Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qv1zuA1uhOhB0iQXeqNiqrroLGs.roa
File: qv1zuA1uhOhB0iQXeqNiqrroLGs.roa (raw, json)
Hash identifier: Q8oWPpA1az03yvY1CQBg0YQouTSBYAb79g98f5yLevk=
Subject key identifier: AA:FD:73:B8:0D:6E:84:E8:41:D2:24:17:7A:A3:62:AA:BA:E8:2C:6B
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01986A78F74E7CC10A45AF717C4D12AFC309
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qv1zuA1uhOhB0iQXeqNiqrroLGs.roa
Signing time: Sat 02 Aug 2025 11:09:29 +0000
ROA not before: Sat 02 Aug 2025 11:09:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.24.0/24 maxlen: 24
89.21.86.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
91.210.145.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
194.61.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6a:78:f7:4e:7c:c1:0a:45:af:71:7c:4d:12:af:c3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 2 11:09:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aafd73b80d6e84e841d224177aa362aabae82c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:77:d9:4d:98:2c:83:2c:83:0e:c4:78:bc:
2d:f3:0c:da:02:43:a6:7b:61:3f:16:06:c8:25:f0:
8a:62:f2:9e:8f:7a:9e:cc:49:20:31:67:1a:12:f3:
76:76:fe:31:01:11:49:8e:fd:3c:b3:ca:32:1b:ce:
3b:f0:c5:11:cf:e3:c5:87:be:dd:9f:a6:76:e5:88:
c5:19:10:2e:4f:9f:c5:ac:0b:dc:9f:0d:8e:57:5d:
10:c6:31:65:a9:bf:2e:bb:bc:b0:3a:aa:a6:b3:35:
cd:64:0c:45:2b:8c:a9:00:b3:bb:dc:93:fa:ba:38:
89:a8:ad:32:94:03:13:34:c4:ec:c8:d8:2d:6f:fd:
49:89:11:19:68:5a:c2:30:40:76:a8:48:74:71:03:
41:26:d7:19:39:ce:c3:91:95:c7:fe:2a:88:52:fe:
3e:63:09:00:50:ba:5f:02:e5:70:8d:42:0e:83:fd:
c5:d1:5b:4f:90:83:a7:2c:fe:ce:f5:0d:f8:78:ca:
e0:86:4e:e1:eb:f5:dd:c6:8e:14:08:42:1f:b4:e8:
52:40:ae:06:95:fa:e2:3d:80:e9:40:28:5e:be:96:
7c:a2:4f:e8:ad:2d:9a:ca:3f:40:c0:7f:c3:59:a5:
50:c1:5d:d1:ac:ff:68:2f:41:5a:8a:18:e3:ad:2c:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FD:73:B8:0D:6E:84:E8:41:D2:24:17:7A:A3:62:AA:BA:E8:2C:6B
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qv1zuA1uhOhB0iQXeqNiqrroLGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.24.0/24
89.21.86.0/24
89.251.31.0/24
91.210.145.0/24
109.122.43.0/24
194.61.75.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ed:8c:26:d4:91:96:0b:2b:de:b0:ad:e7:61:cf:c1:67:12:
62:b6:7f:1b:6c:f8:54:a9:c1:04:97:8b:8c:3e:09:71:13:91:
2c:55:9e:fa:92:61:44:94:f5:7a:d9:08:22:57:71:24:ff:53:
84:36:44:17:ef:2e:6c:67:e7:f9:c3:40:5d:9e:13:e3:f0:b9:
e0:34:8e:28:c3:51:73:33:5b:ac:b4:fa:23:93:a6:10:da:97:
1f:a8:7d:c6:eb:f4:4c:4b:5d:77:90:22:5b:3e:0b:93:b7:3e:
3f:25:18:dc:c7:a0:94:b6:49:2c:e7:08:53:3b:be:b7:29:98:
1a:c4:11:1c:f8:6b:1d:46:95:85:2c:eb:07:15:0b:db:fb:c5:
a3:4d:b5:c7:e9:e0:99:78:35:9a:3c:9b:f2:02:df:77:fe:1a:
73:ce:8b:37:1e:d0:2e:6b:25:44:d9:88:22:c9:4b:5c:14:42:
16:3b:64:63:5b:bc:84:a1:b9:1f:67:69:f5:c4:fd:e1:25:b5:
9b:c8:25:28:9d:63:d8:9f:ae:1e:d1:65:e8:27:8f:d9:7b:2f:
54:42:23:9d:52:e9:4e:2a:42:a5:12:10:1e:d9:28:2d:94:ed:
3f:3d:d6:ba:5f:4d:de:7c:10:60:84:55:e5:42:3b:a8:98:67:
dc:c6:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:14 2025 by rpki-client