Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Qleo7dqnHliDwLr_5HeKD8u2FbY.roa
File: Qleo7dqnHliDwLr_5HeKD8u2FbY.roa (raw, json)
Hash identifier: Gv/QmDeusvnGHIXtPgB1iheNoO1gTfPrqOmIhbZJZoM=
Subject key identifier: 42:57:A8:ED:DA:A7:1E:58:83:C0:BA:FF:E4:77:8A:0F:CB:B6:15:B6
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019A5BE79FCAC3A2B845FDA9A8C47CE5468B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Qleo7dqnHliDwLr_5HeKD8u2FbY.roa
Signing time: Fri 07 Nov 2025 01:21:37 +0000
ROA not before: Fri 07 Nov 2025 01:21:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216043
IP address blocks: 2a12:bec4:13f0::/44 maxlen: 48
2a12:bec4:1c10::/44 maxlen: 48
2a12:bec4:1c10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5b:e7:9f:ca:c3:a2:b8:45:fd:a9:a8:c4:7c:e5:46:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 7 01:21:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4257a8eddaa71e5883c0baffe4778a0fcbb615b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:7b:13:46:8c:05:5b:e3:75:49:7a:a7:7e:
b9:ec:56:a9:bd:6f:84:21:3b:94:06:5e:1b:b6:de:
6a:14:d3:55:6b:99:22:a6:46:0c:44:fe:99:4e:34:
64:7c:ea:d7:aa:bd:91:1d:2b:7a:b1:50:4e:d1:c3:
7d:fe:6e:17:41:0f:a8:7f:e2:cb:5d:25:85:c8:64:
54:f0:04:90:48:04:b4:a5:19:d4:b1:d3:2f:de:31:
04:f5:09:c0:72:c1:67:fc:da:2b:18:9a:c6:1e:73:
3e:c2:93:e3:00:6b:74:a9:2b:21:d4:9a:a5:d3:66:
7f:8d:a0:50:07:75:d7:d2:8d:de:2e:89:9c:eb:de:
71:13:e0:16:0a:c0:56:5e:d9:67:16:bb:c2:bb:53:
ff:d6:f0:18:2f:9b:a7:6c:07:f1:f5:44:d4:71:16:
ee:1f:ad:1f:6c:ec:3b:91:18:ac:3b:b0:d7:b3:1a:
1c:4f:70:a3:39:c1:69:fe:90:cf:be:5a:9e:20:03:
3c:df:ba:c3:c4:d9:62:d5:5c:61:99:9c:f0:6f:57:
89:79:dc:94:57:8d:66:00:4a:05:63:1f:11:38:80:
9d:71:1f:59:f3:33:e8:65:03:25:b7:00:db:d1:83:
7e:36:08:bc:c5:2a:5e:63:fd:6d:2d:74:3a:41:ea:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:57:A8:ED:DA:A7:1E:58:83:C0:BA:FF:E4:77:8A:0F:CB:B6:15:B6
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Qleo7dqnHliDwLr_5HeKD8u2FbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:13f0::/44
2a12:bec4:1c10::/44
Signature Algorithm: sha256WithRSAEncryption
48:69:66:4b:8e:67:e9:70:00:0c:4f:64:e8:68:72:9d:04:79:
41:d1:8f:f2:4f:0f:27:e2:eb:19:cb:86:b8:f7:bb:55:0a:2a:
c2:8e:2d:00:66:dc:c1:2c:f0:d7:46:8c:ba:9b:af:e9:cd:30:
4f:5b:5b:ca:2f:5d:fb:ee:2f:da:52:11:9c:38:5e:bb:fa:a4:
a7:38:0c:bb:cf:57:92:ae:a6:2f:25:ec:e4:85:b2:0d:fc:b6:
32:bb:a1:7a:f6:38:2c:98:e5:ed:ed:38:a1:11:aa:29:1f:7c:
2d:c1:20:e0:05:11:d2:83:35:80:cb:90:87:d4:69:67:67:61:
b2:72:b8:dd:66:69:46:be:0c:b4:45:f9:82:ef:73:ad:7f:4d:
21:7f:c9:28:00:ba:79:50:20:03:6f:e0:f6:96:26:07:bf:97:
55:76:94:2e:c4:3d:d3:54:76:13:07:86:11:ca:8e:3f:39:72:
88:d0:cd:8a:ba:22:7a:09:79:95:bf:aa:32:57:d7:f5:aa:06:
fc:82:d4:ee:04:c4:0c:42:0f:7f:b5:0c:2f:4d:10:ef:d2:f6:
31:7b:95:87:22:99:af:18:0b:81:66:41:69:f4:0f:70:92:ad:
6c:68:01:88:6a:55:f1:2b:12:42:9e:d2:83:aa:a5:2d:b6:e0:
92:9b:09:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 10:12:26 2025 by rpki-client