:02:39:2b:0c:45:28:03:1f:9f:c0:47:5b:29:
58:72:cf:55:fb:51:c8:f1:47:b2:5a:fe:50:a8:e9:
dc:3e:22:d9:17:e4:f3:1d:12:f6:53:54:ed:a7:45:
0e:32:b6:66:2a:39:08:ff:ca:96:bb:75:20:c3:5e:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D8:47:B4:F1:11:BF:01:F3:3A:3A:8F:EE:A9:55:E3:FC:CF:43:A0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q9hHtPERvwHzOjqP7qlV4_zPQ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:3c:7a:7f:75:95:cb:06:80:a4:e9:25:43:89:48:62:07:fa:
ea:f4:ba:f9:bc:8a:bd:22:31:8d:c7:50:2b:e6:f1:d6:24:66:
72:ef:43:ae:ec:c6:4b:61:f3:75:c1:97:31:54:5f:4d:60:25:
b3:ce:c9:2b:ff:9f:bb:64:fe:d7:d3:25:ca:5a:50:8e:4b:d8:
30:22:67:8b:ed:40:ba:0d:d3:02:5f:d8:32:f3:bf:b9:d1:04:
1f:4b:94:71:e2:b5:5a:16:28:52:d6:27:42:1c:41:90:23:7e:
57:8c:39:c4:d6:25:21:33:4b:41:d9:5c:b8:5a:9c:a7:a3:e3:
57:5a:47:2a:b6:63:4d:51:98:a0:93:2d:c5:e3:2a:3d:55:27:
cd:64:7f:f6:dc:82:3e:be:99:87:18:c2:8e:27:2f:53:6f:3c:
3e:df:22:b1:fd:c4:b6:e9:5a:7e:e6:0b:f5:4b:0d:b1:f1:b1:
90:9f:f1:c4:34:6d:16:b3:b0:8e:29:db:d2:2f:70:b1:db:ae:
f1:43:65:b5:70:a8:bd:72:a3:ae:f2:aa:55:29:b4:ad:44:1a:
8b:aa:6c:02:0c:5f:a5:cb:3a:5c:af:a7:61:bb:cb:9e:56:bf:
65:b8:4a:b3:10:5f:a0:71:1b:0e:27:b8:d6:6d:b3:2c:33:f6:
8c:d5:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:18:20 2025 by rpki-client