Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/qQhJwJzvyO7AKVxT0Cih5AUrQns.roa
File: qQhJwJzvyO7AKVxT0Cih5AUrQns.roa (raw, json)
Hash identifier: BItfqfpG3F7hqQ1NJHEpQWVKKNNg5IgOl83auOyNXFk=
Subject key identifier: A9:08:49:C0:9C:EF:C8:EE:C0:29:5C:53:D0:28:A1:E4:05:2B:42:7B
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 019938A2298B8CDAF921AB06C813EE71EB4F
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/qQhJwJzvyO7AKVxT0Cih5AUrQns.roa
Signing time: Thu 11 Sep 2025 11:56:15 +0000
ROA not before: Thu 11 Sep 2025 11:56:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 194.165.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:a2:29:8b:8c:da:f9:21:ab:06:c8:13:ee:71:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Sep 11 11:56:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a90849c09cefc8eec0295c53d028a1e4052b427b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:62:a5:91:a5:4f:46:c0:cc:09:02:fe:f0:
18:cf:61:4c:f9:ff:7b:16:f0:84:a2:97:89:e6:0e:
ca:3a:06:a0:f5:a6:b8:eb:92:74:3b:58:45:9e:bd:
b1:59:f8:ec:58:1e:b6:42:24:c5:68:50:33:1c:4f:
2f:17:73:4d:8a:85:38:31:52:ea:50:84:5a:a0:e6:
35:15:6b:7f:0e:15:60:8d:9d:c2:b3:fe:f3:4d:4c:
31:1f:7b:0b:14:31:dd:a4:07:80:5f:f0:1c:da:6d:
3a:6c:d1:7f:5b:b6:82:81:20:fa:f0:9b:9c:62:da:
71:51:1a:0b:8d:d5:4e:fd:85:6a:ad:3c:4c:59:e8:
67:a8:02:52:10:0a:ca:51:3d:57:52:9d:d8:5b:e4:
42:90:71:65:4f:be:a8:84:a1:56:55:7c:e4:08:5a:
ca:52:64:a2:4a:a2:99:2d:20:48:17:84:32:89:15:
a4:de:a3:95:bb:a2:be:ac:ec:d2:16:8b:ac:a1:55:
ce:0d:9a:aa:72:c7:89:41:0b:bf:19:a9:e7:c7:02:
79:0e:4d:8b:b7:a8:d5:30:18:38:97:05:41:1b:3d:
1b:e1:7b:f1:2a:9c:74:bd:c5:08:b9:4b:93:91:ac:
3d:83:a1:f4:7b:b4:20:3d:8b:b2:eb:8f:dd:ab:25:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:08:49:C0:9C:EF:C8:EE:C0:29:5C:53:D0:28:A1:E4:05:2B:42:7B
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/qQhJwJzvyO7AKVxT0Cih5AUrQns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d0:23:a0:cc:db:21:4a:ab:9f:0f:f4:a8:5a:40:50:e1:82:
da:99:41:f0:a4:63:3e:dc:e2:d9:5a:3e:80:ae:3b:6f:75:0a:
0d:78:2b:af:76:5d:8a:2a:6b:b5:d4:d6:85:c4:76:37:87:de:
3b:8a:fc:98:2c:d3:cc:0f:22:89:63:fe:83:dc:a0:2c:bb:b6:
bd:4f:07:ac:2c:7a:3e:ea:92:b4:b6:69:e3:a3:1c:fb:1f:74:
42:5d:7e:4a:86:89:24:34:4b:1d:8e:56:20:a5:cc:e5:99:fd:
6e:86:9c:6a:7a:05:77:db:ea:1b:8f:5f:00:ed:c7:27:c2:16:
ef:74:64:15:ae:4a:c6:cf:cf:fe:88:d3:84:1e:7a:3f:e0:76:
75:bc:c3:a9:1b:26:20:87:ea:79:be:b7:3b:41:34:ec:5c:2d:
ac:c2:3f:dc:4b:71:dd:ed:3e:3e:8c:d9:37:24:2d:f6:0e:56:
70:b6:16:ae:66:89:d1:ba:bc:a4:9b:0d:93:25:a2:84:4a:f0:
5f:44:09:43:10:ff:cb:dd:08:87:83:f2:bb:42:e3:ae:ec:ed:
48:be:8e:b4:08:a2:2b:dc:00:7e:f8:41:e8:02:7b:f4:c0:e3:
fb:d8:20:fa:72:88:cf:78:64:33:a1:c4:9c:41:16:8a:b3:5d:
32:95:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:08:59 2025 by rpki-client