Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/Q1XUBD_s1D_F0SITgp44J4I9gSg.roa
File: Q1XUBD_s1D_F0SITgp44J4I9gSg.roa (raw, json)
Hash identifier: w5981UwpX34Mt96TzsvSXFggOvVKomyq+xMftlqjtX8=
Subject key identifier: 43:55:D4:04:3F:EC:D4:3F:C5:D1:22:13:82:9E:38:27:82:3D:81:28
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 0196FD9704436C8005984F342CF0228E653A
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/Q1XUBD_s1D_F0SITgp44J4I9gSg.roa
Signing time: Fri 23 May 2025 14:40:54 +0000
ROA not before: Fri 23 May 2025 14:40:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203960
IP address blocks: 91.199.243.0/24 maxlen: 24
185.69.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:97:04:43:6c:80:05:98:4f:34:2c:f0:22:8e:65:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: May 23 14:40:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4355d4043fecd43fc5d12213829e3827823d8128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:b8:a6:80:18:a2:fa:81:3e:b4:2b:78:c2:
f3:34:9b:67:fc:23:11:15:16:c8:9d:e5:20:5a:18:
89:ae:6b:73:bb:b6:2d:14:bc:06:5a:b1:9b:2a:b7:
eb:cf:e5:56:30:03:5a:91:b3:ff:2b:50:a9:5f:bb:
b6:51:5a:47:ac:6c:c8:cd:d6:87:e6:79:7b:8d:8e:
09:8e:40:9d:a8:c2:59:f9:a5:19:08:50:67:8e:fc:
e7:eb:2a:4b:e8:03:f2:85:ab:71:07:c2:66:5d:47:
81:6d:d3:38:db:f7:92:b9:12:0d:5f:a3:99:af:c8:
10:df:30:66:17:af:95:e6:e9:3d:33:d2:51:bb:f7:
a5:96:90:db:20:d6:89:eb:3f:8a:4d:a7:34:54:00:
8c:b5:cd:23:8b:2b:2e:7b:21:7b:06:1a:a6:88:8d:
2d:4a:46:fc:4c:5e:50:ef:a9:8e:a5:ac:57:35:51:
d8:80:81:18:78:69:c3:a0:a2:db:87:46:ae:1b:9a:
b7:e2:76:e6:6e:85:41:d8:e9:03:95:99:23:47:dd:
e2:a4:ad:e9:73:c9:94:ca:8e:40:8d:7d:2d:ad:a2:
77:8a:ff:53:4f:ce:78:9b:18:10:70:44:5a:17:e7:
22:0b:cc:5f:22:5b:cc:96:39:4f:94:df:d5:52:7f:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:D4:04:3F:EC:D4:3F:C5:D1:22:13:82:9E:38:27:82:3D:81:28
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/Q1XUBD_s1D_F0SITgp44J4I9gSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.243.0/24
185.69.241.0/24
Signature Algorithm: sha256WithRSAEncryption
75:22:66:38:d8:8b:dd:b4:06:d5:86:1a:1a:9b:4e:16:4d:e9:
c9:db:02:4c:e0:58:6b:f7:22:1f:29:2b:24:85:0d:fb:b2:ce:
41:e4:c8:7e:96:d1:67:e4:a1:fc:ca:2b:c9:b2:4d:d1:60:58:
c9:58:0d:dd:d6:94:bf:5a:84:64:9d:fd:56:97:c0:f0:62:f1:
40:dc:2a:54:b7:a4:82:19:15:b2:c6:a1:77:9e:09:93:9f:8d:
94:ad:94:f2:96:08:c0:f7:61:5b:46:c3:96:0f:b0:9f:5e:a4:
05:fe:4b:a5:ad:52:31:7e:2a:e8:5a:90:a5:09:5e:b0:27:d8:
b1:18:18:5e:f2:13:cf:c6:56:74:6b:7a:a0:9b:64:78:b8:31:
a0:62:01:e6:cc:a3:0f:1c:21:77:18:25:31:c3:3a:eb:d9:26:
57:82:d9:f3:00:aa:15:93:bf:95:14:a4:0b:5e:0c:2d:c3:d9:
cc:af:35:95:52:83:f3:cf:dd:29:dd:22:a2:ca:9f:89:42:b4:
57:96:93:b1:85:1e:32:99:7c:8f:85:d4:d6:bc:92:fd:82:54:
9b:21:e6:e7:7a:0f:8b:84:9a:58:c1:8c:2d:f9:5d:c1:a6:55:
74:77:3d:ba:7a:00:e7:df:e3:90:73:09:2e:1c:d2:ca:01:c0:
d4:06:4d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:53:33 2025 by rpki-client