Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa
File: Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa (raw, json)
Hash identifier: rj+IOmmZrJFH/pGr6IiDQ9M39qURzS3Ek11UjeILldM=
Subject key identifier: 42:3C:B1:F9:57:DE:60:9C:E1:43:AE:0E:3B:71:9E:7B:16:C3:8E:9A
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197F43D537BC583CFC0CD0E91DA7028D31B
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa
Signing time: Thu 10 Jul 2025 12:09:09 +0000
ROA not before: Thu 10 Jul 2025 12:09:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29632
IP address blocks: 95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:3d:53:7b:c5:83:cf:c0:cd:0e:91:da:70:28:d3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 10 12:09:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=423cb1f957de609ce143ae0e3b719e7b16c38e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:43:a8:32:85:00:54:10:10:d7:d0:de:36:
60:81:99:28:bf:ce:d2:7e:98:61:cd:83:b2:e0:81:
60:c3:db:a0:4a:70:59:fa:7f:d4:03:06:6e:85:ff:
b2:22:c8:7c:9c:35:03:0c:df:dd:28:a4:94:13:e6:
4e:b7:05:fb:09:96:b5:50:d1:66:5a:da:49:e3:8e:
23:ad:6c:37:44:fc:a3:ed:c8:f8:a3:bb:3d:e4:4d:
b3:0a:08:34:86:f9:8d:df:09:9c:72:08:44:d4:38:
aa:5a:18:59:40:cd:1e:fe:9f:4f:e3:25:43:ed:8e:
eb:3f:4a:c9:ea:93:88:78:9f:a2:51:cc:09:f1:f7:
2c:32:97:a6:01:38:77:12:bc:a6:f6:8b:8e:f6:7f:
5a:6c:d0:d1:25:f5:ea:6b:99:88:a8:5c:92:07:ce:
35:a5:48:7e:aa:a2:d3:37:d6:45:8f:57:d8:82:86:
ad:d1:2e:82:20:28:31:e7:3a:40:4a:c5:bb:b6:c7:
b1:c0:82:b8:57:1d:82:8f:45:a0:8e:08:16:18:7b:
52:8f:b8:ea:14:bc:0c:7c:eb:e7:59:e1:12:27:c5:
85:09:87:0b:fc:78:02:81:d5:aa:81:da:58:a2:c6:
64:09:5c:f6:e8:66:51:75:fa:46:93:c7:c6:d3:c9:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3C:B1:F9:57:DE:60:9C:E1:43:AE:0E:3B:71:9E:7B:16:C3:8E:9A
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.56.0/22
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.170.0-95.164.175.255
Signature Algorithm: sha256WithRSAEncryption
3a:82:83:a3:9f:a9:42:14:ca:e4:d4:03:86:06:f6:74:56:f3:
93:a9:09:4b:79:a3:40:49:45:41:43:17:79:f1:f6:2b:0f:33:
97:7d:52:ce:da:17:a1:a8:92:b7:34:a1:33:97:e1:51:56:3c:
cb:2f:a7:88:4a:31:9e:60:a2:4e:66:81:c0:67:0d:0e:2f:ee:
7f:18:9f:bb:d6:de:d7:01:18:42:a6:2a:1f:71:45:3b:d8:14:
16:40:8b:f1:70:e8:0e:2c:83:57:30:62:bf:2a:ef:b9:cb:4d:
69:ec:d8:bd:88:73:c0:6d:cf:72:5b:54:b6:ba:53:96:a5:b2:
84:5f:6b:b8:36:77:86:a4:af:14:c2:3e:9c:a8:7b:46:91:64:
9a:8f:36:d1:38:40:2c:0a:59:20:ca:aa:94:07:87:55:46:da:
f5:57:26:d5:ee:76:32:6d:22:df:73:74:38:8d:ac:04:53:f7:
ec:1e:69:02:6e:ac:9f:4b:47:ec:c8:00:24:87:4a:bf:4e:37:
21:4d:62:56:a0:3c:59:c3:8d:16:98:49:24:59:69:03:42:33:
27:ec:ee:e2:4c:f9:5c:14:4a:4c:ca:97:ea:5c:37:26:25:c9:
f7:fd:1f:57:a9:b6:da:7f:e8:9d:f1:92:6f:e7:eb:f6:c7:2d:
cc:d5:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:24:43 2025 by rpki-client