Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QKNvv00ZlqMXMRIZptoslASj0bE.roa
File: QKNvv00ZlqMXMRIZptoslASj0bE.roa (raw, json)
Hash identifier: GCNTvlpScKsutE7ubWhols6pMlrIypRQhNYXcPhW2f8=
Subject key identifier: 40:A3:6F:BF:4D:19:96:A3:17:31:12:19:A6:DA:2C:94:04:A3:D1:B1
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019A17569BD04F2D0ABDA6B629F39011CC04
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QKNvv00ZlqMXMRIZptoslASj0bE.roa
Signing time: Fri 24 Oct 2025 17:49:03 +0000
ROA not before: Fri 24 Oct 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 213.220.51.0/24 maxlen: 24
213.220.54.0/24 maxlen: 24
213.220.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:56:9b:d0:4f:2d:0a:bd:a6:b6:29:f3:90:11:cc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Oct 24 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40a36fbf4d1996a317311219a6da2c9404a3d1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:81:db:68:1d:a3:64:1b:34:a9:4f:bd:ea:
da:cf:08:de:83:72:a6:79:46:6f:50:72:b1:fc:a1:
18:db:97:aa:88:b7:67:1f:db:a5:0c:95:d8:e5:e8:
a7:46:55:5d:26:2c:75:3d:74:a3:f5:9b:7e:f5:ff:
18:88:13:9e:52:67:6e:74:d5:a1:a7:d1:3a:a5:a3:
3a:54:5b:a9:14:6f:d0:98:ac:94:5a:9f:c9:ad:98:
68:eb:aa:71:ef:14:ee:67:29:61:58:2b:dd:a2:ec:
2d:84:52:70:d6:44:ae:31:5a:0f:11:f2:b7:19:d8:
38:cf:3a:d1:bc:a2:49:c7:b9:cf:ce:41:12:02:5c:
19:62:84:62:cf:37:ff:76:3a:bf:47:7f:33:c5:4b:
02:dc:ad:9c:2a:d4:da:2d:a8:c7:b7:93:bd:23:ba:
94:04:fd:30:da:05:32:7b:dc:7a:83:58:52:21:23:
5c:4c:be:f9:7b:d5:b3:05:78:d4:26:51:fd:df:a0:
40:87:4f:3e:34:84:5a:5e:45:ea:54:01:67:13:da:
49:bf:42:10:da:39:b0:73:4c:96:cf:37:ba:bc:c4:
5d:6a:58:e3:ee:ad:21:d0:e4:72:f8:a8:d7:62:3c:
4f:90:16:d2:a7:61:99:b1:86:fa:89:9a:e1:a2:6a:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:6F:BF:4D:19:96:A3:17:31:12:19:A6:DA:2C:94:04:A3:D1:B1
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QKNvv00ZlqMXMRIZptoslASj0bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.51.0/24
213.220.54.0/24
213.220.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:7d:2e:8f:3c:03:13:48:ae:1e:eb:c2:37:01:33:34:54:07:
9c:56:31:1e:f7:fc:8f:f1:b2:70:72:31:39:ba:7f:18:8f:f4:
6f:8e:a1:b9:bb:8a:cf:0e:4f:c2:ed:c6:1d:c8:d2:bb:5b:55:
10:56:ae:91:16:bd:17:28:6f:59:37:4d:c2:b7:81:bf:a6:59:
64:fa:53:cb:50:81:86:36:3a:25:64:e7:84:f0:fa:5b:4b:2a:
82:41:0c:ff:2e:8b:e8:a2:1a:eb:17:e1:bd:5d:fd:57:53:2f:
a2:e9:34:2b:6a:37:52:db:b0:98:13:fd:b5:b2:3e:c0:99:16:
9c:05:c5:0a:09:3a:45:5a:dd:b3:67:a4:27:da:b3:7c:98:1a:
d7:55:50:f6:6d:1c:72:da:d8:43:5f:ca:fa:ce:a9:21:5d:93:
36:d1:ee:93:21:93:f8:e2:e5:7e:87:55:50:dd:98:09:8a:00:
3a:ad:51:51:87:ab:03:08:97:f7:77:0f:17:ce:11:05:bc:5f:
b1:7c:4f:97:5b:20:40:80:21:7b:72:f9:45:f5:3c:9d:f6:86:
24:c9:95:f5:e9:0a:7f:ed:b0:33:99:37:01:a4:b9:c0:45:af:
c4:a2:4a:d1:6a:ec:aa:19:cc:8a:af:d3:12:86:1d:43:7e:28:
08:d1:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:37 2025 by rpki-client