Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QFxq7ECBOJbycIreUWnCdfJSYps.roa
File: QFxq7ECBOJbycIreUWnCdfJSYps.roa (raw, json)
Hash identifier: BnnGJdpKCv0Qi6l+asYtZ+CYg1n5Vilrn8spEb5QnF0=
Subject key identifier: 40:5C:6A:EC:40:81:38:96:F2:70:8A:DE:51:69:C2:75:F2:52:62:9B
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01985104CA80A6821F7605FF21D0C6DC7B8D
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QFxq7ECBOJbycIreUWnCdfJSYps.roa
Signing time: Mon 28 Jul 2025 12:32:05 +0000
ROA not before: Mon 28 Jul 2025 12:32:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215862
IP address blocks: 82.177.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:04:ca:80:a6:82:1f:76:05:ff:21:d0:c6:dc:7b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jul 28 12:32:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=405c6aec40813896f2708ade5169c275f252629b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:50:ff:56:59:57:6a:76:74:f2:6d:fb:3d:
57:5d:bb:f5:37:b6:55:17:3b:9f:99:88:1b:f0:56:
58:9d:8f:59:2b:78:15:1c:c5:2d:b4:a9:8d:17:3b:
43:a1:60:4b:4f:7f:4d:c0:11:66:b8:3b:93:04:47:
fe:bf:0b:86:ca:27:20:ee:30:2b:7b:42:fe:58:c9:
2c:b1:7b:57:ba:bd:96:86:d6:d6:08:fa:78:a8:f4:
6f:e8:31:39:f8:5a:5c:cc:57:a2:3c:1e:be:4a:5b:
14:a5:1d:ff:ea:c0:f3:13:94:44:04:5c:53:fb:dc:
cb:69:f3:1d:e0:c9:79:f9:dd:02:cd:c4:ce:73:9e:
8e:db:96:5b:99:16:e2:b7:60:ba:ad:14:49:b2:ea:
24:59:7b:5f:8a:e8:d9:3e:61:ea:68:fc:0f:f1:46:
fa:85:86:a8:43:30:85:ef:5a:44:ce:50:9d:b6:75:
8a:4e:df:ca:52:6e:61:d6:f1:4a:dc:9f:d0:d3:8e:
1d:a2:4f:be:5f:b5:6e:d6:06:02:78:44:de:63:5f:
5a:c9:4e:6c:a5:db:3d:c0:f2:4a:53:74:90:00:07:
1c:a6:c6:75:13:e2:f0:4f:0a:67:16:dd:10:3c:74:
99:20:1b:6a:cc:1f:d6:5c:c7:41:4a:a7:a8:ca:bf:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5C:6A:EC:40:81:38:96:F2:70:8A:DE:51:69:C2:75:F2:52:62:9B
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QFxq7ECBOJbycIreUWnCdfJSYps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:88:37:a3:9f:68:d6:1a:3f:a9:25:62:f6:2a:3b:9c:d5:da:
37:8e:29:5e:d9:13:5e:09:7d:79:06:68:3e:ba:90:f6:9b:59:
7d:7f:0e:8b:f6:5a:93:45:5c:b8:47:5d:cd:c2:4a:a4:f8:e5:
76:30:f1:e1:7a:ae:6b:4b:77:1a:92:70:c1:f2:e6:19:38:6b:
9d:e3:96:55:42:11:af:09:6f:e7:9c:0a:0b:7d:36:e7:8f:c7:
c8:c0:58:39:22:9c:d7:16:0e:79:53:a5:c1:72:0a:d3:f2:72:
11:90:81:71:19:e8:66:5c:cb:9f:06:0d:8d:0f:85:ce:3e:a0:
ca:fb:fc:5d:ef:47:f3:1a:ca:65:f0:6f:10:54:c8:13:7a:bf:
ae:b0:e8:1c:06:65:7f:04:35:b2:28:aa:b2:c1:95:1f:93:99:
07:68:7e:2f:7f:7f:3f:85:25:94:19:6e:55:fe:47:dc:d6:44:
b1:88:bd:ce:27:58:22:52:f5:b9:bd:71:9d:95:3d:fb:83:c3:
0f:73:d4:62:d8:f4:e4:7f:30:63:69:06:2c:3b:ab:84:c9:5e:
d9:2a:0f:00:81:7f:cb:64:5f:86:bf:fa:24:ed:37:da:68:9e:
71:ea:ca:0f:b0:cb:8f:aa:a5:fd:20:19:d2:dd:a0:78:15:cd:
05:75:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:18:37 2025 by rpki-client