Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/qFiADcr9pFjg_dXvkzsR8Kgj-TE.roa
File: qFiADcr9pFjg_dXvkzsR8Kgj-TE.roa (raw, json)
Hash identifier: SHQprMFzzGb+MtspgkGoycVRiU3X/tyiq9vzy+wcXTU=
Subject key identifier: A8:58:80:0D:CA:FD:A4:58:E0:FD:D5:EF:93:3B:11:F0:A8:23:F9:31
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 019A30260822D803459B8496BA6D7E39CBB7
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/qFiADcr9pFjg_dXvkzsR8Kgj-TE.roa
Signing time: Wed 29 Oct 2025 13:26:30 +0000
ROA not before: Wed 29 Oct 2025 13:26:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.160.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:26:08:22:d8:03:45:9b:84:96:ba:6d:7e:39:cb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Oct 29 13:26:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a858800dcafda458e0fdd5ef933b11f0a823f931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:73:ab:15:f7:3e:89:56:62:8d:c0:f1:2f:
37:05:32:5a:45:85:1e:29:53:e6:59:07:b9:ed:95:
ff:71:c9:34:56:e3:d7:2b:a1:b4:b4:82:aa:23:32:
e2:6b:a0:df:d3:3b:bc:f2:34:8b:34:78:6e:0a:57:
ce:00:04:24:e8:83:fe:89:7b:f2:5e:ef:52:08:dd:
02:f6:88:24:09:33:27:2a:30:87:97:70:e8:62:a8:
ac:4e:ea:5c:fa:f5:0e:3c:ba:78:97:30:66:e7:e5:
10:c0:ae:0c:1f:c3:6e:07:d3:b0:f1:68:f9:21:6b:
f8:fa:be:ea:75:5d:89:49:87:eb:6a:57:88:3b:08:
c4:2a:ca:d5:b9:60:cd:bb:88:45:63:62:71:c3:9f:
54:ca:0b:c1:6c:95:48:94:6c:4d:a4:66:d2:ab:5c:
5b:65:2f:b1:2a:fa:76:bf:25:dc:36:31:9b:eb:55:
e8:a1:13:97:34:83:dd:ae:fb:cc:12:23:7b:5d:18:
bf:de:d4:0a:49:da:58:16:2a:a0:bc:00:a0:b2:c2:
80:77:31:4f:68:10:b8:b3:50:b6:a5:0c:11:2a:58:
9e:30:03:4c:71:ba:52:95:82:84:00:c0:f9:08:8e:
67:fb:28:85:eb:e6:ad:35:b1:67:62:ab:58:12:3d:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:80:0D:CA:FD:A4:58:E0:FD:D5:EF:93:3B:11:F0:A8:23:F9:31
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/qFiADcr9pFjg_dXvkzsR8Kgj-TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/24
188.125.168.0/24
188.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:9a:74:b7:f4:02:8f:c8:02:54:d3:2a:3d:39:2b:f1:d4:23:
c6:54:37:72:7d:06:13:29:b7:86:4f:ff:70:a6:2e:c3:67:c0:
97:25:8e:5c:c6:e0:21:fb:32:1e:9a:ad:15:78:74:5b:6f:38:
2a:11:2c:fd:12:52:8b:9b:e2:5c:fd:92:da:48:3e:aa:81:af:
9b:b8:d2:77:f2:b5:6c:91:bf:8e:c3:bb:12:a3:8e:6d:55:19:
10:27:a0:cc:f0:46:52:ad:3c:ae:7f:31:86:af:31:2f:9d:1b:
66:5c:85:11:d9:ad:66:cb:e7:3c:4d:65:79:44:c6:87:fb:4a:
d3:06:b0:10:16:92:fc:12:72:94:d9:84:c3:1d:0a:29:5e:94:
4c:f3:94:c0:5e:7f:75:2f:60:27:b1:8d:48:2d:7f:34:41:8f:
c2:a2:2b:80:35:42:9b:76:5b:0b:90:b0:fb:46:57:81:f8:56:
50:ea:4c:a9:0e:3d:51:6b:3d:a7:ef:13:fe:4b:8c:7a:b0:ba:
04:71:60:b3:9e:ed:29:a9:93:9e:1d:ae:2f:e8:c6:c4:c2:71:
b8:65:f8:27:d5:47:fa:55:ef:a2:97:01:ec:3f:0f:df:74:7e:
0a:95:a8:36:46:9d:f4:c7:1f:ab:d9:14:60:0e:5d:6c:90:45:
b3:a6:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:03:52 2025 by rpki-client