Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qf9hJdq-nedokko34ufyEcSEV44.roa
File: qf9hJdq-nedokko34ufyEcSEV44.roa (raw, json)
Hash identifier: mZpvMB68diFiLDtuYKERMUg5TGXyL22QKrjivW4AGlY=
Subject key identifier: A9:FF:61:25:DA:BE:9D:E7:68:92:4A:37:E2:E7:F2:11:C4:84:57:8E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019A91D3F26D019245EDBBA3C796B2C83E7F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qf9hJdq-nedokko34ufyEcSEV44.roa
Signing time: Mon 17 Nov 2025 12:39:37 +0000
ROA not before: Mon 17 Nov 2025 12:39:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
82.115.9.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
185.231.172.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:91:d3:f2:6d:01:92:45:ed:bb:a3:c7:96:b2:c8:3e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 17 12:39:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9ff6125dabe9de768924a37e2e7f211c484578e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:96:fe:b7:dc:d8:d1:67:42:22:fa:c3:a8:
14:5d:07:30:88:b1:34:7e:11:f1:1c:f5:a0:48:13:
f0:1c:be:72:f1:57:e4:13:e1:9f:87:70:da:f2:f9:
1e:6c:dc:51:34:4b:69:a2:49:4f:c2:f6:6e:76:5b:
5e:41:f4:ea:b8:8a:44:db:b8:15:07:a1:66:a1:2b:
22:d4:60:e2:15:23:57:f6:28:ea:f2:e9:ad:2c:26:
15:7b:58:1d:f1:c7:24:71:07:f4:bb:89:be:34:e5:
c0:66:a1:f1:02:be:a5:ba:df:ab:c4:96:86:22:b3:
0a:47:dc:17:10:0e:66:90:f1:e1:9b:5f:d9:bd:1f:
2e:bf:85:c2:34:a0:e4:ba:72:90:4a:ad:73:c6:28:
4a:cc:85:74:e7:01:43:ea:6b:55:e8:d8:13:5b:82:
4d:8d:9b:10:55:87:65:75:57:ad:14:43:db:3e:0f:
48:4e:67:55:d4:c5:45:3e:bd:b9:95:b2:c5:7f:38:
1a:2e:d3:e1:4b:43:4d:94:5c:0a:ae:ec:e7:92:fd:
4d:08:f8:26:c5:85:84:46:c0:b3:59:55:6a:f6:f4:
93:1e:ea:14:5c:6e:12:42:5e:5a:77:50:d2:93:08:
59:cc:d4:78:cc:4a:86:68:03:b9:f0:5a:46:89:5d:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:61:25:DA:BE:9D:E7:68:92:4A:37:E2:E7:F2:11:C4:84:57:8E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qf9hJdq-nedokko34ufyEcSEV44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
82.115.9.0/24
89.251.10.0/24
159.255.32.0/21
185.231.172.0/24
188.209.156.0/22
202.133.90.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:99:8c:f2:bb:69:52:01:98:03:37:f4:e8:9b:d3:dd:69:b2:
2c:86:1c:fd:08:1b:52:b2:8c:ec:b9:59:88:71:93:a1:f9:26:
3f:9d:7a:cf:46:11:f7:f1:24:a6:49:28:87:98:24:68:c6:4b:
99:4c:92:d7:fd:5f:43:d6:f0:1f:bf:c1:6f:ca:33:1c:60:1d:
cb:e4:f8:d4:81:05:9d:f6:ee:bf:cb:0a:9f:f3:a3:e7:25:cf:
2b:a1:91:0d:8e:9d:7c:9c:fa:73:26:a3:a8:bc:39:8a:9a:ea:
f8:ff:76:a7:e3:3a:2f:46:88:25:77:00:94:85:23:47:58:cb:
ae:01:59:74:0c:d2:0d:cb:09:b3:aa:38:22:cc:55:4c:a7:29:
e1:3e:39:0c:68:ef:31:0d:93:0e:d2:c3:92:5a:c4:22:96:bd:
b8:9b:f2:3d:f2:ea:de:fa:62:58:9b:17:af:81:ca:af:8e:f4:
95:b8:e6:51:4b:d1:c3:cc:c1:9d:6b:6f:30:53:e6:a5:9c:c1:
1e:c4:55:79:a5:95:0a:75:45:08:78:0c:56:b9:ab:58:00:2c:
f0:b4:23:f9:ea:92:4a:2d:8d:0b:3e:ee:4d:81:81:b4:ca:23:
6b:9c:98:d0:36:1e:56:33:54:ff:cf:b7:77:a1:e2:4d:21:18:
ed:68:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 06:24:10 2025 by rpki-client