Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/QMCQYM6KLwMrhUyf5iYVPa2Vy4o.roa
File: QMCQYM6KLwMrhUyf5iYVPa2Vy4o.roa (raw, json)
Hash identifier: SzWr8zdcPAyWkLaDiuc219DsXOdQP+mExV/Svz/jWNo=
Subject key identifier: 40:C0:90:60:CE:8A:2F:03:2B:85:4C:9F:E6:26:15:3D:AD:95:CB:8A
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019A1192C6FA5C293C3641601D07B975C980
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/QMCQYM6KLwMrhUyf5iYVPa2Vy4o.roa
Signing time: Thu 23 Oct 2025 14:57:03 +0000
ROA not before: Thu 23 Oct 2025 14:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200564
IP address blocks: 193.222.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:92:c6:fa:5c:29:3c:36:41:60:1d:07:b9:75:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Oct 23 14:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40c09060ce8a2f032b854c9fe626153dad95cb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:10:44:18:ae:b9:cb:b1:8e:67:37:cf:a8:
48:00:6d:69:4f:3c:70:28:a2:08:89:9b:bf:1b:64:
5a:43:1a:89:73:68:95:32:5e:ad:22:77:46:6d:36:
85:63:11:b8:89:ce:a2:24:f6:d5:3d:1f:30:0c:7b:
84:9b:c4:2d:27:ef:9d:46:a4:7e:25:d7:5b:f1:b7:
a5:77:a3:00:31:06:81:3e:e7:69:6e:ee:02:4a:99:
8b:80:84:72:15:6e:66:dc:ae:80:42:8f:71:c2:c2:
32:4f:49:c8:ec:fc:32:22:51:11:0e:8d:8d:ba:14:
c4:29:8f:89:42:c3:42:e3:32:a6:da:ce:23:fe:66:
71:87:c5:28:ec:df:32:7f:b0:27:32:16:09:90:07:
0e:38:d5:e1:56:46:a3:b9:67:ea:d0:22:d3:5a:9d:
80:85:2d:f9:ba:dc:3d:25:a6:eb:25:a1:ea:8f:9a:
a2:2c:cb:bc:e2:04:16:94:7e:25:d6:b2:95:dc:93:
56:84:37:3b:6e:44:b6:f3:cd:d6:99:8d:59:62:e9:
95:b0:5f:e1:fb:83:00:31:de:a3:a9:12:59:97:aa:
4d:5d:38:fb:a3:3c:75:bb:1d:1e:b1:63:bd:07:64:
96:05:38:12:4f:fa:ba:5a:5d:e4:e9:e0:d8:97:7e:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:90:60:CE:8A:2F:03:2B:85:4C:9F:E6:26:15:3D:AD:95:CB:8A
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/QMCQYM6KLwMrhUyf5iYVPa2Vy4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.61.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3a:23:76:ca:26:97:ab:d3:25:a4:b3:5b:19:01:46:87:cc:
ee:6d:99:0e:21:28:b5:2d:e0:29:97:68:35:43:b8:97:2e:2e:
fb:1c:e1:e0:11:83:50:5a:88:04:eb:47:33:c3:5c:e0:e5:ab:
be:6c:cc:af:7d:3a:0f:ee:02:df:14:fb:ac:6c:0a:64:f1:d3:
77:b0:6e:99:2f:6d:d1:87:bd:81:2b:8e:cb:e4:f1:2a:fa:d9:
06:c3:81:66:b4:75:5e:b1:18:01:b8:ae:5c:99:41:57:ae:97:
3c:39:cc:13:a9:a0:0c:59:5f:25:e4:4d:2b:83:e9:1f:06:65:
7e:04:67:ba:10:8f:0c:dc:b4:51:46:9f:18:0f:49:6f:7c:2a:
5e:61:0c:89:1d:2e:8f:72:c2:c4:30:f0:d9:8f:6c:a9:3c:8f:
f7:8a:57:02:de:e7:67:cc:ea:86:e6:84:59:8e:37:d0:c0:d7:
ca:32:95:67:e6:11:e5:f5:ce:5d:50:f2:7d:c4:1c:7a:a6:6e:
79:d6:b0:c9:23:1f:f9:3d:a2:b9:3a:d9:05:c8:b2:c2:dd:59:
a1:57:70:99:cc:29:b2:8d:7d:e0:83:16:49:51:ff:aa:c3:cb:
c6:86:8c:0d:c9:12:a8:91:40:56:d1:ed:f0:c7:7f:bc:c9:5e:
17:90:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:01:43 2025 by rpki-client