Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/q6_j7ZJumtWy4CDdqEMJZHxEteQ.roa
File: q6_j7ZJumtWy4CDdqEMJZHxEteQ.roa (raw, json)
Hash identifier: 5KGuyKJFaspfluOwOBDClndwqaUf6P40Y1cAOywOboE=
Subject key identifier: AB:AF:E3:ED:92:6E:9A:D5:B2:E0:20:DD:A8:43:09:64:7C:44:B5:E4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0198AE7C17D789A7F4F856D27E92324BC268
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/q6_j7ZJumtWy4CDdqEMJZHxEteQ.roa
Signing time: Fri 15 Aug 2025 16:07:04 +0000
ROA not before: Fri 15 Aug 2025 16:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6807
IP address blocks: 195.178.155.0/24 maxlen: 24
2a01:5c40:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ae:7c:17:d7:89:a7:f4:f8:56:d2:7e:92:32:4b:c2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 15 16:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abafe3ed926e9ad5b2e020dda84309647c44b5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:9c:2f:45:69:44:8b:54:50:58:95:e1:13:
f8:da:7a:5e:e1:d3:01:97:49:35:a0:1d:4a:b8:e2:
2e:9c:cf:a4:00:65:07:bc:b6:18:33:1d:49:47:97:
d9:23:68:0f:43:9c:da:aa:48:68:97:fa:0c:d8:ca:
7f:e5:3c:02:90:58:f7:bb:83:4e:32:63:ca:35:d7:
0a:c1:f1:0d:1f:2b:db:30:59:d6:48:c8:45:bc:e1:
15:d2:a8:64:b3:99:01:d7:29:f5:e3:52:dc:57:7e:
2b:0e:f9:c7:13:e5:0f:2d:bb:5b:66:58:2e:2c:00:
8f:34:7b:77:0e:af:13:80:85:86:f2:c3:5a:48:e5:
d1:91:a0:89:c5:1f:b0:72:3a:16:a6:a2:a8:86:bd:
16:da:df:5f:7a:0b:b9:36:7f:c1:1e:27:95:25:6e:
e4:22:10:17:6f:49:0e:4c:27:5b:e3:b2:83:30:c9:
a8:00:f0:f1:72:a3:52:79:d1:d6:1d:2b:c1:a3:34:
3a:8d:da:eb:23:26:b3:b2:b8:81:4a:bf:30:c1:35:
c1:9d:08:46:77:7a:d1:e2:cc:f7:3f:23:b1:ca:4f:
4b:38:25:04:34:66:de:6b:73:cd:46:03:a3:e5:19:
b0:a0:6d:d4:08:1e:1e:2c:b2:43:df:ae:83:40:88:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AF:E3:ED:92:6E:9A:D5:B2:E0:20:DD:A8:43:09:64:7C:44:B5:E4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/q6_j7ZJumtWy4CDdqEMJZHxEteQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.155.0/24
IPv6:
2a01:5c40:3::/48
Signature Algorithm: sha256WithRSAEncryption
52:61:23:1c:0b:5f:e7:83:af:8b:14:ac:41:67:b2:ec:f0:59:
a7:18:a3:67:51:82:0a:d7:4d:38:28:aa:c9:59:4a:1f:99:d9:
70:14:6e:7f:d4:14:71:ec:c0:ab:14:47:2b:02:a8:0b:1b:b3:
89:82:a2:35:72:ff:ff:43:11:b5:dd:0d:a3:14:cc:c8:d3:d8:
10:6b:cf:43:b6:5e:b9:f5:d2:cd:a5:24:9b:6f:56:3e:5b:7b:
52:57:c0:29:fb:be:d0:42:c1:c1:cd:61:a1:e5:a2:6b:42:9f:
ee:bf:89:e0:4b:f1:e6:ff:43:79:61:3f:f9:88:43:d0:8d:02:
fa:a7:99:62:fa:89:db:88:48:bc:b9:1e:bd:93:c9:2d:1b:b4:
b3:2c:e5:ea:11:ef:88:d4:31:bb:95:4c:91:3f:7c:81:b6:a0:
3b:ce:9e:97:df:5f:f7:32:22:cd:58:74:dd:58:0e:28:78:72:
8f:4d:f6:33:84:b8:ae:9d:8d:84:83:34:19:e1:45:14:9f:73:
68:8c:80:49:9c:fc:11:a2:0d:f2:15:9e:63:a3:08:91:50:27:
3a:74:b2:ff:46:2e:90:05:32:d4:d6:ae:1b:5c:95:da:6c:78:
5c:d2:06:c7:14:fa:55:fa:a8:95:73:fb:7e:6d:20:1f:b5:ad:
e5:79:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:11:36 2025 by rpki-client