Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/qWkk27a5ML5BBzme8jmE_4qWjhQ.roa
File: qWkk27a5ML5BBzme8jmE_4qWjhQ.roa (raw, json)
Hash identifier: qohq4ceyOT+bPhnZlxjB54XXzh9rIOiZ1GQ8xiWuUj4=
Subject key identifier: A9:69:24:DB:B6:B9:30:BE:41:07:39:9E:F2:39:84:FF:8A:96:8E:14
Certificate issuer: /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial: 019A3026B258553CCFEC3683BB119DCF77CC
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/qWkk27a5ML5BBzme8jmE_4qWjhQ.roa
Signing time: Wed 29 Oct 2025 13:27:13 +0000
ROA not before: Wed 29 Oct 2025 13:27:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61424
IP address blocks: 45.129.141.0/24 maxlen: 24
130.49.160.0/22 maxlen: 24
2a09:31c0:beef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:26:b2:58:55:3c:cf:ec:36:83:bb:11:9d:cf:77:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Validity
Not Before: Oct 29 13:27:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a96924dbb6b930be4107399ef23984ff8a968e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:f5:bc:e9:b5:8f:5e:fa:df:fe:ee:0a:51:
c5:31:d8:b1:17:71:9a:d1:79:cd:5a:21:b7:7b:c1:
54:67:f4:13:3b:da:51:c8:51:f4:bb:73:b1:3b:6d:
14:6d:0e:4d:35:20:e8:63:cb:0c:e9:57:7b:35:25:
2c:a2:4a:83:e5:1f:8a:ce:c4:34:0c:50:d6:36:2b:
5e:ae:62:a9:ed:e4:02:ca:d4:b3:a9:ff:31:9a:c8:
bf:b1:57:3b:29:39:4b:fd:71:b1:09:20:5a:7a:4e:
d1:b0:c0:44:e2:2d:3a:1a:51:ce:ae:69:31:b6:15:
e2:35:08:cb:8e:ed:0d:3a:b8:69:22:e6:ba:ae:b7:
2d:bd:b4:04:91:20:88:17:e7:38:41:c1:2f:be:10:
ff:cf:8c:14:0c:0c:e5:bd:bf:9e:75:65:72:70:10:
dd:d0:ce:2f:79:05:63:aa:e5:b5:d7:ce:d0:e3:56:
5a:ef:88:dc:25:66:69:64:8e:a7:eb:65:66:43:75:
3c:95:76:eb:a4:f4:bb:66:05:40:b2:ba:ca:02:04:
43:51:dd:34:75:49:3f:2b:47:c6:ec:6c:fe:81:69:
e0:3a:89:0f:55:ee:47:54:d2:41:2c:9d:b5:0e:72:
48:83:cd:3a:ba:c4:48:11:84:5a:a9:29:c8:59:d0:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:24:DB:B6:B9:30:BE:41:07:39:9E:F2:39:84:FF:8A:96:8E:14
X509v3 Authority Key Identifier:
keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/qWkk27a5ML5BBzme8jmE_4qWjhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.141.0/24
130.49.160.0/22
IPv6:
2a09:31c0:beef::/48
Signature Algorithm: sha256WithRSAEncryption
92:1e:03:6c:16:92:2e:8c:cd:96:a3:de:01:4b:ea:60:6b:65:
9e:19:bd:df:de:c2:0d:7f:50:05:52:23:d6:3d:28:63:cd:0b:
26:12:8c:11:56:c5:20:7a:15:2c:bb:ee:55:b7:b5:eb:5d:9f:
31:95:ab:1f:ff:d4:5e:05:32:e7:bd:2e:ec:ed:a7:7e:71:4a:
5e:60:6d:ac:e1:e2:78:74:5a:47:6f:ff:10:71:2a:34:fd:1c:
5f:2a:6d:da:e6:eb:79:ce:9d:7c:79:dd:04:5b:05:5c:44:fb:
c6:9e:ea:40:95:12:eb:16:7d:a9:8e:ec:e7:cb:84:e8:58:1e:
c3:48:23:c2:ef:01:ef:91:f5:ef:30:aa:5e:56:15:04:49:90:
52:ed:87:43:0f:a6:5c:7f:1c:f9:d9:99:85:9e:ef:b4:10:7a:
de:20:79:36:ab:10:eb:64:3b:21:b0:cc:ab:a0:b1:83:17:cf:
b7:be:63:90:cc:8d:a2:2c:92:03:70:99:e7:2b:a9:84:b4:de:
4f:d0:04:ac:0f:27:bc:b4:f0:a8:e5:67:12:8d:f1:7b:5e:c3:
75:77:79:79:90:cd:77:64:29:03:11:76:0c:d2:08:f5:7b:e2:
23:15:f0:f9:d4:57:12:a7:a1:e0:96:1e:e8:0d:50:fc:f0:f3:
64:31:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:06 2025 by rpki-client