Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/qhrn4XED21rcdTWtZqv2cxNR9pc.roa
File: qhrn4XED21rcdTWtZqv2cxNR9pc.roa (raw, json)
Hash identifier: VjyxWUWPzC0itKJGCfRlXwbzUVrhfNTBkQCDP20QLmY=
Subject key identifier: AA:1A:E7:E1:71:03:DB:5A:DC:75:35:AD:66:AB:F6:73:13:51:F6:97
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 019860538E642ADE0C7D62F5466183AFC91A
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/qhrn4XED21rcdTWtZqv2cxNR9pc.roa
Signing time: Thu 31 Jul 2025 11:52:25 +0000
ROA not before: Thu 31 Jul 2025 11:52:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204824
IP address blocks: 185.218.48.0/22 maxlen: 24
2a0b:d340::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:53:8e:64:2a:de:0c:7d:62:f5:46:61:83:af:c9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jul 31 11:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa1ae7e17103db5adc7535ad66abf6731351f697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:70:98:c6:fd:5b:24:e2:14:27:b7:64:f0:
97:5f:5e:87:0a:b3:6b:be:d5:ec:f8:97:9d:dc:4e:
33:83:b7:8a:1e:a1:c2:70:fc:74:f0:49:1d:01:18:
b5:b3:3f:96:4c:88:79:12:58:f3:c3:ea:3b:ec:4d:
d4:4b:ee:41:5e:82:a0:9a:ae:0d:47:c7:93:d3:94:
f0:80:2a:6d:4b:e3:3c:ad:43:74:9f:b0:7e:eb:a5:
b2:6d:c9:79:8e:b6:3d:b4:3c:e5:a9:4d:2e:0d:cb:
d6:f7:5a:7b:00:ad:4e:6d:46:8c:a3:50:10:59:4d:
e2:a9:5a:e3:f2:1c:e8:ad:6f:cc:33:76:02:0c:ac:
64:9c:f3:df:87:09:70:81:01:b2:37:55:90:b0:14:
8d:72:d0:22:f6:0c:ca:68:23:93:aa:a7:64:34:d6:
b7:6c:7a:4b:76:42:d0:4c:0f:5e:e3:6e:41:83:a3:
4f:a4:08:e2:85:84:2c:2b:e3:e3:1a:6f:96:87:20:
08:c5:37:2d:51:58:ea:e7:79:c2:25:67:cc:c8:df:
28:29:10:d8:7a:eb:9f:33:1a:fc:db:93:cd:c6:f9:
96:6e:7d:b4:43:a0:bd:5e:1d:ac:94:f3:45:af:5d:
59:4e:d2:ac:fb:75:7e:40:13:b5:05:18:65:f7:7c:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:E7:E1:71:03:DB:5A:DC:75:35:AD:66:AB:F6:73:13:51:F6:97
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/qhrn4XED21rcdTWtZqv2cxNR9pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.48.0/22
IPv6:
2a0b:d340::/29
Signature Algorithm: sha256WithRSAEncryption
e9:bb:64:07:f6:11:28:a4:33:9b:53:b3:37:d2:6c:08:19:a4:
5e:92:44:64:d3:e4:fd:d2:4a:5a:de:d9:41:f7:c3:ee:77:1c:
77:98:32:e9:b6:d4:61:07:51:dc:77:46:c1:8a:07:da:32:e0:
cb:53:db:bb:1a:7d:6c:b4:12:ae:66:a6:f1:d5:8c:80:e4:56:
bd:79:1b:bb:e3:7a:23:e0:18:c8:16:ba:b3:37:fb:a8:94:02:
c3:56:76:bd:18:63:ef:58:b6:f4:b1:5d:ba:c9:87:ba:75:81:
b8:77:44:2c:d3:d1:5b:0f:84:72:10:2e:e3:c8:48:48:39:a5:
77:a8:f6:aa:10:99:24:17:8b:8b:3b:19:02:65:c7:a8:ac:18:
62:63:66:be:6c:58:61:f9:16:fe:44:7b:7f:a4:5e:cc:72:e2:
2d:cd:aa:d0:95:0c:f6:72:ab:39:42:52:ef:eb:2f:61:8e:4f:
0b:c8:65:a8:19:f3:44:77:91:b5:11:0f:fe:a5:92:ee:f7:6b:
c6:6b:43:6e:89:5c:9b:55:46:f9:da:c8:69:40:b0:4a:1a:7a:
ea:ec:65:aa:43:b0:d2:6d:84:ae:88:ab:f1:d5:01:8a:e4:d3:
4c:93:c9:f0:a4:62:6f:b7:c4:03:92:43:9c:73:ac:b3:b3:fb:
bf:fc:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:33 2025 by rpki-client