Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/QREl75-pSDzY1cGp7JFGJZqBbdk.roa
File: QREl75-pSDzY1cGp7JFGJZqBbdk.roa (raw, json)
Hash identifier: 8F8IjWrIbjzgy41ElzsTSysUdH3FvkTJCpcji0/HmYc=
Subject key identifier: 41:11:25:EF:9F:A9:48:3C:D8:D5:C1:A9:EC:91:46:25:9A:81:6D:D9
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 01975DA1DAEAC676FC1516358A64A9A99342
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/QREl75-pSDzY1cGp7JFGJZqBbdk.roa
Signing time: Wed 11 Jun 2025 06:16:17 +0000
ROA not before: Wed 11 Jun 2025 06:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 89.23.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:a1:da:ea:c6:76:fc:15:16:35:8a:64:a9:a9:93:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Jun 11 06:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=411125ef9fa9483cd8d5c1a9ec9146259a816dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:29:e9:04:1d:97:d7:41:23:4a:f2:42:48:
cf:97:ab:3e:af:15:2d:b1:55:fb:80:d8:8e:76:95:
18:bb:6a:23:e0:67:c4:3b:da:4a:d3:d5:ff:fd:6a:
83:6e:63:47:1b:d5:3e:6b:eb:05:eb:86:8a:95:55:
02:ac:ea:95:5d:34:c4:35:b7:7b:7d:bf:7f:6d:03:
16:8b:ee:f0:99:4f:2a:f6:38:de:f0:50:21:cc:0d:
5e:0b:57:cd:d4:db:3a:a2:1a:4c:21:48:4f:a0:e6:
a9:d7:4c:00:d4:1b:b5:83:9c:ed:98:4e:7d:55:b0:
eb:1b:8c:b3:43:19:28:73:10:b8:bd:5e:24:a6:7c:
4e:66:5d:d6:de:ad:20:42:ff:96:e9:3b:42:40:f5:
40:5f:90:47:e3:40:b3:23:87:de:6f:fb:20:fd:df:
96:bd:2c:d3:ed:a6:3c:59:0c:df:a7:3a:67:d5:0c:
6f:ad:03:7c:98:bd:b0:42:04:14:5a:66:9a:64:3d:
82:34:5b:6c:c2:c5:d8:99:ca:77:a3:27:ce:de:ec:
21:1f:3a:98:0a:52:51:12:7e:4d:db:ba:4d:78:54:
ef:80:ca:63:5d:b5:de:55:fd:eb:df:f0:1e:31:ee:
45:c7:d4:1f:c4:bd:64:c6:c8:49:6a:9d:0f:4e:5d:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:11:25:EF:9F:A9:48:3C:D8:D5:C1:A9:EC:91:46:25:9A:81:6D:D9
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/QREl75-pSDzY1cGp7JFGJZqBbdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.126.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a6:a2:e3:dc:43:e5:ef:7b:c4:6e:d2:60:e1:f8:fc:63:76:
63:54:95:35:c0:cf:fd:19:02:ac:05:1b:a3:78:08:61:3f:9e:
8e:a8:ec:8f:c7:b7:13:b7:1e:67:f1:f1:9d:9c:47:c9:0c:64:
89:dd:c5:21:9b:29:bf:66:b9:6a:ce:c7:9a:31:f5:c3:41:af:
fc:64:7b:cf:db:10:31:36:07:29:30:6d:1a:16:b7:64:12:31:
2d:62:91:c5:6a:e7:8c:2f:d2:14:e6:f0:c9:93:0a:51:b9:8e:
61:fe:fe:a7:60:3e:fa:3f:39:5b:96:be:fe:0f:79:2a:69:72:
e5:08:54:4d:aa:bd:72:9c:67:60:73:68:54:12:24:17:37:95:
75:c1:95:af:85:ef:f5:5b:84:13:1b:33:74:62:58:e5:49:ec:
1d:61:18:87:2d:e4:6b:83:c2:2b:f6:a3:f2:6f:26:63:35:73:
7a:a1:03:6c:42:23:cc:5b:19:2b:16:6b:78:fe:18:e3:24:75:
17:0d:fc:18:61:d1:31:80:66:c2:51:bf:02:23:c2:1f:6c:5d:
4f:d3:73:19:92:1c:bf:91:21:a8:cd:f6:b2:5e:6b:3a:88:9d:
a0:ac:86:f0:36:46:60:bd:30:a1:e0:66:5d:f4:15:68:2e:64:
d0:f0:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:39:54 2025 by rpki-client