Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/KQ1OqizibHLYdbw6Y5T-Y4_azsc.roa
File: KQ1OqizibHLYdbw6Y5T-Y4_azsc.roa (raw, json)
Hash identifier: ca1aKmJeE4J5Lc8qjkJdK5ObrbwYFF3gNIrNQW9vCOA=
Subject key identifier: 29:0D:4E:AA:2C:E2:6C:72:D8:75:BC:3A:63:94:FE:63:8F:DA:CE:C7
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 019A0581064C4D08EAA483A9B244D346F30D
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/KQ1OqizibHLYdbw6Y5T-Y4_azsc.roa
Signing time: Tue 21 Oct 2025 06:42:13 +0000
ROA not before: Tue 21 Oct 2025 06:42:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206908
IP address blocks: 185.172.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:81:06:4c:4d:08:ea:a4:83:a9:b2:44:d3:46:f3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Oct 21 06:42:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=290d4eaa2ce26c72d875bc3a6394fe638fdacec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:d3:53:bd:ed:d7:25:41:8a:4f:ba:dd:57:
30:cd:f3:3f:7b:bd:c6:d6:55:e1:21:28:94:3e:56:
90:3f:3f:58:2e:d4:52:38:1f:d9:19:e8:d9:dc:ae:
cb:ca:68:12:4f:18:fb:d0:f0:4f:28:ca:80:f8:6a:
f0:92:da:0d:80:c8:8c:a9:d4:49:fc:c3:23:28:ed:
5b:80:ee:0b:e9:5a:1c:57:e4:2e:d2:a5:3b:ef:c1:
a6:e0:87:1a:d5:06:5c:a1:f0:93:5f:60:c8:1d:04:
8f:bc:12:fe:f6:9b:52:42:06:37:85:06:92:24:f2:
7f:4b:cf:cb:da:74:bc:2c:a4:4a:89:96:76:7e:90:
03:1e:56:ec:33:25:f6:24:d9:53:8b:9c:c6:69:d2:
de:d8:34:a3:24:c5:ec:86:0f:38:76:49:92:cb:36:
fb:ad:a7:34:ac:c1:51:d6:9d:79:56:03:bb:01:1e:
a3:14:4f:dc:c2:96:a3:31:ec:3f:65:fb:b3:19:d0:
9c:bb:2e:84:7c:70:ed:18:38:a5:cd:83:7b:ea:6e:
ed:33:a1:0d:4d:e9:d9:7e:c4:be:0b:fd:9f:36:5e:
09:e8:c1:36:9b:46:4d:9a:55:25:bf:85:eb:b9:2f:
41:e6:c9:97:d3:f1:d0:37:ff:e9:92:43:c5:30:47:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0D:4E:AA:2C:E2:6C:72:D8:75:BC:3A:63:94:FE:63:8F:DA:CE:C7
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/KQ1OqizibHLYdbw6Y5T-Y4_azsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:70:43:b6:46:b4:ee:a6:ae:7c:11:13:24:69:f4:00:d5:4b:
e7:6f:3e:36:5a:90:f5:c0:d9:fe:e8:53:e3:63:1a:63:c3:38:
55:ef:53:65:ba:b4:fc:3c:e0:52:94:8b:4d:d6:06:c5:e5:21:
6c:08:66:be:f4:3a:26:bd:7a:13:81:69:03:4b:17:27:d1:7b:
b9:04:97:57:25:31:20:b5:e8:1a:9e:2e:ca:a3:de:4d:ca:d2:
f7:04:e9:f6:5f:0a:9f:4c:f8:f4:e2:20:2d:c4:5c:a5:74:9b:
24:35:95:96:6f:e8:59:86:05:e7:83:1e:da:ff:de:32:9c:0d:
25:e6:30:ab:49:ea:0b:50:db:a0:23:59:c4:54:5d:ca:ba:03:
a5:8c:4c:f1:34:e9:33:dc:02:ac:43:48:6f:75:c9:48:02:15:
b6:b4:f8:27:01:c2:76:dd:ba:b5:e4:11:33:3f:28:5b:85:c3:
81:03:0d:68:35:9f:b8:59:3b:f3:25:a8:20:af:1d:a0:1d:cd:
a5:05:d0:3f:a1:37:7d:5f:21:65:d6:9b:f6:3e:0b:48:7d:70:
ef:e6:f7:b6:7b:86:e1:b4:f1:8f:69:7e:ee:d0:b9:52:77:02:
60:1c:ec:c9:85:77:0e:ae:bd:da:bd:22:4e:3e:7b:b2:1f:6a:
78:4f:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:49:31 2025 by rpki-client