Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/q05hnkzJzF9nu4-iQoM1iN-hMcc.roa
File: q05hnkzJzF9nu4-iQoM1iN-hMcc.roa (raw, json)
Hash identifier: csTfd7zVjSEqYYA/9FDauw7fNQCSs402Ror/CHKBe70=
Subject key identifier: AB:4E:61:9E:4C:C9:CC:5F:67:BB:8F:A2:42:83:35:88:DF:A1:31:C7
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019A219B15D88FB1133F31B31318E2480AFE
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/q05hnkzJzF9nu4-iQoM1iN-hMcc.roa
Signing time: Sun 26 Oct 2025 17:40:03 +0000
ROA not before: Sun 26 Oct 2025 17:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 91.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:9b:15:d8:8f:b1:13:3f:31:b3:13:18:e2:48:0a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Oct 26 17:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab4e619e4cc9cc5f67bb8fa242833588dfa131c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:f2:7a:ce:68:ba:c3:74:bf:21:62:60:74:
6e:a6:55:d7:ee:cc:af:9a:d9:98:98:59:49:99:6b:
0a:1c:b7:cc:49:5e:31:65:f3:9e:27:21:ce:d6:69:
f3:97:ac:55:ca:27:d9:58:fa:9b:94:6a:b1:35:3b:
1e:07:a3:dd:cd:7a:bc:ba:8b:8d:98:44:00:f6:23:
04:d3:81:81:74:38:bd:9a:10:a6:8d:b4:03:7a:8d:
52:a7:e4:74:34:33:84:fc:b6:1f:9c:b9:31:1c:e2:
82:21:21:07:6e:b8:08:16:37:ca:cb:ec:a4:d1:e8:
18:30:80:a4:41:5a:c1:53:b0:4f:82:da:ba:f1:8b:
f6:a4:e2:7f:15:86:53:22:6f:af:06:f1:bc:70:4b:
f6:17:1c:4a:e4:59:d6:76:31:cc:7b:23:dd:a6:c1:
e3:ef:10:46:df:1c:c6:ae:c1:5b:68:1d:64:16:ea:
82:f3:7b:22:7e:d1:5d:45:57:93:ca:0e:9e:6d:7d:
5f:16:d2:b4:a4:86:bb:f1:9b:e0:f5:30:1c:bd:1f:
ab:51:20:7b:27:fc:83:3a:02:08:81:07:76:1c:8b:
f5:43:51:3b:0c:86:d8:b8:cf:8b:33:3b:ed:fb:81:
de:f9:c0:2b:e8:1b:10:03:2f:34:ba:3b:d6:af:5b:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:61:9E:4C:C9:CC:5F:67:BB:8F:A2:42:83:35:88:DF:A1:31:C7
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/q05hnkzJzF9nu4-iQoM1iN-hMcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:43:07:97:ff:18:42:a2:c8:81:77:64:12:af:af:8f:e0:09:
cd:03:51:97:3e:ed:35:c6:07:8c:dc:89:1a:18:4f:f2:b8:60:
18:58:ad:ea:e1:55:bb:19:0d:ed:37:83:24:d0:c6:74:dd:89:
0f:c0:cf:5f:64:23:1f:42:8a:5a:9c:4a:60:78:5f:90:a9:59:
01:ce:14:0b:80:95:ca:e6:8e:b8:6e:e6:83:d9:57:78:a0:8b:
a5:2a:c9:0b:57:ef:2b:27:52:97:fc:6b:55:e6:e6:41:fd:53:
89:1a:40:41:72:43:47:51:7a:e8:a3:bf:1b:82:3e:af:dc:b2:
72:b8:d0:c4:e4:94:1d:35:b0:a4:c3:c7:68:3c:ee:15:d3:9d:
ea:91:4c:99:3d:59:e6:48:d5:81:20:90:50:ea:04:41:20:01:
87:68:24:e0:2a:76:8b:23:da:48:2e:4d:73:5b:fd:e3:65:74:
0e:f2:da:e4:86:a5:00:82:42:ab:5a:24:f1:24:12:c3:74:78:
02:57:f0:33:91:be:40:1c:69:b8:f6:d4:e4:1e:10:55:5d:1a:
e2:3c:a5:4a:57:b0:a7:aa:02:1c:db:78:52:2a:92:78:70:9c:
fb:43:53:1e:e9:e2:4a:16:0e:96:f8:54:72:48:e8:d9:a0:9f:
a7:1b:7b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:25 2025 by rpki-client