Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QH1tPtRy1by0hcKo-zqV7qN3qIc.roa
File: QH1tPtRy1by0hcKo-zqV7qN3qIc.roa (raw, json)
Hash identifier: ceuGUdwWkRVha8fzfXz9B5JYNiJeacxBEunZYT9H+TI=
Subject key identifier: 40:7D:6D:3E:D4:72:D5:BC:B4:85:C2:A8:FB:3A:95:EE:A3:77:A8:87
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197265022FA4881F3CF5DDE5022215E1876
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QH1tPtRy1by0hcKo-zqV7qN3qIc.roa
Signing time: Sat 31 May 2025 12:27:55 +0000
ROA not before: Sat 31 May 2025 12:27:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213512
IP address blocks: 5.175.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:50:22:fa:48:81:f3:cf:5d:de:50:22:21:5e:18:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 31 12:27:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=407d6d3ed472d5bcb485c2a8fb3a95eea377a887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:1b:1d:a9:fb:95:d1:7d:7a:7c:7d:1c:a4:
2b:df:46:78:e8:7e:fa:46:7d:99:3a:b4:23:a1:8d:
82:dd:4f:4e:99:f8:87:5e:a0:7d:80:6b:00:a4:87:
ba:a1:d7:12:24:fa:38:3b:f8:15:a4:ff:21:cc:6f:
38:81:58:0a:ab:5e:b4:5a:c6:b4:3d:29:f3:d5:24:
b2:1a:fb:04:a6:4b:2d:53:33:d3:ca:d3:3f:fa:18:
84:f6:fd:d1:61:5c:ac:2d:0a:ef:68:4f:8b:41:56:
25:a5:ad:e9:ca:38:a5:63:f2:b9:5d:94:16:41:42:
80:2b:de:04:33:4d:7a:e3:b4:71:94:23:9f:2b:7a:
9e:76:ac:5e:2d:43:6c:ae:84:1d:15:ed:65:13:87:
2c:b7:f4:e1:61:58:ac:91:62:ed:9f:40:91:b1:7b:
c4:84:13:d6:aa:29:13:7f:95:41:92:42:14:c7:0c:
f2:37:17:d5:95:99:15:d0:a7:a5:45:93:fd:35:a0:
b4:91:2f:2a:03:b4:c1:e2:b0:50:ea:b8:75:d9:85:
cb:c2:1b:50:db:f5:78:06:69:44:6c:11:06:cf:39:
17:b4:9c:ac:cb:3a:e4:54:9b:04:eb:97:83:88:65:
90:23:44:58:2d:9f:9e:8c:05:d3:b7:50:e3:7a:ff:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:6D:3E:D4:72:D5:BC:B4:85:C2:A8:FB:3A:95:EE:A3:77:A8:87
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QH1tPtRy1by0hcKo-zqV7qN3qIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.142.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fc:92:8c:51:7b:0a:c2:37:96:e0:13:d0:4e:fa:f6:35:2f:
11:1e:aa:fd:ee:93:44:1b:a5:24:50:47:0c:d2:55:87:25:49:
66:cc:d9:bb:65:87:05:80:65:a0:23:26:d8:0f:c1:f3:fa:55:
00:75:c6:77:76:0a:7c:3f:6d:29:c6:fa:2c:df:dc:c2:92:56:
8a:5f:90:5d:99:6a:35:ef:9b:4b:ff:af:e1:10:0c:5e:81:45:
ef:fe:3f:9e:9c:be:7e:4f:94:2f:88:0d:77:24:fc:23:21:f5:
0c:ff:eb:06:5f:f8:39:55:b5:51:40:8a:53:ad:df:da:b1:66:
ed:41:f1:4f:cd:e7:01:f4:84:8e:15:e7:32:39:50:5f:7d:b3:
09:e6:ca:a5:a6:09:51:72:09:04:75:8c:43:7b:cb:81:c9:27:
3a:0a:fc:13:01:9e:ce:28:80:2a:5a:fd:45:99:d5:c6:61:ed:
54:59:e5:26:5e:05:06:d0:03:12:33:e9:f9:d1:7a:38:9d:ce:
fa:80:86:d4:9a:87:bb:7b:78:89:09:06:44:b7:3d:20:a4:02:
e1:4e:6f:fe:28:4e:11:82:86:ce:1e:cf:ad:ab:46:d1:a3:94:
3b:49:73:b0:1c:ae:6f:23:c7:31:c3:29:12:e5:23:05:ca:50:
06:03:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:27:21 2025 by rpki-client