Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QVPNWdZV5JfsJxy5j78OMsRhM8o.roa
File: QVPNWdZV5JfsJxy5j78OMsRhM8o.roa (raw, json)
Hash identifier: 7EhpWkqzhAX+ARqCDy34YD6NPgtsJ8z7t5vAj8u6nIM=
Subject key identifier: 41:53:CD:59:D6:55:E4:97:EC:27:1C:B9:8F:BF:0E:32:C4:61:33:CA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019758D44E4E8C3C089ECC108F100C7EC3F9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QVPNWdZV5JfsJxy5j78OMsRhM8o.roa
Signing time: Tue 10 Jun 2025 07:53:18 +0000
ROA not before: Tue 10 Jun 2025 07:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212177
IP address blocks: 92.119.196.0/24 maxlen: 24
92.119.197.0/24 maxlen: 24
92.119.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:d4:4e:4e:8c:3c:08:9e:cc:10:8f:10:0c:7e:c3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 10 07:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4153cd59d655e497ec271cb98fbf0e32c46133ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:f9:11:74:1a:e4:99:4c:28:cf:1d:1f:19:
4d:dc:58:6f:59:74:6c:39:9b:3c:66:77:c2:45:81:
24:cb:f7:7e:41:69:5c:99:19:98:4f:7b:d8:8d:44:
23:d2:40:eb:92:80:43:53:b0:05:3e:ac:61:10:e5:
f1:e1:2f:57:64:59:d0:5e:d5:6a:bb:61:d1:eb:07:
62:d2:4f:1e:7f:6c:85:a8:85:46:de:3f:cc:9f:82:
ae:1e:5e:55:f4:e1:21:b4:e7:b9:7c:dd:ef:6c:bd:
eb:76:30:db:27:96:b7:38:32:d5:f0:6f:f3:7b:29:
cf:51:d0:27:de:7e:04:47:95:4b:24:7a:46:c9:5e:
df:f4:f1:99:ef:ea:86:7f:bf:e6:24:1a:de:43:f1:
e7:69:36:6c:bd:0f:4c:d6:f3:ce:0a:85:0e:c0:80:
19:4f:c8:6b:7d:0e:50:62:00:1c:52:a3:33:33:6c:
1d:c6:4e:8f:15:4f:8e:9d:3e:f9:d5:a9:68:ac:26:
9a:bc:a7:a8:0a:bb:98:d1:e1:16:3e:9d:73:54:96:
e4:89:5a:f2:9b:c6:98:a7:0a:f1:c4:90:32:cb:70:
74:d2:dd:3c:36:2f:67:b0:d8:01:4c:76:77:33:10:
56:d6:49:7f:c4:29:f0:be:e0:ca:07:4e:f6:21:0c:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:53:CD:59:D6:55:E4:97:EC:27:1C:B9:8F:BF:0E:32:C4:61:33:CA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QVPNWdZV5JfsJxy5j78OMsRhM8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.196.0-92.119.198.255
Signature Algorithm: sha256WithRSAEncryption
5d:72:37:c9:29:b6:82:0e:13:9f:c7:aa:c7:80:19:a4:f5:42:
23:fb:ce:78:45:f4:cf:54:fd:6d:83:0b:d6:ac:38:a5:98:79:
4d:f1:5e:bc:fa:da:98:a0:be:cd:34:43:b1:22:80:db:77:b0:
b2:5e:5c:71:de:b8:92:70:99:97:9f:3d:02:39:b5:8f:46:61:
48:77:72:ae:fb:e3:3d:bf:2a:c6:dc:40:3f:99:b6:a4:bc:ac:
08:9c:93:49:72:26:f4:bc:7e:ba:af:dd:57:7a:6e:da:c9:d2:
e7:38:3d:17:ce:8c:fc:a2:06:fc:87:17:cd:86:32:51:23:c2:
fe:ba:da:33:ee:3f:e1:08:48:bd:51:79:86:66:cc:d4:21:57:
4f:e6:ae:99:11:4d:40:5b:2b:03:47:2d:12:96:a3:6a:0f:0d:
65:03:1c:a3:1c:15:1e:b6:85:b8:0b:f9:ae:11:90:b2:c1:3e:
ee:f8:1c:89:70:6c:20:f3:00:16:35:c0:05:72:2f:07:2a:fb:
3d:2c:16:40:8b:15:a1:39:8a:eb:ec:06:f6:38:d6:bc:93:50:
a3:d5:6a:e8:3c:23:23:72:65:0c:88:f8:fc:3b:8d:ea:f7:0c:
c9:3e:b1:14:c1:a3:89:4e:72:84:31:a4:d9:55:01:9d:0e:17:
a6:db:ea:f8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZdY1E5OjDwInswQjxAMfsP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNjEwMDc1MzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTUzY2Q1OWQ2NTVlNDk3ZWMyNzFjYjk4ZmJmMGUzMmM0NjEzM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4P5EXQa5JlMKM8dHxlN3FhvWXRs
OZs8ZnfCRYEky/d+QWlcmRmYT3vYjUQj0kDrkoBDU7AFPqxhEOXx4S9XZFnQXtVq
u2HR6wdi0k8ef2yFqIVG3j/Mn4KuHl5V9OEhtOe5fN3vbL3rdjDbJ5a3ODLV8G/z
eynPUdAn3n4ER5VLJHpGyV7f9PGZ7+qGf7/mJBreQ/HnaTZsvQ9M1vPOCoUOwIAZ
T8hrfQ5QYgAcUqMzM2wdxk6PFU+OnT751alorCaavKeoCruY0eEWPp1zVJbkiVry
m8aYpwrxxJAyy3B00t08Ni9nsNgBTHZ3MxBW1kl/xCnwvuDKB072IQxSWQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEFTzVnWVeSX7CccuY+/DjLEYTPKMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUVZQTldkWlY1SmZzSnh5NWo3OE9Nc1JoTThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJcd8QD
BABcd8YwDQYJKoZIhvcNAQELBQADggEBAF1yN8kptoIOE5/HqseAGaT1QiP7znhF
9M9U/W2DC9asOKWYeU3xXrz62pigvs00Q7EigNt3sLJeXHHeuJJwmZefPQI5tY9G
YUh3cq774z2/KsbcQD+ZtqS8rAick0lyJvS8frqv3Vd6btrJ0uc4PRfOjPyiBvyH
F82GMlEjwv662jPuP+EISL1ReYZmzNQhV0/mrpkRTUBbKwNHLRKWo2oPDWUDHKMc
FR62hbgL+a4RkLLBPu74HIlwbCDzABY1wAVyLwcq+z0sFkCLFaE5iuvsBvY41ryT
UKPVaug8IyNyZQyI+Pw7jer3DMk+sRTBo4lOcoQxpNlVAZ0OF6bb6vg=
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:35:42 2025 by rpki-client