Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qK8VdIGmAXw2w2iUVByprs6CLS8.roa
File: qK8VdIGmAXw2w2iUVByprs6CLS8.roa (raw, json)
Hash identifier: 33mhunsMLETO6HQrFBi6adT3AfIc7vhuCd6bIzDsLNE=
Subject key identifier: A8:AF:15:74:81:A6:01:7C:36:C3:68:94:54:1C:A9:AE:CE:82:2D:2F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01986A09F72B956560221DA3FDC8785956A5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qK8VdIGmAXw2w2iUVByprs6CLS8.roa
Signing time: Sat 02 Aug 2025 09:08:14 +0000
ROA not before: Sat 02 Aug 2025 09:08:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197549
IP address blocks: 85.93.0.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.249.218.0/23 maxlen: 32
94.249.222.0/23 maxlen: 32
217.69.175.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6a:09:f7:2b:95:65:60:22:1d:a3:fd:c8:78:59:56:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 2 09:08:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8af157481a6017c36c36894541ca9aece822d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:e0:06:c0:6b:08:25:2d:52:ec:27:18:70:
39:82:d6:ad:79:3a:1c:28:81:01:05:ba:56:38:5d:
c5:ce:e6:81:9e:b5:19:79:6b:d0:09:b0:de:b2:0a:
b4:e9:9f:19:b7:3c:01:ee:c0:8f:91:1f:57:7a:e8:
33:3b:5b:fe:14:a5:24:73:29:3e:9c:ca:17:d7:37:
7c:05:5a:52:02:bd:15:a0:a3:67:6b:c2:d7:90:70:
84:f4:ee:7d:c8:ea:85:28:5f:0d:ab:96:5e:bb:6e:
8a:2c:e0:c9:07:a4:f8:ca:f3:64:11:d1:48:57:b8:
6b:fb:45:b6:0f:5f:cb:22:69:cf:5d:17:9b:a7:ef:
4d:e1:9a:3e:1f:41:fb:8b:2d:e7:b1:75:3e:24:13:
23:24:17:9b:24:2f:c4:ca:a1:55:78:ba:58:93:44:
5d:23:90:cd:e2:9b:da:91:47:7e:4e:8c:e3:1d:60:
9a:54:31:36:55:df:68:d6:dc:5c:9c:dd:cb:b4:54:
b5:c1:fe:c4:26:0d:a7:54:74:ee:61:01:3f:94:72:
23:49:33:f4:e5:f6:59:14:a5:b3:bd:d6:d9:81:0f:
88:f8:49:a1:c2:1e:86:14:69:56:0e:df:1b:aa:87:
41:59:b9:40:f3:70:9a:ee:80:10:96:9b:c9:77:67:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AF:15:74:81:A6:01:7C:36:C3:68:94:54:1C:A9:AE:CE:82:2D:2F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qK8VdIGmAXw2w2iUVByprs6CLS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.0.0/19
89.144.0.0/18
94.249.218.0/23
94.249.222.0/23
217.69.175.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:16:5d:6d:72:50:18:86:17:7c:00:e1:18:b2:06:39:9b:a5:
3a:b5:aa:9f:6b:88:6b:62:93:dd:9c:a8:34:5b:02:bc:0e:78:
9f:e2:12:22:f9:67:62:28:b7:b3:52:3e:d6:5f:fb:93:00:7d:
15:b0:94:37:c7:a9:0b:76:28:82:1b:24:3a:5b:fd:69:60:a3:
8d:a8:c0:9d:c3:e4:a7:69:c5:40:41:81:f2:b5:3e:3a:e9:62:
c6:a2:d5:80:6a:1b:a2:1d:5e:4c:4c:ae:2b:2a:ed:c1:b7:61:
f8:dd:35:b6:5c:33:d4:a3:c0:67:1f:a6:95:18:bb:0d:20:3f:
9e:79:19:20:9e:4c:50:be:87:47:d6:5b:04:c1:3d:b7:73:75:
d4:66:dd:54:c2:6d:d9:6c:1b:dc:5a:b9:13:7a:cd:83:69:90:
7d:b4:fd:64:67:89:3c:ee:4e:c7:52:37:a0:cb:07:f5:b3:b1:
e1:b0:fb:e8:dd:2d:f2:08:c5:09:32:50:29:1d:c3:cd:73:65:
9e:14:21:86:56:37:79:0e:e8:07:54:54:f2:62:41:65:55:9d:
55:ac:2d:85:2b:5f:10:83:8f:8a:e7:26:04:99:5a:47:29:ac:
b2:3e:3b:c7:8e:44:39:59:fc:f0:53:fe:17:83:d5:cc:c4:99:
2a:8c:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:00:37 2025 by rpki-client