Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qN3JSVxKcGkDSInPDINPpdAAz2E.roa
File: qN3JSVxKcGkDSInPDINPpdAAz2E.roa (raw, json)
Hash identifier: x3QyKh7JRNOMWiie0IJ4YKU2OZeXy1JR1b0Vtba/S18=
Subject key identifier: A8:DD:C9:49:5C:4A:70:69:03:48:89:CF:0C:83:4F:A5:D0:00:CF:61
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019881000868AD1CC4E0F8F9313A10D3E384
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qN3JSVxKcGkDSInPDINPpdAAz2E.roa
Signing time: Wed 06 Aug 2025 20:08:39 +0000
ROA not before: Wed 06 Aug 2025 20:08:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 79.172.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:00:08:68:ad:1c:c4:e0:f8:f9:31:3a:10:d3:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 6 20:08:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8ddc9495c4a7069034889cf0c834fa5d000cf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:d1:4e:0d:cd:18:83:61:1f:27:0c:71:2d:
e0:23:4a:f1:4f:66:50:b1:73:15:75:dd:e3:e7:c4:
f4:47:df:47:97:83:33:a5:e7:c7:30:f9:44:0f:7c:
3c:f2:9f:df:ef:a3:28:76:c9:47:ca:d2:de:7d:58:
0c:b3:b3:22:00:dc:55:08:31:e5:92:f4:5a:86:7f:
02:5c:a5:8a:36:ac:28:33:5f:0b:aa:e2:f0:4f:24:
23:4b:1e:ac:4d:3b:0d:f1:e6:c8:79:39:9a:08:ad:
41:d9:e3:4a:22:36:1b:32:1c:01:8a:48:72:8a:f7:
14:6b:e4:23:ba:3b:93:80:ec:19:94:19:02:c3:4d:
64:10:89:ae:41:98:a7:90:7a:29:0a:23:b7:4d:ea:
08:74:3e:e9:b3:ea:fc:2e:61:63:49:a5:a0:2a:25:
6b:d1:10:8e:b7:f1:80:f0:ce:c8:2a:c1:7d:0b:f2:
0d:90:7f:c1:bb:1c:78:1f:60:68:eb:c7:fe:be:6c:
04:97:cf:81:71:c4:2b:c8:65:d6:99:b1:c9:4f:0f:
e1:94:39:1c:fb:7b:28:1f:95:63:4f:c5:b8:e0:64:
2c:31:93:35:aa:d9:7b:4c:16:af:28:0e:3a:98:f4:
33:3f:b1:58:69:7b:a7:a7:ce:df:dc:46:a9:4a:1c:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:C9:49:5C:4A:70:69:03:48:89:CF:0C:83:4F:A5:D0:00:CF:61
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qN3JSVxKcGkDSInPDINPpdAAz2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.219.0/24
Signature Algorithm: sha256WithRSAEncryption
11:94:d0:b4:c2:fa:cc:27:6d:ed:81:91:09:e9:af:8b:de:0f:
79:98:db:c9:ee:7e:83:42:1a:2c:ea:24:cc:7d:23:e8:dc:f3:
0f:62:c4:08:c7:52:33:84:4b:6f:54:4b:33:65:70:af:0c:5f:
de:17:ae:09:70:da:4b:f1:09:24:de:19:bb:7a:96:29:6c:52:
53:93:c0:8c:50:ef:30:61:55:9b:e1:3c:36:02:e3:43:ba:86:
62:55:b1:a6:71:9d:b3:85:7d:30:42:6d:7d:6b:91:80:d4:38:
87:f6:d2:58:6d:3a:50:c4:a3:da:02:e5:73:72:18:c3:46:3c:
1f:70:a1:1f:32:2f:0b:5a:da:e7:a3:69:92:a6:3c:58:9b:99:
42:7e:3f:6f:4a:5e:11:d4:f5:86:08:57:e7:e6:32:c8:00:a3:
79:21:ae:cc:57:8c:4a:89:b4:ee:83:2b:51:bf:4c:18:a4:36:
0a:84:b8:d3:81:71:9d:cb:e3:80:b2:1b:28:96:32:10:72:2f:
9f:97:fd:d5:35:1d:f1:db:49:cc:54:a1:d9:28:c5:58:93:1a:
fe:ec:b9:0d:cd:62:4c:d3:34:0c:e9:74:2d:b8:8f:20:c8:5b:
d4:29:bc:9b:be:4c:9c:72:02:35:12:01:81:16:35:c5:23:09:
37:7b:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:40:41 2025 by rpki-client