Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/dQiPhvfLmWkjHMDaDZ-gEA5vKsA.roa
File: dQiPhvfLmWkjHMDaDZ-gEA5vKsA.roa (raw, json)
Hash identifier: Apxi4HVF9cbEKfl01+GMULsLDvfabVWHAPxCuePrSkA=
Subject key identifier: 75:08:8F:86:F7:CB:99:69:23:1C:C0:DA:0D:9F:A0:10:0E:6F:2A:C0
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 01992FF61C2F475A9D5C5865998EAD172D2C
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/dQiPhvfLmWkjHMDaDZ-gEA5vKsA.roa
Signing time: Tue 09 Sep 2025 19:31:22 +0000
ROA not before: Tue 09 Sep 2025 19:31:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11506
IP address blocks: 84.235.196.0/24 maxlen: 24
84.235.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:f6:1c:2f:47:5a:9d:5c:58:65:99:8e:ad:17:2d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Sep 9 19:31:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75088f86f7cb9969231cc0da0d9fa0100e6f2ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:03:e5:cf:40:af:0a:80:8e:e0:b9:1d:69:
e6:43:0d:63:7a:d1:d7:4b:81:06:d1:a2:ac:1d:e0:
37:70:ac:1b:0f:87:00:3d:01:38:19:ad:85:91:e0:
ed:6a:39:3a:7d:c8:7d:02:42:8f:ca:23:54:99:b1:
33:7a:5c:7d:e5:a0:8d:ad:24:5c:f6:a7:c1:d3:26:
aa:e2:c9:2e:af:f8:2a:37:2e:75:92:9e:c9:5c:33:
57:77:2a:ac:b9:ed:64:4a:ab:46:2c:ed:5f:b8:a2:
5f:22:ca:3b:33:f1:2a:b9:9c:f6:df:3e:91:75:92:
cb:15:50:ee:43:1a:cb:81:13:c2:f4:d6:80:f6:4e:
76:01:be:ae:3f:66:6f:e0:ba:41:ee:f6:93:d4:62:
0e:34:73:c2:31:b5:87:be:46:dd:1c:ef:c4:20:a1:
82:ea:3a:e9:27:c2:14:64:74:69:b5:16:0d:97:72:
35:a8:85:d9:9e:5b:7d:f6:f6:17:09:e8:f7:2e:77:
d5:4f:e1:00:b2:af:84:2c:9f:78:77:3d:d7:ce:c7:
c1:e0:76:3a:be:2d:90:c5:41:d9:b7:f4:a4:63:47:
85:40:13:33:39:50:ff:3a:1a:2e:c2:ac:43:47:43:
4e:34:e6:69:49:38:81:12:64:5f:d3:a5:a8:66:ff:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:08:8F:86:F7:CB:99:69:23:1C:C0:DA:0D:9F:A0:10:0E:6F:2A:C0
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/dQiPhvfLmWkjHMDaDZ-gEA5vKsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.235.196.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:e7:f4:ba:c2:d2:4e:b3:a7:65:4b:ba:5c:fd:0a:ff:22:a6:
ed:fa:6b:e8:41:fb:f1:7a:59:30:81:85:43:15:16:24:3f:65:
35:5e:62:a5:86:f6:97:59:b2:49:3a:ad:ba:db:a8:c8:f5:74:
72:55:3c:ab:9d:c1:8c:60:f8:67:be:ab:89:44:1d:33:a0:cf:
0d:12:e7:8c:42:ee:32:7e:09:9e:d9:25:5b:13:b1:69:b6:84:
d6:ca:d9:88:cd:41:5d:e3:33:f4:58:10:d2:fd:fb:69:a7:32:
5f:52:2f:15:ea:0d:9c:ae:91:1e:a1:67:16:b4:fd:9e:eb:29:
30:32:83:37:1d:6a:d9:51:98:e5:2c:78:5e:56:a5:6b:14:46:
b3:46:ce:86:ec:97:f8:e5:33:06:90:cf:65:59:e3:e0:ff:3f:
6f:8f:a3:cf:cd:a0:2e:0d:a4:fb:b0:4c:d2:c4:23:0e:93:eb:
e5:1e:d1:6a:48:c2:96:ca:0b:5f:53:02:a0:3c:20:09:6f:7c:
11:9e:4c:94:40:17:d7:ee:ea:03:49:d1:fd:14:3c:c3:d2:a0:
60:39:c9:4b:a5:96:19:f7:e5:47:37:7b:01:9d:3b:a2:e8:4c:
95:16:f9:48:9b:2f:65:7a:1f:16:ab:cd:68:54:78:4d:51:3a:
de:f7:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:26:12 2025 by rpki-client