Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/qR79y5L3S13clIm_R-nn98Pfxqc.roa
File: qR79y5L3S13clIm_R-nn98Pfxqc.roa (raw, json)
Hash identifier: nXOF1VQroYBhfSkisMJXwE5JIc0371e5TucciqAwtz4=
Subject key identifier: A9:1E:FD:CB:92:F7:4B:5D:DC:94:89:BF:47:E9:E7:F7:C3:DF:C6:A7
Certificate issuer: /CN=e3958384e346956a00663a565507b96f14cc0973
Certificate serial: 019A2B9CE47943196401AA4DFD625BCBAF0C
Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/qR79y5L3S13clIm_R-nn98Pfxqc.roa
Signing time: Tue 28 Oct 2025 16:18:13 +0000
ROA not before: Tue 28 Oct 2025 16:18:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197770
IP address blocks: 194.9.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:9c:e4:79:43:19:64:01:aa:4d:fd:62:5b:cb:af:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3958384e346956a00663a565507b96f14cc0973
Validity
Not Before: Oct 28 16:18:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a91efdcb92f74b5ddc9489bf47e9e7f7c3dfc6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:6f:5c:bb:50:16:e9:ca:9f:1b:d5:0e:a9:
61:dd:c2:72:5c:5b:4d:68:b7:64:d1:d5:8b:1d:04:
cd:3a:95:21:5c:f6:73:2a:f8:23:6a:e7:31:33:55:
3f:79:46:73:d7:ea:d0:97:ed:64:9e:b5:60:6c:d6:
89:92:9f:d7:1e:db:fb:81:5e:51:64:7e:cb:0b:72:
b7:62:b7:0c:48:c5:88:b4:f8:e6:68:dc:fc:59:3b:
4f:45:9d:ca:4b:a4:c5:f8:1c:9c:07:2d:3b:6d:1b:
7c:e3:61:53:81:cc:7b:41:15:60:99:a9:cb:7f:13:
9f:81:f8:6b:9c:91:4c:05:b4:c0:65:7e:49:7a:fa:
dc:f3:a7:31:56:d3:11:d1:67:b0:11:84:03:91:57:
24:44:8b:3f:e1:fd:b9:43:0c:43:26:33:c9:2d:d7:
2b:1a:e0:00:9a:e3:db:54:96:75:31:af:f1:c8:06:
66:03:43:07:b5:cd:73:0f:ae:0e:72:82:ed:ab:25:
39:78:1d:3b:e7:cd:99:b1:58:ac:36:ce:37:90:76:
d9:fd:c4:af:d4:c6:1c:61:a2:5a:13:39:5f:df:a1:
b1:33:04:dc:fa:c9:89:55:13:14:7f:2f:a3:3f:01:
8b:1a:a8:1a:dd:79:bb:83:d5:6a:fd:cd:02:e8:45:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1E:FD:CB:92:F7:4B:5D:DC:94:89:BF:47:E9:E7:F7:C3:DF:C6:A7
X509v3 Authority Key Identifier:
keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/qR79y5L3S13clIm_R-nn98Pfxqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.58.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:50:d4:10:64:64:38:44:0d:70:94:98:23:6d:dd:d1:f5:9b:
e0:97:ea:69:1f:1e:ab:68:a5:97:89:3a:ae:59:0f:d6:ff:72:
c8:77:92:1b:fa:58:21:49:d6:70:bc:e3:1d:63:22:ad:ca:61:
e0:19:3e:78:b9:5f:b2:73:6e:9f:b7:8e:e0:2e:8b:0f:ec:d6:
06:85:2c:f0:d7:d1:6e:2d:08:01:d5:a8:ca:6a:9c:84:95:65:
e6:a4:7d:cb:20:23:13:2d:3d:9d:96:aa:95:1f:b2:a8:4f:38:
38:81:8e:8c:f1:89:4e:12:a4:13:24:50:82:8f:20:9a:af:b4:
e2:51:08:28:6d:18:90:ed:ed:73:9d:57:61:3c:58:02:59:6e:
56:45:f0:38:90:b9:9f:24:52:2a:90:60:6b:6a:0a:c5:24:8e:
29:cd:1d:2e:9f:99:8d:2c:f4:e1:c6:63:e8:a6:ef:0f:c7:32:
e5:77:4a:60:2c:8f:9e:82:9f:39:78:d6:33:97:cd:a7:bd:ce:
f8:d8:ac:5c:35:90:1a:14:b6:ca:b7:da:43:ca:28:f0:80:47:
30:25:c2:16:3e:e6:67:b6:9a:38:40:60:81:50:f9:3e:c0:cb:
6f:ca:07:a9:55:04:b2:9c:d8:3f:67:7b:1e:64:57:0f:41:99:
30:da:ae:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:21 2025 by rpki-client