Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/xqT_w2QIz7QngYO0UjYqCZFOQm8.roa
File: xqT_w2QIz7QngYO0UjYqCZFOQm8.roa (raw, json)
Hash identifier: voqA9hVWd7OTxS2rJiecPACQATaq8yqLIFOOJeCGw4c=
Subject key identifier: C6:A4:FF:C3:64:08:CF:B4:27:81:83:B4:52:36:2A:09:91:4E:42:6F
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 01985F2DBA2E1D8A3EC65ACEF19612FDE3A4
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/xqT_w2QIz7QngYO0UjYqCZFOQm8.roa
Signing time: Thu 31 Jul 2025 06:31:28 +0000
ROA not before: Thu 31 Jul 2025 06:31:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61136
IP address blocks: 185.17.240.0/22 maxlen: 24
185.253.132.0/22 maxlen: 24
2a14:4300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:2d:ba:2e:1d:8a:3e:c6:5a:ce:f1:96:12:fd:e3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Jul 31 06:31:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6a4ffc36408cfb4278183b452362a09914e426f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:e8:26:72:34:b7:a1:be:bc:db:60:b7:f8:
5e:64:0f:66:7b:a1:67:32:46:80:25:a9:03:2e:2c:
da:92:8a:24:92:50:69:db:ec:fa:db:98:2d:08:ca:
3e:0c:b6:12:31:eb:17:3a:68:e7:71:ef:2b:f9:cc:
c2:5b:a4:98:0f:4e:be:ac:b9:0f:93:70:f2:ec:89:
59:fb:4c:72:35:7c:fc:e7:71:24:96:d4:00:15:92:
f8:4e:c1:f1:fd:06:f1:c6:33:21:fc:43:3b:cf:94:
cb:80:4c:50:41:98:a1:3a:ad:1c:88:1e:cc:57:3f:
76:b8:ce:4c:7b:63:dc:16:96:04:33:e6:77:2f:89:
74:d0:27:b0:8f:6d:93:30:f9:e7:86:ea:33:24:af:
e8:59:4e:80:09:b4:ee:d5:bd:e5:02:7a:97:11:60:
ce:02:92:76:a6:d5:dc:a8:79:8f:74:d8:04:99:94:
bd:85:0b:68:29:35:63:84:26:56:ec:b0:69:ce:79:
7c:9e:4b:8f:ca:5a:ae:47:a6:7e:66:4d:0a:d0:75:
6a:7a:54:a9:17:6e:38:8d:f4:06:bc:57:a8:ec:6d:
64:62:ef:72:77:93:58:0c:e6:b0:aa:b4:03:6f:85:
e5:02:cf:46:2f:c4:4b:9e:49:03:c5:53:9c:f5:65:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A4:FF:C3:64:08:CF:B4:27:81:83:B4:52:36:2A:09:91:4E:42:6F
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/xqT_w2QIz7QngYO0UjYqCZFOQm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.240.0/22
185.253.132.0/22
IPv6:
2a14:4300::/29
Signature Algorithm: sha256WithRSAEncryption
50:77:32:4c:44:5f:51:27:88:82:d6:0e:f9:0e:bf:c5:cc:de:
bb:a2:ad:14:5b:ad:27:72:03:6a:2f:75:74:be:9a:d9:7d:7d:
ed:bf:92:60:b7:14:95:01:94:95:80:b1:a1:73:b0:3b:7d:ed:
57:09:14:aa:a5:e7:b7:08:ea:6b:d5:56:51:0e:26:90:a0:a5:
fd:52:b8:84:f3:e4:0d:2f:c3:eb:df:b0:98:67:e4:c1:d8:e9:
f2:59:71:35:10:89:6a:54:59:7a:47:4b:44:78:2d:bd:36:b1:
3b:23:de:24:8b:c2:e0:0b:c6:69:ff:62:74:7a:21:34:a0:8b:
29:3f:5e:8b:31:93:bb:13:94:fe:8d:29:8a:3c:4f:c0:68:bf:
69:73:b6:20:f7:61:4f:ef:4a:b6:f0:23:1b:0b:92:0d:a4:3b:
96:b6:33:5e:c6:2c:3f:6f:fe:9d:46:0d:b5:f0:c3:ca:c3:2c:
61:39:c3:a4:61:cf:a9:09:88:34:c7:df:34:19:ad:44:2f:20:
4e:c5:44:24:82:fd:4f:f5:64:0e:ab:42:8c:38:31:a2:ef:90:
9d:44:95:b5:19:21:22:d5:34:dc:c4:7f:a9:e3:a1:ba:74:8c:
9e:b8:57:91:d8:ea:37:7e:53:d8:56:e8:f6:20:43:42:a0:7d:
b0:47:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:14:02 2025 by rpki-client