Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/_QrNkSY6EnowAjHKxPgZcWd4kz4.roa
File: _QrNkSY6EnowAjHKxPgZcWd4kz4.roa (raw, json)
Hash identifier: VwUELk0e17e/TVuSpUJV3YaFJ4sMZrKz4thL57YxVHQ=
Subject key identifier: FD:0A:CD:91:26:3A:12:7A:30:02:31:CA:C4:F8:19:71:67:78:93:3E
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A1EFA2F209D479D2DB4F1F8EB89D59A4D
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/_QrNkSY6EnowAjHKxPgZcWd4kz4.roa
Signing time: Sun 26 Oct 2025 05:25:03 +0000
ROA not before: Sun 26 Oct 2025 05:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41108
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb05::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:fa:2f:20:9d:47:9d:2d:b4:f1:f8:eb:89:d5:9a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 26 05:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd0acd91263a127a300231cac4f819716778933e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:91:7f:96:6b:f6:12:ab:81:98:86:3f:c9:
22:60:67:48:5e:57:8d:85:c3:b1:02:18:80:a2:61:
7d:1f:01:db:d4:18:c7:9a:33:b8:d2:9d:d8:63:b7:
e0:d0:15:65:5f:39:42:d7:b0:06:aa:9c:6e:39:77:
8d:77:e9:9a:a7:ba:20:e8:56:aa:8d:ec:b9:ae:b3:
b0:8b:d8:e5:b1:9b:19:39:74:ea:7c:fc:8f:df:40:
14:64:63:6d:23:e6:6b:e8:68:0c:93:36:c8:c4:57:
d6:ed:c5:e8:b9:06:a8:92:64:5c:ea:d8:25:d4:72:
29:25:63:9a:78:23:37:e5:a4:fa:8b:93:31:bd:ac:
d1:7e:62:66:99:14:71:f3:73:f3:e5:85:48:a1:7a:
95:0a:0e:b5:1d:70:41:18:3c:74:77:6d:d1:ee:6d:
77:ab:4e:a6:16:91:95:d9:7e:a1:c4:fe:b1:39:ca:
15:6c:25:3a:a6:f0:1f:03:d2:f3:f0:4b:f7:b5:5b:
3f:66:43:16:26:a9:72:ee:cd:00:bf:6e:92:84:45:
69:58:70:87:fb:8d:db:20:5a:5d:f9:43:45:be:0f:
2e:2e:42:a7:e3:ca:9d:00:0b:f8:c9:29:9f:a4:ab:
e0:39:7e:7d:ec:bd:34:13:55:7e:43:68:97:a3:47:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:CD:91:26:3A:12:7A:30:02:31:CA:C4:F8:19:71:67:78:93:3E
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/_QrNkSY6EnowAjHKxPgZcWd4kz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb05::/36
Signature Algorithm: sha256WithRSAEncryption
84:cc:99:f2:19:6a:70:fe:76:7b:76:e6:1b:fb:b4:ca:71:bb:
1c:74:8d:85:75:b3:fb:f9:6d:e2:cf:56:f9:75:36:ff:ed:92:
a7:4c:2f:f0:63:48:af:f5:19:73:c9:c2:3a:f4:92:b9:64:fe:
20:ea:05:c0:c7:b4:4c:03:4e:7a:85:d2:f8:61:13:cd:22:20:
ef:c1:d4:3d:7c:49:d0:bd:dc:15:35:83:60:4d:c7:8d:39:5c:
c4:cd:20:fc:9a:a9:e8:72:d1:3d:df:de:81:04:ea:b9:19:f9:
e4:5f:78:cb:ce:bb:ed:c8:07:88:03:bb:52:c1:fb:ef:3b:c5:
0c:88:de:1a:e5:57:ff:18:45:1d:5e:fe:cb:c0:39:d0:0f:bc:
09:bc:d2:fb:50:7a:eb:ee:1b:ce:88:ec:02:ac:65:30:7d:88:
74:b0:c3:a6:68:60:53:0d:29:ae:ba:87:59:ee:c7:3f:c0:b5:
40:93:d2:74:a7:f8:4a:3f:21:69:d2:2a:f0:4f:9a:06:40:c6:
d0:22:ce:61:35:d0:7d:77:de:e5:6a:d8:2e:16:ee:9b:6a:3e:
aa:e9:22:35:66:2e:5a:11:d5:92:3b:9c:bc:5d:42:d5:34:aa:
1a:84:9b:e7:8e:69:b2:83:80:35:ef:66:aa:9b:64:ec:6d:ee:
b5:aa:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:00:06 2025 by rpki-client