Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/qk7BdUhpiKasaPPrd19hyTaffww.roa
File: qk7BdUhpiKasaPPrd19hyTaffww.roa (raw, json)
Hash identifier: 1zrREDYwmtAmMq6aRicYhq1C0MzmVtuoVBWW7cK0khs=
Subject key identifier: AA:4E:C1:75:48:69:88:A6:AC:68:F3:EB:77:5F:61:C9:36:9F:7F:0C
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0196EC0AC332CFA2698427EEB3E692289F9E
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/qk7BdUhpiKasaPPrd19hyTaffww.roa
Signing time: Tue 20 May 2025 04:54:10 +0000
ROA not before: Tue 20 May 2025 04:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208427
IP address blocks: 62.76.142.0/24 maxlen: 24
195.19.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:0a:c3:32:cf:a2:69:84:27:ee:b3:e6:92:28:9f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: May 20 04:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa4ec175486988a6ac68f3eb775f61c9369f7f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:19:b1:d7:ee:44:7f:ce:ec:e9:4e:f6:c8:
db:01:6f:06:89:f1:fc:ed:32:93:d8:1a:9a:3c:6f:
e4:d6:89:8f:bb:f0:84:9c:50:33:39:6b:4f:f1:f9:
a0:05:7d:29:be:22:fe:f0:1e:ac:68:f7:72:11:01:
74:b8:f0:ac:41:6e:60:0f:01:7d:0c:f9:77:e9:c0:
61:54:49:6b:e8:cc:4b:7e:dc:c6:72:33:84:94:87:
58:04:10:00:84:f1:d3:dc:b6:e1:f2:f5:34:78:36:
d1:66:d6:fc:0f:10:55:0c:c3:05:4f:6d:45:b8:73:
fa:fe:64:d4:e3:c9:39:14:27:6d:6c:2f:19:aa:11:
d8:1d:50:cf:48:d8:1e:a4:30:d2:f1:88:6a:a5:66:
05:99:5f:1c:e1:42:77:a6:18:6a:07:78:a6:ec:ef:
f5:ce:e5:fc:83:c9:e8:50:68:b3:22:e5:81:f5:a3:
66:fa:8b:4f:8e:90:61:96:45:5c:f0:6b:e8:8c:61:
0d:be:d7:6f:1a:aa:4c:a6:8b:e1:b3:a6:bd:cc:e2:
f1:cb:7e:d0:6e:cd:34:ff:95:1c:d9:30:af:38:d3:
b1:a7:d9:aa:c2:de:14:fb:6d:1e:4a:45:15:78:8b:
dd:b5:38:4d:3c:eb:6d:84:67:99:e1:a1:b2:6d:a7:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4E:C1:75:48:69:88:A6:AC:68:F3:EB:77:5F:61:C9:36:9F:7F:0C
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/qk7BdUhpiKasaPPrd19hyTaffww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.142.0/24
195.19.92.0/24
Signature Algorithm: sha256WithRSAEncryption
88:16:5e:b0:f7:a1:b8:87:97:ff:ae:d5:e9:f5:02:98:35:8c:
a2:a5:71:67:05:b2:a0:35:bc:83:0b:eb:41:9d:d9:3f:e2:b6:
96:0c:91:fe:1c:5d:d8:59:6b:27:5f:5f:ae:48:61:99:b0:a6:
06:f8:c3:90:a7:ce:52:6c:86:66:0e:5d:d2:3a:0d:8d:a4:cd:
43:05:fb:7d:0e:b8:97:4a:85:f9:ef:95:f3:62:fe:3c:6b:0e:
4a:68:b5:3b:42:c1:05:bd:79:41:ed:2c:1c:b5:fd:94:a6:93:
a7:f1:dd:95:b1:17:1e:6f:ad:ea:b8:e4:a2:69:9c:01:40:63:
be:5d:2c:31:c1:de:7f:cb:ea:7c:d9:c2:3f:cf:96:cf:1c:4a:
44:d5:cc:bb:17:f5:45:e0:de:ff:c6:02:c5:0a:23:d0:bc:4f:
77:36:e4:db:92:14:ea:a0:1e:bb:5b:a1:cd:ab:f8:13:b1:e8:
25:85:bc:91:1b:0d:37:a0:7e:da:4c:82:1c:e2:79:d1:78:12:
1d:0f:f1:59:9e:58:cc:8e:2c:8f:e1:77:b9:8e:da:62:50:18:
e9:31:57:45:7f:11:59:bc:90:56:5b:e5:12:a4:5e:78:e2:19:
7f:84:11:fc:4e:ed:8a:ad:f6:e6:93:f8:b1:f8:b7:03:21:c7:
56:bf:83:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:52:12 2025 by rpki-client