Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Q0LZutaDrMoV1lYaVEolJqsO1t4.roa
File: Q0LZutaDrMoV1lYaVEolJqsO1t4.roa (raw, json)
Hash identifier: kKJXUTwmKADftlwqv1YuY5uTQInQBCKLDsM24NZmSa0=
Subject key identifier: 43:42:D9:BA:D6:83:AC:CA:15:D6:56:1A:54:4A:25:26:AB:0E:D6:DE
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 019A50CD4D0C377310CF5F8FC3269912969D
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Q0LZutaDrMoV1lYaVEolJqsO1t4.roa
Signing time: Tue 04 Nov 2025 21:37:03 +0000
ROA not before: Tue 04 Nov 2025 21:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60711
IP address blocks: 89.29.190.0/23 maxlen: 23
89.29.247.0/24 maxlen: 24
185.250.197.0/24 maxlen: 24
213.181.92.0/23 maxlen: 23
213.181.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:cd:4d:0c:37:73:10:cf:5f:8f:c3:26:99:12:96:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Nov 4 21:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4342d9bad683acca15d6561a544a2526ab0ed6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:ba:fc:67:99:ab:d0:94:68:de:fb:0a:f1:
09:b5:47:61:8b:8a:1f:60:19:f2:47:84:07:b1:a0:
41:c2:b7:33:c6:69:da:44:20:1e:8a:45:31:e5:dc:
2a:74:66:52:d7:48:bc:5e:68:f9:fe:dc:27:ff:c0:
c8:47:3d:6c:cd:7f:65:51:53:ba:81:43:cc:0d:99:
a5:9e:20:85:89:3e:8e:a1:bc:38:71:f4:fb:5c:62:
ac:86:f3:33:21:91:12:56:14:0b:3f:02:09:7d:04:
3e:5d:ad:1f:70:3b:da:b3:77:f7:9d:aa:aa:78:d1:
37:6e:6f:b1:be:01:b5:84:7a:6e:81:e9:bc:e7:00:
08:d6:19:29:24:da:ed:32:2f:92:f6:e9:e1:24:e2:
4e:19:3f:19:1f:4e:ad:17:96:a0:24:1b:43:eb:f6:
f3:3b:11:d2:25:b5:a2:67:54:8e:f5:3d:fe:f1:44:
9f:09:04:42:ec:0a:57:1e:70:61:94:12:ee:7c:2a:
c4:f1:d6:9c:67:cd:ab:e8:60:d5:e0:4d:23:40:c1:
26:e9:05:e8:55:3d:62:d5:c4:e7:50:fd:e3:b8:6d:
b2:d4:16:8d:ec:48:22:66:5a:f8:f5:e6:9a:1c:d1:
51:10:da:0f:48:4e:a1:e7:60:52:31:5f:e7:81:d6:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:42:D9:BA:D6:83:AC:CA:15:D6:56:1A:54:4A:25:26:AB:0E:D6:DE
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Q0LZutaDrMoV1lYaVEolJqsO1t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.190.0/23
89.29.247.0/24
185.250.197.0/24
213.181.92.0-213.181.94.255
Signature Algorithm: sha256WithRSAEncryption
01:8b:05:95:c9:4e:60:d2:bd:cf:28:2d:ab:6f:23:c2:dd:21:
f9:a6:3b:78:ed:40:60:3c:c6:fe:04:7b:b7:6a:54:4e:13:99:
63:fd:76:bf:9c:f2:17:01:b9:50:35:9f:77:be:b6:93:20:30:
98:15:63:aa:3b:d3:38:9a:7e:bd:c4:6b:c4:92:10:8f:aa:c3:
9e:24:46:53:91:a9:9a:ba:3a:15:b3:d7:36:18:95:af:c6:fc:
70:6a:80:62:bb:40:bc:cc:a6:1f:5a:da:eb:9e:50:f8:e1:2e:
48:a3:4f:f2:6e:f6:19:79:d0:a0:d6:ac:a4:a4:f8:f1:3c:02:
a3:bc:ab:31:ba:0a:81:4c:0f:c3:30:15:ff:6a:9e:63:c1:a5:
88:60:fc:09:48:ce:a8:71:2a:c6:b5:bf:01:87:19:13:d9:b9:
59:c7:f3:7f:f1:c2:fd:e3:06:e3:13:7a:a5:d7:e2:0b:09:ca:
3b:4c:18:e1:04:42:53:9e:04:0a:20:a3:fa:17:a5:5b:e7:00:
11:77:34:54:4b:e8:fa:8f:db:ee:5e:d8:cc:39:11:62:2c:f2:
87:fb:58:b1:62:95:2d:a5:df:84:ea:4e:e9:33:4f:dd:4c:3a:
97:f6:b0:eb:40:a3:44:e1:83:2e:ae:aa:c0:02:f3:dc:1e:a1:
10:a8:0d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:12:06 2025 by rpki-client