Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/hqQDTg86IXDCJKqDxF4L3S5iCf8.roa
File: hqQDTg86IXDCJKqDxF4L3S5iCf8.roa (raw, json)
Hash identifier: H2Wy84IqHXcbFRYxZCEIcsyGOCDB08MT81RQd+tDuH4=
Subject key identifier: 86:A4:03:4E:0F:3A:21:70:C2:24:AA:83:C4:5E:0B:DD:2E:62:09:FF
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 0199158FB6AE60EF263715ED9ACBEAADB536
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/hqQDTg86IXDCJKqDxF4L3S5iCf8.roa
Signing time: Thu 04 Sep 2025 16:29:23 +0000
ROA not before: Thu 04 Sep 2025 16:29:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 149.126.64.0/22 maxlen: 24
185.251.52.0/22 maxlen: 24
2a0c:15c0:1::/48 maxlen: 64
2a0c:15c0:2::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:8f:b6:ae:60:ef:26:37:15:ed:9a:cb:ea:ad:b5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Sep 4 16:29:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86a4034e0f3a2170c224aa83c45e0bdd2e6209ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:be:d0:49:5b:e4:36:42:93:20:26:fe:4a:
36:a2:25:a8:fd:54:52:b8:54:cd:95:1a:ab:41:d5:
77:f0:53:96:b9:2b:05:5c:fd:d7:33:a6:8b:1e:79:
d7:07:95:8f:c0:20:16:c6:1e:5b:86:79:c4:7b:cc:
08:09:fa:75:03:79:ab:a6:0c:7c:6b:ef:6e:c4:a2:
83:f3:d2:3e:8e:eb:84:bc:d0:fd:cf:5f:98:15:67:
a8:70:6a:f2:0e:d5:f1:c3:3f:2d:95:05:35:ee:1c:
db:94:9f:e1:a8:40:20:6c:b9:c4:1e:ac:33:93:dd:
e5:8a:bb:5a:3e:b8:a6:ea:8f:df:7a:de:5e:97:33:
dd:73:4d:c5:86:7c:24:39:e3:89:1e:46:d8:13:f2:
d0:d9:dd:cc:56:2b:3b:ce:f9:67:88:70:a1:9e:77:
fc:96:d7:e9:72:f7:97:ce:f1:3a:11:96:c6:71:60:
6c:72:78:7e:a4:91:86:3d:a4:8a:f0:7c:3f:52:02:
70:26:23:a4:a6:d6:b1:cd:94:da:16:b9:88:1c:d1:
03:fd:b9:80:46:8e:39:6a:52:67:e2:11:ef:9b:30:
e7:e0:f0:2f:ca:1f:d8:1c:d4:76:f6:5e:f9:cd:f0:
c2:51:64:71:4c:19:cf:49:4a:79:f4:5e:f7:53:db:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A4:03:4E:0F:3A:21:70:C2:24:AA:83:C4:5E:0B:DD:2E:62:09:FF
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/hqQDTg86IXDCJKqDxF4L3S5iCf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.64.0/22
185.251.52.0/22
IPv6:
2a0c:15c0:1::-2a0c:15c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3d:f8:a8:12:8b:90:04:5a:f0:cb:21:21:1b:61:69:5e:17:31:
0a:e5:a9:d2:0c:4a:0c:1a:9b:d5:a6:d1:eb:a7:c2:73:c3:9c:
ab:b3:7d:72:63:89:fa:25:6c:24:cc:08:16:90:d7:8c:50:57:
93:f1:83:05:db:e4:63:ff:7a:78:1c:4f:70:e0:f4:dd:df:56:
bd:e7:2d:e7:da:ae:42:49:df:35:37:bb:38:db:a6:cc:7d:50:
e2:fe:b9:8a:d3:ab:af:e7:1f:cc:f7:81:12:98:d6:5b:b3:41:
48:df:44:ee:17:a1:f0:e1:4c:f2:2e:e2:ef:07:78:25:15:74:
dc:a9:a8:48:a1:8b:17:72:0a:40:11:b9:57:97:06:98:ba:8b:
4a:07:4a:dd:a5:4b:80:a1:b2:b8:15:d6:75:f8:8e:62:7c:60:
bb:7c:e8:81:b6:a6:61:02:9c:e4:ae:fa:b2:a4:45:fe:8f:cc:
75:22:d5:7e:cc:ba:66:d1:60:77:24:30:b6:e5:a8:1f:13:1e:
1d:3d:98:d6:a0:05:91:1e:5d:da:5a:03:1f:28:0f:6e:5c:ed:
5d:5e:fe:7b:93:fa:d7:a3:f4:5d:39:69:2f:9b:e8:f3:6f:b7:
53:51:df:79:b3:e8:df:1a:68:4b:4f:cd:1f:dc:f8:58:e1:e3:
93:d7:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:39:09 2025 by rpki-client