Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/rqyD8TiidTQF0ZtJv3J69ecwM-U.roa
File: rqyD8TiidTQF0ZtJv3J69ecwM-U.roa (raw, json)
Hash identifier: dV3t6p0NR97JKBSZO/SEBOXxgbRI8lp0IzWHtR5+D38=
Subject key identifier: AE:AC:83:F1:38:A2:75:34:05:D1:9B:49:BF:72:7A:F5:E7:30:33:E5
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01983BC2E5ABF6E07B687262353EEAF49FA3
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/rqyD8TiidTQF0ZtJv3J69ecwM-U.roa
Signing time: Thu 24 Jul 2025 09:28:05 +0000
ROA not before: Thu 24 Jul 2025 09:28:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 109.122.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:c2:e5:ab:f6:e0:7b:68:72:62:35:3e:ea:f4:9f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 24 09:28:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeac83f138a2753405d19b49bf727af5e73033e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:86:11:d6:a0:dd:eb:92:0d:53:72:1f:6b:
f9:46:b0:c6:7d:20:e1:95:32:f8:dd:09:a5:d4:43:
4c:aa:ac:b9:97:41:3f:e6:ee:e3:7a:41:ba:6f:47:
01:ce:05:c9:07:23:e4:4f:12:a6:17:31:76:aa:3b:
a2:a4:0b:9d:7e:a3:60:c3:87:d6:d8:e2:c9:4f:77:
bc:14:09:b6:6f:19:26:50:4b:22:78:ba:f7:6d:8e:
6f:f5:98:b5:99:42:4d:52:19:1f:b4:3e:e4:13:c1:
ed:3f:b0:7c:3d:7b:9d:06:24:1d:04:71:5a:e5:bf:
89:33:8c:7b:17:57:44:27:29:a0:80:28:65:aa:97:
6c:0b:c5:c7:01:b5:32:63:58:31:9e:54:17:5a:5a:
7d:a1:e7:46:e9:33:1f:13:5f:55:2e:25:81:af:8e:
02:8e:8f:75:a8:5e:4c:93:c0:64:b8:ac:f0:6a:03:
13:5a:ac:b7:b2:9b:3c:7f:c2:83:59:08:68:d0:04:
fe:6a:48:c1:c1:fd:f9:a4:1a:7a:f8:dd:0b:ac:8c:
33:78:f8:0d:30:d9:d2:63:03:b1:cb:6d:e3:63:15:
2f:02:77:eb:29:35:cb:cf:98:5d:c9:c0:13:e4:96:
54:3c:25:f0:0a:e0:7f:d7:d1:9a:7c:97:4a:01:12:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:83:F1:38:A2:75:34:05:D1:9B:49:BF:72:7A:F5:E7:30:33:E5
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/rqyD8TiidTQF0ZtJv3J69ecwM-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.31.0/24
Signature Algorithm: sha256WithRSAEncryption
18:73:d0:a3:04:3c:a3:8d:f6:3c:a9:d3:fb:67:50:f4:b9:d0:
41:a0:d7:1a:7d:89:52:0a:42:87:53:ae:3f:1c:e2:24:fc:89:
7b:50:1f:aa:3f:69:90:86:80:88:d4:90:f8:dd:b5:f5:d9:12:
22:ed:1a:b8:f0:e1:09:fc:07:e4:05:a2:8e:d3:df:4f:8f:fc:
2a:0e:25:53:e2:41:4c:25:a2:1a:c3:62:7e:eb:18:84:e8:82:
ed:bd:b4:92:57:45:32:02:06:04:4d:9e:db:43:6d:33:98:bf:
59:50:10:86:5b:bc:8e:b2:0a:ed:48:d3:6f:e7:d0:de:07:29:
25:95:8a:69:a5:41:bf:84:91:b5:b2:e0:9f:5f:ee:78:fc:62:
84:c8:4d:4d:61:a8:d8:07:b7:16:cf:36:f0:c7:72:7a:c8:b9:
a9:0c:ef:03:f7:8d:9c:99:36:a7:47:d4:50:be:1e:86:26:f6:
7b:02:17:16:e9:f5:f0:2a:81:fb:24:7d:0f:b6:d7:1f:b5:1e:
fa:0a:69:80:37:57:86:ea:a8:38:30:26:84:14:07:c0:73:54:
f9:c0:7a:b3:f5:e5:5d:dd:96:1a:aa:39:5a:05:b9:52:b4:1e:
27:a3:d2:07:f2:5d:80:01:02:d9:45:a2:e2:52:00:62:78:92:
5e:b3:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:19:26 2025 by rpki-client