Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/Qw7YYmo8Mf_SYoj9xXYve2Po5mo.roa
File: Qw7YYmo8Mf_SYoj9xXYve2Po5mo.roa (raw, json)
Hash identifier: MFZ45SF5Rc4M+oQuJ6ydMNsNfmBIGzpqiYFUJ97A20U=
Subject key identifier: 43:0E:D8:62:6A:3C:31:FF:D2:62:88:FD:C5:76:2F:7B:63:E8:E6:6A
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 019A2A95F9C55FC6BD43BFF6583101B2ECCD
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/Qw7YYmo8Mf_SYoj9xXYve2Po5mo.roa
Signing time: Tue 28 Oct 2025 11:31:03 +0000
ROA not before: Tue 28 Oct 2025 11:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202561
IP address blocks: 195.62.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:95:f9:c5:5f:c6:bd:43:bf:f6:58:31:01:b2:ec:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Oct 28 11:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=430ed8626a3c31ffd26288fdc5762f7b63e8e66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:83:6f:2c:ae:3a:62:e0:65:36:fa:e0:01:
92:cc:5a:95:26:06:d3:60:e8:3c:65:6c:cb:cf:0b:
2d:ad:8f:8d:cd:55:dd:5a:e4:ff:af:fe:5e:84:94:
11:c3:7f:e2:9e:e5:c3:55:32:cf:9a:20:9e:60:6f:
6c:23:78:27:5a:07:c7:51:77:2e:ca:7a:de:2f:34:
e1:e7:04:11:2c:b8:06:5e:c5:53:bc:c5:8b:fa:26:
1b:d2:df:49:54:11:6e:2d:90:ae:46:74:8e:17:b2:
ab:19:58:d1:ce:7a:5f:ce:26:8c:23:1c:76:5f:da:
88:ba:96:c6:e0:f5:73:b7:f2:12:59:ee:d0:6e:b7:
2e:16:ac:dd:55:e2:a1:78:fa:a7:f5:33:48:65:55:
e8:e0:58:56:86:24:90:81:f6:84:92:1d:de:60:be:
68:52:9d:32:83:a1:f1:bf:54:b7:48:ad:9c:e9:6b:
3c:17:c3:cf:c3:bf:79:0e:76:a9:ef:f1:f2:d7:60:
a8:05:d4:34:86:e3:45:fb:a4:13:e7:c8:3e:32:a4:
c4:f1:5f:b7:ad:e3:2d:68:4d:94:1e:ac:6e:63:90:
70:63:55:d8:27:de:44:2f:cb:2a:ea:ad:a6:2d:4b:
c4:99:77:40:1a:d6:5b:a9:59:88:a7:9c:8f:e0:b6:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0E:D8:62:6A:3C:31:FF:D2:62:88:FD:C5:76:2F:7B:63:E8:E6:6A
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/Qw7YYmo8Mf_SYoj9xXYve2Po5mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:df:f0:22:60:72:ee:5d:0e:46:1b:36:5f:4f:39:84:11:21:
20:8e:c6:51:a1:ad:ac:ad:9f:df:a2:2f:78:5d:68:5d:90:74:
10:28:38:39:8b:51:db:bd:f6:db:cf:b5:b8:89:3e:8e:55:07:
5a:14:9e:59:2a:35:58:f0:f3:b7:23:26:04:ec:7e:46:b0:5b:
6d:d1:49:fc:50:39:5f:e9:9a:c1:e1:e8:8f:d4:7a:4e:d4:06:
ce:83:0e:87:16:f3:f3:43:c0:cd:ee:d7:04:28:4d:dc:9f:ba:
ff:d5:79:6c:a1:b2:10:46:70:3d:23:44:e6:57:b0:1d:45:ba:
42:86:b7:54:af:89:5c:37:b9:c8:55:19:e3:23:79:1e:2a:b7:
8b:49:b7:6f:3d:9d:98:e6:03:d1:d6:ac:82:48:06:32:37:3d:
af:a9:c5:34:43:81:6c:ba:a4:a4:78:43:1b:be:8b:f7:a1:49:
fe:b4:02:05:af:b0:66:1b:ef:9b:49:fe:9e:fa:fd:ad:0e:5a:
bc:80:04:df:9a:7c:fa:89:9e:fb:45:20:35:a7:34:7d:8e:71:
d7:32:2a:d7:bf:b2:a9:bf:eb:a6:40:70:11:ca:b6:89:37:c5:
cd:b7:bc:84:e2:f2:7c:8e:bb:1e:c8:35:ca:60:20:af:63:51:
b7:6e:dd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:05:55 2025 by rpki-client