Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/qsCfBgY2cAUIcPFcqfJPHH6e1Us.roa
File: qsCfBgY2cAUIcPFcqfJPHH6e1Us.roa (raw, json)
Hash identifier: Tt7WpuJis2cX5dodwxLP2jzWdn56/MoMnk4lBKcxlds=
Subject key identifier: AA:C0:9F:06:06:36:70:05:08:70:F1:5C:A9:F2:4F:1C:7E:9E:D5:4B
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019874D53F3EE81048FC3BEFF985147D2765
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/qsCfBgY2cAUIcPFcqfJPHH6e1Us.roa
Signing time: Mon 04 Aug 2025 11:26:28 +0000
ROA not before: Mon 04 Aug 2025 11:26:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211165
IP address blocks: 185.22.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:d5:3f:3e:e8:10:48:fc:3b:ef:f9:85:14:7d:27:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 4 11:26:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aac09f06063670050870f15ca9f24f1c7e9ed54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:fc:37:f4:8d:37:ed:d3:04:6c:37:e3:28:
d7:57:ee:e2:d2:1d:01:43:fc:35:ac:1b:df:f5:6b:
62:3c:2f:18:6c:b3:c3:6b:ec:be:13:f9:31:0f:47:
47:5f:ef:2a:7b:e9:6d:8d:6b:e3:8d:b5:2a:cd:06:
3f:ad:89:be:40:4c:35:02:49:24:cb:0c:4a:f2:67:
0e:38:4a:dd:e2:d0:b3:62:86:d8:3d:0e:d7:b7:02:
f1:e8:bd:94:4e:a5:0b:fd:aa:bd:00:d3:ee:16:53:
6e:50:0e:95:a3:a8:fa:e2:36:bd:d0:fc:ad:53:9e:
c0:67:d2:70:7b:a9:38:c1:c8:69:d0:22:77:3f:5d:
91:7b:8e:70:ed:1b:52:94:6f:24:c8:eb:d3:02:bb:
ab:1b:8b:7b:95:33:a8:c2:b7:ee:28:74:5e:9f:c8:
2d:1d:27:de:25:8e:83:1e:4c:1e:3b:f8:92:81:44:
a1:cc:e9:20:a5:49:54:d3:8a:56:e2:b0:19:45:11:
b3:2e:d7:4a:17:cb:5b:71:00:39:37:1e:dd:e3:34:
23:d2:25:3c:34:d1:e8:03:c3:60:62:5b:1d:c5:32:
e9:73:ee:d4:c7:72:43:d5:bd:ee:21:31:d5:52:19:
3a:20:13:3b:78:49:01:79:e1:e2:ba:c6:cf:94:db:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C0:9F:06:06:36:70:05:08:70:F1:5C:A9:F2:4F:1C:7E:9E:D5:4B
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/qsCfBgY2cAUIcPFcqfJPHH6e1Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:eb:f5:48:97:69:1b:ae:c3:61:4f:79:1e:7b:4a:88:1e:9a:
59:c0:e1:53:7b:2d:26:3f:32:88:68:fc:a3:97:cc:35:d8:e2:
1c:a4:53:08:37:e8:24:ab:cf:65:40:09:2f:6e:55:ba:a0:dd:
d2:1d:97:2d:d4:8a:96:bf:72:1c:07:84:49:6f:e2:09:29:e8:
96:f7:33:2b:19:35:45:27:56:e2:ab:70:29:f8:c6:39:52:f8:
db:cb:d4:c8:de:e1:fc:40:9f:fa:50:92:94:41:0c:cd:eb:15:
ba:34:58:61:88:ff:15:64:64:b7:9b:04:b9:02:f7:2a:3c:46:
3c:8a:a6:7e:2a:dd:32:2e:fa:68:89:dc:fa:a7:c5:aa:cd:c2:
ab:57:1c:96:39:1e:8b:70:e3:d0:f9:ff:4a:5d:73:52:45:e7:
c8:2c:0b:fa:3c:af:c1:6c:7a:4d:cf:0f:1f:c7:38:45:45:76:
8d:30:1b:05:e7:c4:13:74:56:45:2a:f4:44:b5:7d:d2:5e:fc:
0d:0b:8d:e0:88:dc:4f:8f:60:fa:08:ff:5c:50:a3:8f:c3:de:
07:27:46:33:b0:36:a1:2e:5a:e9:b8:d6:d4:53:7d:86:ca:13:
cc:9e:f2:30:ba:97:27:44:6b:5d:5b:ce:62:09:07:87:4f:c1:
2c:c5:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:21:13 2025 by rpki-client