Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/qPcKkkidzXXgK_rh9ZbNuNDCkis.roa
File: qPcKkkidzXXgK_rh9ZbNuNDCkis.roa (raw, json)
Hash identifier: g7RSWDO3DKC3V8i1PKWkm3sDjySTP9eR0YzitumbdEA=
Subject key identifier: A8:F7:0A:92:48:9D:CD:75:E0:2B:FA:E1:F5:96:CD:B8:D0:C2:92:2B
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 01975991D0F7877699F26A25528B5EDA0EB5
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/qPcKkkidzXXgK_rh9ZbNuNDCkis.roa
Signing time: Tue 10 Jun 2025 11:20:17 +0000
ROA not before: Tue 10 Jun 2025 11:20:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47159
IP address blocks: 79.121.124.0/22 maxlen: 22
88.87.232.0/21 maxlen: 21
91.147.216.0/21 maxlen: 21
94.248.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:91:d0:f7:87:76:99:f2:6a:25:52:8b:5e:da:0e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Jun 10 11:20:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8f70a92489dcd75e02bfae1f596cdb8d0c2922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:88:25:a2:5f:3b:bb:2b:67:7c:45:8e:10:
69:43:f1:33:81:c3:c2:2c:32:c9:38:7e:af:da:a9:
a6:e0:d7:ee:92:31:eb:0e:61:d9:72:a1:12:1d:f2:
b0:96:de:9b:9a:82:ce:90:a2:96:33:1a:42:06:2d:
7c:48:7f:80:f7:63:32:9f:dc:e6:d5:2e:ba:e1:76:
6b:ff:7b:44:6c:96:fd:b2:96:3c:1f:08:09:9e:42:
dd:09:d4:8c:b7:e6:8d:50:a7:1d:e1:7e:da:eb:fb:
5e:a9:bb:f2:c3:d1:eb:3f:d9:da:a9:e9:1d:43:92:
fa:9b:da:2e:5c:00:d5:a9:fd:1f:3f:8d:ac:a3:50:
94:32:ff:2a:29:f5:3c:4e:78:08:0a:98:a0:60:30:
a8:27:fe:ac:be:a2:3e:d5:42:dd:c6:00:df:92:d2:
4c:9b:f1:92:d6:f5:1a:0c:fb:7c:e9:31:7a:fb:6b:
69:f2:0b:c7:51:95:9b:15:43:4c:bf:43:1b:f6:ac:
f6:b1:06:51:5f:fe:49:18:02:1c:94:89:84:30:97:
bd:0b:58:4f:72:c8:e6:60:a5:5d:c7:59:d6:d8:0f:
fd:45:fb:7d:59:14:49:ee:e4:d8:50:a4:b7:e6:58:
1e:6e:a9:b7:cb:6c:47:f8:1f:ae:78:84:a9:5b:f9:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F7:0A:92:48:9D:CD:75:E0:2B:FA:E1:F5:96:CD:B8:D0:C2:92:2B
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/qPcKkkidzXXgK_rh9ZbNuNDCkis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.124.0/22
88.87.232.0/21
91.147.216.0/21
94.248.176.0/21
Signature Algorithm: sha256WithRSAEncryption
46:08:b8:db:ad:96:53:8e:26:7a:a5:e2:d9:ae:5f:fe:ea:e2:
89:45:41:16:e6:65:75:cd:a5:8f:7f:65:24:56:cb:6d:01:03:
ec:31:14:a7:ba:5f:fe:43:cc:a5:fc:9d:2b:07:e8:ec:e1:06:
b0:e5:e4:fe:1e:0e:d5:ed:0f:0d:ca:20:5f:a8:ef:87:e0:02:
69:e1:0b:a2:ed:f2:e2:6f:eb:0d:72:1a:35:89:f5:38:3e:bf:
b4:48:5e:6d:70:0c:62:a4:bb:09:eb:e5:a0:2d:b1:00:0b:bd:
eb:b8:19:22:67:f0:be:17:95:72:d5:f6:41:90:92:82:ea:f6:
74:c1:8f:cc:6c:00:d1:9e:23:eb:2b:61:34:34:62:53:16:16:
ae:b3:36:4c:58:26:c5:e8:00:69:f9:ce:a0:f4:17:69:f8:a4:
c3:a1:a4:02:8c:4b:44:2b:39:39:54:3d:c5:9e:2d:cc:ae:bc:
fb:f0:62:82:b2:9b:d0:a2:9e:41:2e:ca:35:21:6d:a4:0a:51:
6f:9d:90:90:bd:64:e3:43:ac:ce:6a:34:b6:48:7a:c2:44:49:
4d:08:80:3b:a2:6e:0e:d3:e8:00:aa:2c:05:11:9a:39:ad:e4:
07:c2:82:fa:4f:39:01:08:f0:66:a1:75:c2:2a:24:8a:a3:97:
22:40:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:05:16 2025 by rpki-client