Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QJqf5pL7wVtjuhvUjpwYenic8hM.roa
File: QJqf5pL7wVtjuhvUjpwYenic8hM.roa (raw, json)
Hash identifier: l+m0OERJwpKXk0LQuccg/VpVkNC0Ls/n8sHP6BK30xQ=
Subject key identifier: 40:9A:9F:E6:92:FB:C1:5B:63:BA:1B:D4:8E:9C:18:7A:78:9C:F2:13
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019A3A02D2E9F544CAFB1B4BE6282349967A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QJqf5pL7wVtjuhvUjpwYenic8hM.roa
Signing time: Fri 31 Oct 2025 11:24:14 +0000
ROA not before: Fri 31 Oct 2025 11:24:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50716
IP address blocks: 93.171.72.0/22 maxlen: 24
146.158.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:02:d2:e9:f5:44:ca:fb:1b:4b:e6:28:23:49:96:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 31 11:24:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=409a9fe692fbc15b63ba1bd48e9c187a789cf213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:9c:bb:fc:bd:5c:7f:08:b8:84:a5:55:02:
16:90:7f:32:78:3c:f4:69:1c:61:fd:33:1e:9c:4d:
f4:b2:39:91:70:41:83:79:ac:14:d2:bc:7b:cd:c9:
cf:4b:4a:fe:0b:99:6f:99:45:20:f5:75:3a:52:63:
84:36:c3:2c:fd:e8:01:86:16:0e:67:f9:72:fe:a1:
5b:67:3f:ca:65:ea:b6:1b:52:69:48:c7:63:af:a2:
22:ce:ea:aa:6e:3a:91:15:d5:40:ae:1d:b2:fa:d4:
e6:54:83:38:11:4d:69:4b:74:64:80:a2:55:b4:9f:
2d:84:c7:d3:16:e5:58:51:b6:3f:82:e2:1a:04:72:
35:c2:71:4d:30:be:29:64:a2:78:e9:d5:d8:f5:6a:
e5:23:21:d1:35:f7:21:d4:c1:48:71:52:9a:4d:5e:
32:6b:fa:3c:66:81:c8:83:20:44:c0:99:fb:91:ca:
75:7a:be:13:d6:cc:a6:51:3d:0a:3e:2c:2c:60:9e:
40:78:8d:6b:ca:d3:e7:75:87:c2:8d:51:3f:e9:b1:
58:3d:b1:0c:7c:b1:6d:0c:6e:09:bc:e6:51:f5:03:
a4:e5:b7:8a:d1:67:3d:d4:a2:c5:9f:de:5f:cd:e4:
cc:40:26:ad:34:af:5c:53:e8:0b:fa:a9:9b:a3:56:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9A:9F:E6:92:FB:C1:5B:63:BA:1B:D4:8E:9C:18:7A:78:9C:F2:13
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QJqf5pL7wVtjuhvUjpwYenic8hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.72.0/22
146.158.80.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:9f:cb:3f:a5:7e:a1:9b:cf:1b:15:c9:c5:fe:09:64:b5:72:
82:e9:2f:af:7e:42:16:41:64:64:80:aa:7c:59:c8:1c:9b:72:
47:1d:26:12:d8:7b:00:fa:e0:80:de:ab:6f:f0:77:c3:41:89:
e3:21:99:29:3b:8b:f0:90:c5:17:ab:14:18:65:24:cb:40:c8:
b3:78:6d:af:94:74:37:c2:84:cb:2e:f6:10:73:08:5a:15:d0:
2a:51:4b:a3:4c:a5:68:d5:d8:8c:93:c2:d5:17:d8:77:30:fd:
b8:92:b5:b2:da:00:55:2e:05:c5:8f:3b:ba:35:72:b5:4a:67:
b8:53:a0:b3:52:c1:dc:2b:2c:79:2e:83:36:d3:09:c4:e2:c9:
f3:d8:46:bf:a3:8f:32:56:aa:79:c3:cf:df:36:ad:c3:74:33:
16:71:6e:3e:31:c1:f1:38:ed:1d:b2:87:8e:01:e9:82:aa:a0:
10:e4:7a:11:1d:bb:23:5f:3e:4d:f8:31:16:7f:8f:aa:69:ff:
52:55:d2:8f:fa:03:30:cd:80:16:9f:6f:fe:a5:ac:17:ae:fb:
6d:91:0f:91:c0:db:37:57:ae:2f:55:43:4f:4c:9b:98:81:6b:
f6:ff:26:fd:73:07:af:4c:74:6a:51:2f:5d:72:3d:ff:3a:1f:
7b:d3:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:06 2025 by rpki-client