Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/qxGJPGhPdavkt3fDlmKOC0R6Ufk.roa
File: qxGJPGhPdavkt3fDlmKOC0R6Ufk.roa (raw, json)
Hash identifier: V4CR5QSqFwKQtj1zVlfNBmPaneN3PqkC+1ZuaxUJeBM=
Subject key identifier: AB:11:89:3C:68:4F:75:AB:E4:B7:77:C3:96:62:8E:0B:44:7A:51:F9
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019A13669C37BEC5AAB4EEBACFB1ACCE32B2
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/qxGJPGhPdavkt3fDlmKOC0R6Ufk.roa
Signing time: Thu 23 Oct 2025 23:28:03 +0000
ROA not before: Thu 23 Oct 2025 23:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209165
IP address blocks: 138.226.235.0/24 maxlen: 24
216.163.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:66:9c:37:be:c5:aa:b4:ee:ba:cf:b1:ac:ce:32:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Oct 23 23:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab11893c684f75abe4b777c396628e0b447a51f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:cc:48:d9:ea:01:4f:88:2e:d3:2b:18:c2:
bc:f6:4f:09:c0:f9:d4:df:57:74:34:94:4a:bf:fd:
f8:a5:18:eb:dc:d6:7d:27:4c:29:1a:73:43:cf:06:
26:b5:b1:8e:fd:02:35:db:31:e3:46:d8:00:67:96:
49:81:23:67:7e:86:ba:41:b3:0a:b8:76:96:9b:98:
a8:fc:d0:0a:b1:cd:c8:e4:b8:f6:99:c8:76:28:fd:
c3:b5:ac:73:df:0b:9f:03:bc:4d:67:27:9d:3a:25:
37:18:7b:c7:da:33:fe:c8:da:bb:3b:46:d3:2d:35:
2e:b7:63:3e:af:12:00:bf:9b:4b:ba:50:11:9e:f1:
16:f8:69:6f:1c:8d:c2:87:00:4a:91:5f:2f:2f:9a:
4a:92:bb:28:9d:8b:a5:37:13:7f:2f:b4:aa:da:42:
56:8b:92:5e:b2:d7:91:01:f5:5b:1e:c5:08:04:54:
97:b4:e8:86:25:9d:2e:0d:ca:e5:67:b6:12:e1:45:
12:40:4c:64:59:a4:61:34:7a:d3:d3:68:ce:be:31:
85:a8:7a:62:62:2a:da:47:e0:2b:0c:a1:96:56:e2:
79:f5:ea:2b:aa:04:5e:43:6d:21:87:0e:3e:dc:60:
03:b2:cc:f9:35:78:2d:2d:4e:7d:36:89:26:89:86:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:11:89:3C:68:4F:75:AB:E4:B7:77:C3:96:62:8E:0B:44:7A:51:F9
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/qxGJPGhPdavkt3fDlmKOC0R6Ufk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.235.0/24
216.163.176.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b2:fe:c1:4f:f7:04:49:78:b3:14:8c:ad:ef:9b:f6:d1:5e:
96:34:b0:0e:df:e7:9d:7a:d7:40:b9:cd:87:cf:95:41:ab:5d:
57:70:a0:21:40:c7:02:95:56:36:e8:ae:74:6b:b0:1e:fd:3c:
7c:32:27:3a:c7:b9:ba:8c:87:fb:8b:cc:8a:4a:7f:df:6e:6e:
dc:ce:c6:70:9d:a0:3a:0f:c3:67:9e:a8:71:67:68:0e:99:76:
16:e9:4a:81:1b:e0:21:35:09:1c:d4:1a:22:d4:96:01:55:5d:
c4:61:bd:20:cd:9b:43:81:70:6c:6d:d0:f8:c1:4f:da:69:70:
7d:11:67:06:6d:7c:9e:69:02:1f:a2:25:03:7d:b7:32:4a:5d:
d6:9e:df:24:92:e6:45:85:d4:15:5c:41:84:d1:2a:b4:cc:48:
2c:b7:27:36:67:60:2e:47:dd:33:7b:3a:9c:d4:f7:62:03:e0:
6c:e9:b4:ba:59:fc:ad:d7:58:8d:75:7b:00:88:c9:af:39:a2:
d0:96:d1:06:0a:fc:90:75:96:ad:ee:d3:0e:f0:73:dc:42:41:
9a:35:84:97:1e:d9:01:3a:d3:d5:52:ad:58:af:c2:9a:73:5e:
18:da:8f:30:a6:81:4a:71:4e:d4:5b:3b:9f:59:2b:83:cd:23:
f7:c6:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:29:57 2025 by rpki-client