Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QPp3ShO51Vxq9wUSQpAjxaZkM9Q.roa
File: QPp3ShO51Vxq9wUSQpAjxaZkM9Q.roa (raw, json)
Hash identifier: S0nBXUW8Iz/PPL58aOwa+KW9UVmq6rlyOkpScxCXtE4=
Subject key identifier: 40:FA:77:4A:13:B9:D5:5C:6A:F7:05:12:42:90:23:C5:A6:64:33:D4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01974DF34483F45F9329F979C49FBC5937ED
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QPp3ShO51Vxq9wUSQpAjxaZkM9Q.roa
Signing time: Sun 08 Jun 2025 05:11:17 +0000
ROA not before: Sun 08 Jun 2025 05:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:f3:44:83:f4:5f:93:29:f9:79:c4:9f:bc:59:37:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 8 05:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40fa774a13b9d55c6af70512429023c5a66433d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:27:6a:15:2a:2d:6a:b0:88:be:e0:98:40:
84:1d:cc:83:06:92:e8:af:c4:62:b9:77:a3:fa:75:
97:fe:0b:48:98:a4:9f:4d:0b:eb:33:6f:b2:68:a6:
58:30:b7:0f:40:60:3c:eb:63:50:e8:78:63:fe:30:
31:bf:c3:ba:23:db:c5:d1:98:54:4c:f2:2c:9e:19:
db:81:00:f6:87:12:de:1f:e2:9a:f4:11:ba:15:c7:
12:a1:38:ec:95:3e:06:35:81:92:41:fe:09:96:9d:
ed:35:28:b9:83:a2:35:d1:e9:cd:fb:5d:98:c8:87:
7f:9b:07:71:91:66:bd:cc:df:e6:a5:de:d4:2b:61:
be:1c:dc:df:73:2f:90:c6:c3:2f:ef:6b:6c:64:27:
92:51:c2:8d:a3:68:72:e2:01:ac:ca:b5:5c:8a:ff:
59:2b:f7:02:bf:f2:ed:84:37:5f:07:d0:90:6d:74:
c6:93:5f:76:76:87:a5:77:91:e7:08:27:c6:d2:08:
b0:b4:88:aa:e5:45:41:9d:dd:50:52:4d:47:d9:f3:
78:86:ca:7f:f1:a8:de:78:a5:c4:02:b1:47:3d:71:
21:91:0e:fd:24:b6:e4:24:b3:f1:08:4c:9d:7e:78:
d4:c6:43:00:f4:97:3e:71:e5:04:db:63:e1:fd:1d:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FA:77:4A:13:B9:D5:5C:6A:F7:05:12:42:90:23:C5:A6:64:33:D4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/QPp3ShO51Vxq9wUSQpAjxaZkM9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f8:21:b4:88:fe:df:f7:42:a7:36:2a:54:7b:10:98:a1:93:
cb:0b:98:51:37:24:b5:57:0d:3d:ea:f4:42:62:cb:50:9f:10:
f6:a7:23:b9:43:f0:38:9d:1c:19:21:f9:f6:04:34:d0:31:fb:
e9:1a:f7:a0:a0:46:84:3c:2d:82:b6:e6:b8:e1:1a:c0:a3:a6:
89:0d:36:94:e5:ed:3e:91:b1:48:14:02:f2:bc:ee:04:84:97:
08:eb:f1:59:bd:8f:09:cf:de:05:ad:d8:c5:82:08:b8:04:ee:
41:5a:94:b7:e1:00:36:38:0b:5b:73:bd:75:eb:1c:4a:fb:47:
53:e6:04:ad:93:aa:d3:d2:99:dc:0e:1a:d2:ae:bb:a7:1f:fd:
da:87:87:50:00:eb:43:8f:be:e3:fe:6f:49:c5:8a:2a:78:c3:
f1:77:ff:d3:a9:57:d7:ce:f5:42:52:cb:d9:4b:15:b8:aa:31:
46:eb:51:10:d0:11:cc:0b:2f:f0:8c:a9:e2:d0:13:39:2f:59:
0c:ca:c9:d6:0d:19:50:9f:a1:9b:0e:2e:25:1c:27:70:9a:d5:
b2:82:ca:7a:18:87:63:3d:08:f6:9c:03:7f:f5:24:d9:69:b8:
fa:96:7b:70:08:e2:22:9b:01:3d:56:9f:59:7f:f4:00:97:21:
2a:27:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:54:38 2025 by rpki-client