Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/q3Xp_E_gaYD_JXYTbg7HGV6canw.roa
File: q3Xp_E_gaYD_JXYTbg7HGV6canw.roa (raw, json)
Hash identifier: b+gA385XvxluW48qw8QZOuyt+uhVo8dkYYb5rX3BC0I=
Subject key identifier: AB:75:E9:FC:4F:E0:69:80:FF:25:76:13:6E:0E:C7:19:5E:9C:6A:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 0198791D2FCE9B889803324BAB8540073E9A
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/q3Xp_E_gaYD_JXYTbg7HGV6canw.roa
Signing time: Tue 05 Aug 2025 07:23:32 +0000
ROA not before: Tue 05 Aug 2025 07:23:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6908
IP address blocks: 185.120.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:1d:2f:ce:9b:88:98:03:32:4b:ab:85:40:07:3e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Aug 5 07:23:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab75e9fc4fe06980ff2576136e0ec7195e9c6a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:62:e0:4a:4f:a2:f9:5b:69:98:f9:5d:d1:
de:32:0a:7a:a7:a4:9a:bc:bb:ec:18:c0:84:40:4d:
21:42:b0:c9:77:17:da:15:86:b2:16:82:f8:3d:9c:
f0:b5:40:5b:45:df:70:a8:b0:d4:8f:1b:50:fc:aa:
6b:5f:d1:d1:18:12:c4:60:2e:1e:c2:b1:8c:f7:d9:
b7:0a:2e:ec:3a:fb:a2:9a:86:93:34:a0:ef:be:a0:
25:f4:f7:0c:c8:3d:18:06:7a:7d:89:97:01:6a:07:
c9:fb:7b:b9:89:58:e9:b0:1b:ad:ab:86:3e:44:71:
bc:29:fa:61:2e:4b:3d:e1:1e:b4:3c:77:74:a6:8f:
ca:f7:e3:e6:8c:6a:f6:89:e1:2a:f5:a0:87:13:05:
95:d6:44:c9:82:c7:80:91:ff:4f:4c:bc:07:4d:b3:
76:44:a8:99:8f:41:11:f7:c3:52:4a:be:94:e3:01:
10:a2:aa:cd:bb:60:e3:85:45:27:ec:47:b5:81:dc:
25:a9:45:d5:eb:f1:b3:e6:3b:d9:4a:b9:40:55:39:
1b:aa:52:b6:3c:36:7c:d4:c7:ba:c8:4f:bb:9b:7c:
e5:91:6e:a3:98:36:64:73:b9:c4:51:2f:ea:d7:a9:
0d:bb:0c:22:d7:0e:9c:d9:d7:d3:21:5a:41:ae:03:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:75:E9:FC:4F:E0:69:80:FF:25:76:13:6E:0E:C7:19:5E:9C:6A:7C
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/q3Xp_E_gaYD_JXYTbg7HGV6canw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:a3:9d:c0:e4:57:33:22:18:5e:63:a8:00:11:29:79:cc:57:
7f:c9:0a:ec:6d:15:5a:3a:de:23:29:8f:a9:cf:3b:59:f4:88:
f5:08:f9:39:97:22:1c:d6:ce:a9:5c:57:8b:64:66:b7:b2:13:
bc:f4:39:c7:f5:a6:b3:47:6f:99:e5:ac:30:b6:4a:2a:a7:2c:
ae:0f:51:1d:ad:49:fa:d5:46:3e:a9:8d:07:b0:ac:e3:6d:61:
3d:1c:5a:6c:a2:44:f8:54:1a:d1:dd:82:31:ec:e9:0e:b2:12:
52:64:b3:de:43:e6:df:3c:ef:44:fa:fe:f7:2b:bc:00:1c:83:
f3:94:7e:7b:af:02:07:ee:c7:37:1b:0c:f7:5b:5a:fe:04:ca:
8a:82:2c:81:dc:e6:a7:1a:5d:c3:b8:14:d6:80:24:12:d0:17:
ca:82:e0:ee:bc:0c:9a:53:0b:e0:5d:9c:29:f2:84:24:4f:8c:
8b:03:a9:6f:7e:43:c4:44:9f:16:c1:90:15:0e:21:9a:e6:52:
a2:c0:3b:07:76:df:a8:9d:6b:2e:91:50:78:38:81:eb:c0:80:
3f:73:47:fd:f6:fb:b3:98:34:21:15:37:6b:b9:fb:4a:2f:5d:
fc:63:5a:51:e7:f8:24:09:ed:40:13:df:fe:48:60:75:08:43:
a8:ad:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:01:39 2025 by rpki-client