Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/qhYOLJulmsuLGiAhGvFj3BU-b2o.roa
File: qhYOLJulmsuLGiAhGvFj3BU-b2o.roa (raw, json)
Hash identifier: WLizTvNJBs6DAjj2mHkIr559bhbIdrPpLIVJbQ3ZYb8=
Subject key identifier: AA:16:0E:2C:9B:A5:9A:CB:8B:1A:20:21:1A:F1:63:DC:15:3E:6F:6A
Certificate issuer: /CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Certificate serial: 0196F775CD467BC478A8DE43ECAA83004930
Authority key identifier: DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/qhYOLJulmsuLGiAhGvFj3BU-b2o.roa
Signing time: Thu 22 May 2025 10:06:54 +0000
ROA not before: Thu 22 May 2025 10:06:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42151
IP address blocks: 195.242.142.0/24 maxlen: 24
195.242.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:75:cd:46:7b:c4:78:a8:de:43:ec:aa:83:00:49:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Validity
Not Before: May 22 10:06:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa160e2c9ba59acb8b1a20211af163dc153e6f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:bf:0d:b0:2b:e6:11:92:b2:8c:24:b5:3d:
70:f8:2b:b5:14:2a:dc:31:71:65:29:0b:ca:9f:1c:
cc:2a:ed:5e:3a:11:88:d5:52:a9:b5:31:ba:cd:37:
b0:8c:45:f8:77:ee:c5:25:31:fa:65:5f:56:15:57:
54:41:ba:aa:8b:52:68:2b:56:7b:fc:d8:3a:b7:cb:
40:04:a2:c1:c9:a3:4a:28:ec:54:dc:bd:9a:df:d5:
89:1b:40:c1:cd:6f:c3:d3:bb:b7:19:2d:86:c2:f6:
1e:ed:23:1f:37:59:a8:e4:e5:3b:bd:21:1d:eb:72:
21:8a:34:8c:28:12:f8:f5:4a:9b:a7:f8:96:ba:a3:
ab:97:69:f1:40:62:ec:23:ce:9b:79:44:af:c8:ec:
bd:d5:65:08:e8:fb:a8:30:c7:4f:ac:85:4a:d9:dd:
df:d5:ea:d5:bb:59:8e:0f:08:23:7f:9b:07:06:9f:
66:12:9e:fd:86:09:7e:28:e5:ee:ef:89:1f:fe:0a:
d7:33:17:4e:84:db:ab:b0:1e:54:25:49:d7:72:ad:
e4:02:39:ac:14:60:6c:52:33:39:46:cc:0f:66:e6:
9d:91:b0:28:d0:6a:4d:bc:94:bd:67:8f:80:18:85:
39:95:2c:0d:43:f5:8c:ce:59:a9:cf:af:7b:ac:4e:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:16:0E:2C:9B:A5:9A:CB:8B:1A:20:21:1A:F1:63:DC:15:3E:6F:6A
X509v3 Authority Key Identifier:
keyid:DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/qhYOLJulmsuLGiAhGvFj3BU-b2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.142.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:83:8e:b4:cf:3d:67:78:97:1d:32:0c:af:0d:3b:70:03:7f:
38:89:0c:eb:9c:f8:e7:01:0d:05:26:56:52:df:74:a3:c0:2a:
db:32:cb:cf:84:a5:63:ac:07:4c:cb:2d:4d:9f:7c:ac:80:6f:
34:04:1a:d2:70:3c:8d:03:f1:8a:b9:62:55:6d:18:1d:ef:d3:
06:a0:4b:41:e7:dc:89:4b:70:47:49:fe:cd:66:5a:66:a3:06:
34:e5:35:cd:74:aa:3e:7e:ff:46:b4:b5:b3:bf:c2:60:e7:79:
5b:b3:33:81:01:9c:7d:2a:1c:f9:4f:1a:54:45:57:39:9a:24:
e2:f2:d5:22:d9:72:5a:11:e0:f4:a2:62:ae:5e:d7:a4:ab:c5:
5f:32:e8:0d:17:1e:ff:6d:26:3d:af:72:ad:26:17:b3:6e:49:
e0:76:8d:cc:83:be:45:41:b0:b8:4e:28:41:3e:47:c8:ce:30:
d4:ee:51:bb:d7:1f:2b:65:29:f7:77:f9:f0:67:6c:34:39:f3:
d0:1f:02:b9:f0:fd:7b:7f:6f:7c:38:27:58:6b:96:e7:ef:fb:
63:37:a5:c1:aa:aa:01:b4:3a:92:69:7f:63:31:cb:d4:70:cc:
d8:6e:69:5c:22:77:4f:03:65:ca:4e:ae:fc:49:73:74:f6:9e:
1c:99:01:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZb3dc1Ge8R4qN5D7KqDAEkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZWU2ZGY5NzI4Y2Q4YWYwZjM0YTAzZWQ2ZWEzMTUxYzNi
YzIyYzgwHhcNMjUwNTIyMTAwNjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTE2MGUyYzliYTU5YWNiOGIxYTIwMjExYWYxNjNkYzE1M2U2ZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kK/DbAr5hGSsowktT1w+Cu1FCrc
MXFlKQvKnxzMKu1eOhGI1VKptTG6zTewjEX4d+7FJTH6ZV9WFVdUQbqqi1JoK1Z7
/Ng6t8tABKLByaNKKOxU3L2a39WJG0DBzW/D07u3GS2GwvYe7SMfN1mo5OU7vSEd
63IhijSMKBL49Uqbp/iWuqOrl2nxQGLsI86beUSvyOy91WUI6PuoMMdPrIVK2d3f
1erVu1mODwgjf5sHBp9mEp79hgl+KOXu74kf/grXMxdOhNursB5UJUnXcq3kAjms
FGBsUjM5RswPZuadkbAo0GpNvJS9Z4+AGIU5lSwNQ/WMzlmpz697rE6y3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKoWDiybpZrLixogIRrxY9wVPm9qMB8GA1UdIwQY
MBaAFNrubflyjNivDzSgPtbqMVHDvCLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82OWQ4ZWEtYjA4Yi00ZTdlLWFmY2Ut
NGQyMGUzNGQwOTkyLzEvcWhZT0xKdWxtc3VMR2lBaEd2RmozQlUtYjJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82OWQ4ZWEtYjA4Yi00ZTdlLWFmY2UtNGQyMGUzNGQwOTky
LzEvMnU1dC1YS00ySzhQTktBLTF1b3hVY084SXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/KOMA0G
CSqGSIb3DQEBCwUAA4IBAQB/g460zz1neJcdMgyvDTtwA384iQzrnPjnAQ0FJlZS
33SjwCrbMsvPhKVjrAdMyy1Nn3ysgG80BBrScDyNA/GKuWJVbRgd79MGoEtB59yJ
S3BHSf7NZlpmowY05TXNdKo+fv9GtLWzv8Jg53lbszOBAZx9Khz5TxpURVc5miTi
8tUi2XJaEeD0omKuXtekq8VfMugNFx7/bSY9r3KtJhezbkngdo3Mg75FQbC4TihB
PkfIzjDU7lG71x8rZSn3d/nwZ2w0OfPQHwK58P17f298OCdYa5bn7/tjN6XBqqoB
tDqSaX9jMcvUcMzYbmlcIndPA2XKTq78SXN09p4cmQFu
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:14 2025 by rpki-client