Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/qmJe_5PAVbEyU3Hz9mqWWayqxrg.roa
File: qmJe_5PAVbEyU3Hz9mqWWayqxrg.roa (raw, json)
Hash identifier: 4j7w+emJPvjo8IC4c65G1J9dI6AZT4RULSbnACF02rM=
Subject key identifier: AA:62:5E:FF:93:C0:55:B1:32:53:71:F3:F6:6A:96:59:AC:AA:C6:B8
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01986E7133D56127F49C13B2626E1B8C4125
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/qmJe_5PAVbEyU3Hz9mqWWayqxrg.roa
Signing time: Sun 03 Aug 2025 05:39:29 +0000
ROA not before: Sun 03 Aug 2025 05:39:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 84.55.16.0/24 maxlen: 24
84.55.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6e:71:33:d5:61:27:f4:9c:13:b2:62:6e:1b:8c:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 3 05:39:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa625eff93c055b1325371f3f66a9659acaac6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:c6:b7:65:33:ec:96:c3:72:d8:e0:55:bd:
b9:7d:eb:22:f0:ae:0f:51:d9:e0:67:da:a0:98:41:
52:de:7c:a1:90:30:d3:bf:e0:54:46:d6:fe:a9:26:
33:7b:21:52:de:e5:b8:4f:77:7b:57:5d:16:3c:51:
87:99:9f:86:42:54:cd:ba:1b:34:1a:84:de:b4:66:
00:c0:b6:e4:93:7f:b3:1e:35:d3:c3:d6:84:05:8c:
bf:91:22:20:ad:c5:fe:44:17:1b:dc:e2:a9:fa:c6:
52:e8:6a:c3:1e:12:ef:a1:30:7b:53:53:18:3c:bd:
af:43:d3:79:7e:7b:c8:ba:fb:85:5c:14:a4:25:cd:
d5:af:1b:3e:ac:ed:32:5f:90:e4:1b:87:a8:ba:0d:
54:85:e6:43:49:ba:36:6e:63:7b:f3:6f:61:63:08:
da:00:33:8f:2b:df:52:cc:78:2a:cd:2f:82:75:2e:
37:55:11:ce:7e:a0:a9:f1:f3:33:c5:65:d3:cc:2b:
33:2c:cd:66:78:ea:e3:a1:3a:f8:5e:dd:70:a2:33:
ed:92:c8:77:58:f8:ac:06:f2:ed:1d:93:3e:67:d4:
42:d9:72:e0:63:6a:9b:7b:2c:7e:2f:aa:5c:86:8a:
c3:cd:c6:a9:40:13:fd:cc:b2:6c:19:74:ce:63:23:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:62:5E:FF:93:C0:55:B1:32:53:71:F3:F6:6A:96:59:AC:AA:C6:B8
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/qmJe_5PAVbEyU3Hz9mqWWayqxrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.16.0/24
84.55.21.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6e:04:52:ec:6c:26:af:5e:53:13:b6:7e:ee:41:74:91:9a:
3d:de:92:d9:cd:19:3c:cc:c8:84:08:f8:96:01:34:53:18:62:
4f:77:6c:91:6d:a3:ce:2a:f4:cc:45:89:77:dc:64:3a:4c:c0:
59:ba:e0:51:aa:4b:c0:cc:18:84:0d:de:c1:14:7c:84:fb:72:
32:b8:63:b0:c8:6c:34:c8:15:55:66:53:af:36:91:9b:5c:86:
9c:6a:51:57:3e:d7:e9:f2:da:37:d1:47:b2:bd:00:05:af:4d:
55:0a:b6:39:45:35:37:f2:18:8d:2b:a4:f4:a2:af:25:89:d2:
5b:cf:c1:39:23:0b:4b:4e:c0:9a:fc:09:33:3e:da:02:e9:cf:
29:71:b7:4f:d5:a7:f8:41:e9:6d:a7:8d:c6:4b:b3:e7:84:5e:
c0:b4:28:2c:27:4e:52:11:a8:3e:16:36:bf:2e:8c:58:ad:47:
62:54:95:a5:a3:7c:d8:7c:89:da:29:ca:b6:20:5c:17:5f:f0:
f2:90:5a:85:27:45:10:0e:91:c9:78:8e:26:57:87:85:fe:df:
f8:f3:dc:58:73:d2:75:b2:e4:4e:7e:2e:ec:1d:5c:62:d8:1c:
46:9a:47:07:4d:ee:e8:86:2b:f4:5e:5b:2f:76:cf:bf:5c:78:
33:ba:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:00:09 2025 by rpki-client