Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QBseio-spaXeYcY2Ag3PGoGIHE4.roa
File: QBseio-spaXeYcY2Ag3PGoGIHE4.roa (raw, json)
Hash identifier: 56Me5WluZOT8WLjUjrYHTYsjy78Fbrk2qNhPaIJCl8I=
Subject key identifier: 40:1B:1E:8A:8F:AC:A5:A5:DE:61:C6:36:02:0D:CF:1A:81:88:1C:4E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A366337E8890C39E61B26C4A1DCA0D0F9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QBseio-spaXeYcY2Ag3PGoGIHE4.roa
Signing time: Thu 30 Oct 2025 18:31:03 +0000
ROA not before: Thu 30 Oct 2025 18:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.231.30.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:63:37:e8:89:0c:39:e6:1b:26:c4:a1:dc:a0:d0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 30 18:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=401b1e8a8faca5a5de61c636020dcf1a81881c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:86:e9:52:a4:0c:23:bf:56:b6:4a:02:b7:
67:c2:0b:b3:52:06:7d:d5:7f:ef:aa:02:24:85:00:
a9:68:a4:24:28:2c:bc:6e:3d:f4:5f:06:ac:1b:ed:
0f:77:4d:46:7b:7a:3a:e8:c8:e5:ab:17:c9:aa:e1:
a7:9a:4f:c1:ff:c5:3a:7c:1b:0b:4f:8a:7a:aa:e7:
77:49:40:a4:52:f7:7a:fd:2b:77:6d:87:8e:0b:f3:
14:59:a1:bc:e4:a6:73:bb:3a:b0:3b:a8:ec:b6:ba:
30:78:f8:f3:18:5f:37:61:82:6e:ec:d2:f5:54:25:
a7:03:f4:17:c6:4a:9a:7e:6c:9f:c7:27:c9:ca:44:
03:16:c6:bd:1e:af:d4:8b:aa:c7:dd:57:05:a2:1a:
1b:09:24:9d:8d:c6:20:8e:00:2b:4c:30:50:c3:24:
3e:40:5d:9d:2a:47:7c:ae:4e:59:de:c2:1a:56:73:
1e:90:bb:40:50:b0:22:93:25:90:05:e3:2f:8e:44:
46:b5:cd:ed:cb:85:89:69:c0:06:4b:f3:f9:3a:87:
22:e1:e7:5f:32:8c:9a:de:62:f4:88:88:b2:99:30:
6e:c6:2c:30:a0:26:6b:b2:90:fe:d1:19:35:ba:9e:
69:fb:df:3a:5d:0d:fd:dd:89:06:8b:02:be:45:61:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:1E:8A:8F:AC:A5:A5:DE:61:C6:36:02:0D:CF:1A:81:88:1C:4E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QBseio-spaXeYcY2Ag3PGoGIHE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.30.0/24
77.90.54.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:7b:0d:85:ae:02:aa:45:92:70:1a:e0:f4:0e:2b:7d:a2:5d:
36:14:6c:8d:b1:e3:9c:f5:b4:f0:90:59:57:66:2a:e7:7b:00:
40:fa:e5:be:90:f1:1b:9d:d4:45:45:f3:79:15:83:5d:f0:5b:
a8:f5:92:15:4e:ad:db:99:5c:a5:93:6c:ef:95:1f:f2:51:f6:
d9:44:cc:28:d2:3e:f2:4b:4f:ea:30:38:cd:d3:b7:48:5d:d3:
78:88:e3:b7:8f:ce:82:32:8d:2d:73:54:ef:4b:85:6d:64:0e:
68:53:62:71:fd:fb:9f:3e:ad:9e:eb:72:e6:a6:e1:6e:48:c9:
c9:9f:00:9b:64:b5:2e:e3:04:5a:cc:32:70:93:e7:f5:f1:2c:
8a:9a:1a:7e:16:5f:0e:fb:41:e5:ab:8a:22:ce:5b:42:2f:ff:
b0:a9:ea:98:c3:7e:45:31:ab:30:be:4e:97:ce:ec:81:9d:5c:
c1:c1:48:3e:33:f8:07:3e:b8:1c:b8:4f:1d:26:9b:6c:5d:2b:
8e:b1:e8:d1:1c:9c:a3:94:b9:98:5e:8b:43:d8:bd:d9:6e:7d:
12:c7:34:ad:24:92:bc:79:f8:a9:e3:75:38:e1:f3:c0:0d:e0:
8e:a4:c1:11:88:e9:a0:e4:f5:42:42:90:f4:92:80:a5:98:55:
56:cd:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:28:57 2025 by rpki-client