Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q0f0VW5DDLG9yD8N0lbOYKCvgPk.roa
File: q0f0VW5DDLG9yD8N0lbOYKCvgPk.roa (raw, json)
Hash identifier: 4yFtUaNweUtn69MnCrIutHX4fcgUAvPBf67D2YGKDUY=
Subject key identifier: AB:47:F4:55:6E:43:0C:B1:BD:C8:3F:0D:D2:56:CE:60:A0:AF:80:F9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198DFDAF160F1A1729A994ADB3DCF38895A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q0f0VW5DDLG9yD8N0lbOYKCvgPk.roa
Signing time: Mon 25 Aug 2025 06:12:04 +0000
ROA not before: Mon 25 Aug 2025 06:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 84.21.191.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:df:da:f1:60:f1:a1:72:9a:99:4a:db:3d:cf:38:89:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 25 06:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab47f4556e430cb1bdc83f0dd256ce60a0af80f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:af:bd:71:71:49:6a:f7:ae:1c:17:f1:87:
ff:ba:d3:bb:6f:cc:33:71:25:f8:d2:4a:43:48:c8:
65:24:69:b9:dc:f0:83:04:59:35:30:7b:35:98:07:
1c:dd:ae:47:fa:55:1a:79:85:d2:be:82:aa:17:95:
e4:15:a8:c1:03:a1:48:29:18:c4:5a:ba:52:04:37:
08:ee:c3:dc:d6:ec:59:b8:71:fc:2a:1c:c4:46:82:
14:6e:d9:2f:5b:52:ff:9b:c9:c4:9f:30:50:87:5c:
3e:f0:00:02:cf:68:4f:41:6f:7e:8d:0d:c4:60:a4:
cc:c8:cc:00:94:97:bb:21:d6:75:2a:1b:b0:c1:29:
0f:95:bc:01:78:de:4d:1f:10:20:11:65:d9:25:2a:
db:5a:42:a7:df:07:e2:ae:94:c2:bd:de:6c:6d:45:
24:fe:57:aa:f8:8b:c6:b8:73:91:ee:aa:8f:92:a9:
ec:b2:f5:95:b2:e0:7a:8c:86:d3:7d:c8:2e:c9:2d:
c5:d6:8f:e8:22:01:b1:4b:c3:99:0a:8e:fb:52:d1:
d4:f0:08:dd:14:ad:92:f3:06:27:f3:1d:3b:91:72:
1e:14:b6:c9:be:3a:96:f8:2e:d1:27:d2:eb:61:57:
01:0b:60:c9:7c:ed:f0:a2:fb:33:b2:04:8d:93:a6:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:47:F4:55:6E:43:0C:B1:BD:C8:3F:0D:D2:56:CE:60:A0:AF:80:F9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q0f0VW5DDLG9yD8N0lbOYKCvgPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.191.0/24
195.66.24.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9c:83:9a:87:28:81:6d:c8:a3:49:82:a5:e7:6d:54:07:f3:
1d:ff:c4:02:36:56:ec:ab:35:9f:c0:e2:48:12:21:41:52:5d:
a3:f3:57:22:6c:30:90:46:21:3b:64:67:a8:52:20:54:be:d2:
04:cc:83:09:78:32:fa:62:91:8b:f6:4e:19:64:9d:ee:a8:24:
a0:df:90:dd:21:ad:ce:a3:eb:0b:c1:8c:4f:e8:18:57:44:a1:
29:ba:d8:60:ec:2a:d8:2b:ad:c8:78:de:42:44:3d:24:fd:fe:
5c:10:1a:de:fb:46:c6:37:c8:05:73:73:7b:4b:06:3b:09:94:
73:5e:7c:e8:d2:e6:4d:f8:05:50:80:e8:d8:0c:0a:7a:d1:71:
33:cc:55:fd:98:e4:df:fa:b6:de:97:1b:b0:21:d2:9f:09:2d:
a1:e1:31:9b:9f:59:60:b7:a5:eb:db:76:ff:4c:e2:93:8b:ab:
ed:9b:9c:4c:9d:7b:ce:99:3d:ac:35:9b:86:b0:25:38:93:12:
b6:d1:0e:79:84:42:4b:a9:9b:9a:3a:d6:5d:d5:e4:07:a4:cd:
e6:18:53:cd:24:de:84:56:f6:89:18:c3:d1:16:b4:34:9a:47:
af:b8:d5:4c:3e:ab:d6:f0:b3:af:c7:0c:9c:3f:8a:2e:6b:d0:
06:c5:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:46:21 2025 by rpki-client