Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/QQr8dSdla33R9gVFyh83mzea4FI.roa
File: QQr8dSdla33R9gVFyh83mzea4FI.roa (raw, json)
Hash identifier: 2OgrfSmCdtssSO9KY+C8q6T3dfpnZAJiAzm5n74cRu4=
Subject key identifier: 41:0A:FC:75:27:65:6B:7D:D1:F6:05:45:CA:1F:37:9B:37:9A:E0:52
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0198568ABAC19AC46C40EC33725E8EB03C09
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/QQr8dSdla33R9gVFyh83mzea4FI.roa
Signing time: Tue 29 Jul 2025 14:16:28 +0000
ROA not before: Tue 29 Jul 2025 14:16:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 91.195.242.0/23 maxlen: 24
124.198.192.0/19 maxlen: 24
139.66.0.0/16 maxlen: 24
147.204.0.0/16 maxlen: 24
155.56.0.0/16 maxlen: 24
194.39.128.0/21 maxlen: 24
194.39.136.0/22 maxlen: 24
194.45.236.0/23 maxlen: 24
194.55.88.0/22 maxlen: 24
217.77.240.0/20 maxlen: 24
2a00:fe00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:8a:ba:c1:9a:c4:6c:40:ec:33:72:5e:8e:b0:3c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jul 29 14:16:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=410afc7527656b7dd1f60545ca1f379b379ae052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:34:ce:91:f1:72:18:3f:78:99:b9:ee:3b:
47:f4:b9:72:8e:f2:07:5c:38:25:26:48:78:3e:53:
cd:df:4a:ad:b3:b0:6c:36:75:84:88:cd:f4:d1:f9:
3b:d7:2c:5d:81:c7:7b:44:32:0c:18:6b:5e:69:a5:
5a:fd:e9:4a:80:b5:33:7e:f1:3b:da:2b:1c:10:05:
4a:9b:1a:ae:6f:b0:67:50:2b:2b:93:3f:6b:51:c3:
6d:c9:53:b1:63:71:f7:0e:57:4d:da:59:e4:76:1d:
a2:bd:62:bd:37:da:b3:e4:cb:0f:44:19:b6:f9:0f:
d1:b5:f8:ef:02:c0:ca:4d:eb:20:2c:e6:66:1b:96:
87:30:e4:1a:72:cc:b6:ef:4d:1a:aa:20:a7:2d:4f:
bc:81:60:06:9c:66:a3:93:89:70:f9:e5:7b:57:ee:
8d:63:75:97:ff:41:d3:48:4c:cb:57:17:29:9d:32:
5e:ee:f4:1a:f9:7c:6d:10:60:e5:1c:48:e2:d9:e5:
64:7f:be:09:47:7d:f5:19:2e:10:66:8a:d1:01:49:
62:77:5c:3b:be:df:6d:a8:f0:1e:34:f6:3b:dd:51:
f6:8e:c1:62:69:89:30:dd:e3:80:37:a9:da:c6:f6:
b3:06:6f:f9:44:33:77:61:72:b1:76:07:57:e8:db:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0A:FC:75:27:65:6B:7D:D1:F6:05:45:CA:1F:37:9B:37:9A:E0:52
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/QQr8dSdla33R9gVFyh83mzea4FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.242.0/23
124.198.192.0/19
139.66.0.0/16
147.204.0.0/16
155.56.0.0/16
194.39.128.0-194.39.139.255
194.45.236.0/23
194.55.88.0/22
217.77.240.0/20
IPv6:
2a00:fe00::/32
Signature Algorithm: sha256WithRSAEncryption
50:f0:59:64:d2:ee:32:1e:81:c2:31:92:23:61:66:4a:20:b5:
2f:7a:33:99:cb:0f:41:e7:51:cf:67:4c:4a:54:be:23:76:ac:
22:8e:15:80:99:a5:51:d8:fd:da:89:e7:c5:90:2c:ff:f4:ca:
16:82:be:8c:27:3f:51:de:a4:59:4d:5f:dd:aa:1e:70:81:56:
75:1b:ed:f6:c4:e5:54:d1:3e:f9:45:b4:09:9d:27:1b:2a:48:
44:4b:e6:90:8e:7b:bd:d0:54:ae:d7:e0:14:2f:68:e4:4e:31:
e3:44:58:ee:80:76:03:49:9a:08:d1:01:ec:32:6f:38:25:70:
63:8c:83:41:24:70:86:e3:cc:1d:66:78:68:05:75:68:fb:d2:
af:c0:9e:32:15:fd:f9:84:18:d4:50:88:ec:01:3e:5c:c5:be:
70:c7:0c:29:d5:58:53:e3:dd:bf:e2:18:04:de:08:f9:49:8f:
53:c7:94:24:59:18:a7:49:ac:54:5e:f1:d4:63:26:62:9c:a8:
96:c4:02:81:d2:21:56:27:bd:91:0f:c8:25:16:3a:1c:7a:ea:
a2:5d:31:14:7b:31:e8:4d:87:82:69:ae:75:1d:a8:fd:71:c6:
54:60:c5:05:47:05:15:50:a2:ca:9f:e3:4c:a0:b9:4d:fa:79:
6c:76:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:46:17 2025 by rpki-client