Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qnL93_BEE_Q6FG8c3TiPR0vDroE.roa
File: qnL93_BEE_Q6FG8c3TiPR0vDroE.roa (raw, json)
Hash identifier: 79gy+v8ayAvjqai82FxS96QNXEZJLLIxMaVOdq1LQv0=
Subject key identifier: AA:72:FD:DF:F0:44:13:F4:3A:14:6F:1C:DD:38:8F:47:4B:C3:AE:81
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0198D95506995716F39E21CB329E1011A4D5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qnL93_BEE_Q6FG8c3TiPR0vDroE.roa
Signing time: Sat 23 Aug 2025 23:48:04 +0000
ROA not before: Sat 23 Aug 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213229
IP address blocks: 64.188.88.0/24 maxlen: 24
193.23.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:55:06:99:57:16:f3:9e:21:cb:32:9e:10:11:a4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 23 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa72fddff04413f43a146f1cdd388f474bc3ae81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:90:ee:a6:fb:79:b3:f8:54:d5:36:19:04:
1c:16:38:f9:fe:86:a8:61:35:12:16:32:43:f0:c2:
ab:fb:ca:59:22:fb:9a:7a:0f:73:08:d5:96:d8:40:
ee:bc:37:31:ef:17:11:a2:c8:ef:08:6d:f1:65:fb:
df:c2:ea:35:68:c0:f4:97:9d:47:4a:63:4c:34:ec:
47:73:b2:e3:b9:99:e5:71:cb:d1:3e:ca:ce:29:89:
76:25:37:62:74:6c:39:df:04:7b:c2:04:b3:1c:46:
2c:cc:c7:54:63:42:25:d1:f7:98:bc:fd:44:07:2c:
a4:c8:40:08:43:4a:66:9f:7b:20:fa:80:91:ba:6e:
61:5e:ff:d0:3d:63:87:f4:47:c8:e1:9a:48:a6:68:
b6:5f:a7:0e:37:dd:b8:92:49:be:70:73:11:1e:14:
52:12:20:31:71:59:cb:4b:44:f7:42:97:a0:15:e3:
8a:b6:25:49:5a:d2:12:5e:15:53:92:be:59:87:80:
33:e7:dc:85:4a:1d:2f:c2:26:59:24:fe:80:9f:b1:
a2:d5:ad:23:33:96:2a:b7:e1:5a:2c:db:69:df:16:
31:ff:c5:d5:b2:bc:9d:29:c8:5b:9e:40:aa:0f:d4:
30:e3:3a:93:7e:14:03:c2:76:bf:e7:2f:ec:4d:27:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:FD:DF:F0:44:13:F4:3A:14:6F:1C:DD:38:8F:47:4B:C3:AE:81
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/qnL93_BEE_Q6FG8c3TiPR0vDroE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.88.0/24
193.23.208.0/24
Signature Algorithm: sha256WithRSAEncryption
87:51:42:ad:ef:75:10:a5:9d:b6:04:10:52:ea:e6:42:bb:d0:
ef:ac:a3:52:0c:1e:81:25:68:e3:2a:fe:b5:a9:0d:21:a1:99:
59:55:fa:c7:50:a4:dc:6b:f1:df:4d:75:1b:e4:52:46:5e:f4:
b3:cd:e4:cd:5d:e3:25:15:3b:5b:19:95:c8:64:3e:00:8d:ff:
a9:55:08:e2:66:2c:cc:a5:f9:7c:7d:95:42:88:a9:2c:57:0a:
6d:6a:09:65:ac:28:39:96:ec:34:1c:60:40:4d:84:31:91:38:
08:65:0e:e2:e0:6f:00:96:8b:41:3f:d3:33:b6:d9:25:f3:b8:
2a:5c:37:64:5c:41:0c:7a:ef:44:77:aa:7d:d3:31:33:6d:00:
46:52:44:80:fd:70:3b:78:d2:17:c4:5d:e6:af:b9:14:cf:58:
ef:97:53:bf:0d:68:e9:5f:3e:77:01:56:ad:b3:b5:dc:10:c7:
c9:38:a0:c3:23:b9:49:7d:5c:cb:71:d3:7c:19:01:9e:43:51:
f5:7e:5d:41:a6:e4:53:d5:ff:c5:b0:ac:af:56:b3:f1:e5:67:
c0:e7:2b:08:20:30:ca:b0:ce:e1:9c:72:ff:5c:40:a4:5b:3a:
f4:54:12:a3:53:0d:fb:d9:b8:fb:7e:67:bf:14:55:e2:60:a0:
5f:80:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 21:54:53 2025 by rpki-client