Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/q9k_rilYdkaQ-41efWGAoQcAGxg.roa
File: q9k_rilYdkaQ-41efWGAoQcAGxg.roa (raw, json)
Hash identifier: o21vR6VOH2kkD4bUXaQE9a8npzQi3doJAlRcl4Qn0UI=
Subject key identifier: AB:D9:3F:AE:29:58:76:46:90:FB:8D:5E:7D:61:80:A1:07:00:1B:18
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01977753A88C47FD4609C043B8A5E6C31403
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/q9k_rilYdkaQ-41efWGAoQcAGxg.roa
Signing time: Mon 16 Jun 2025 06:01:00 +0000
ROA not before: Mon 16 Jun 2025 06:01:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56619
IP address blocks: 79.98.249.0/24 maxlen: 24
79.98.250.0/24 maxlen: 24
79.98.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:a8:8c:47:fd:46:09:c0:43:b8:a5:e6:c3:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jun 16 06:01:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abd93fae2958764690fb8d5e7d6180a107001b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:41:f6:4a:c5:41:30:15:e7:e2:c5:0a:51:
c8:af:70:52:a9:22:d8:17:b4:a5:18:b7:4c:d1:49:
2a:be:04:81:a8:1a:c6:92:36:0c:78:40:c6:77:bd:
6e:bd:42:c7:23:50:ca:83:1d:65:31:60:19:b1:13:
7c:13:77:82:4d:b3:cd:15:07:ac:26:47:03:fa:3a:
c4:e4:ae:2e:d1:5f:27:0a:88:05:43:42:75:62:e5:
2f:c8:e5:b1:c0:30:4c:c6:d1:0f:46:51:9b:8e:56:
48:38:fd:c1:34:47:5f:92:51:ef:d1:2a:07:3a:ce:
f6:65:b7:ca:34:cd:e5:1c:8e:dd:60:e7:ef:fe:36:
d0:3a:c1:7c:ff:cd:1c:6d:9f:5d:0d:68:68:0f:a9:
1d:7f:6a:68:70:1f:b5:1c:65:cf:48:75:db:b0:d6:
25:1a:2c:1f:3b:59:97:92:9f:55:f5:7d:e6:c8:8f:
44:dc:91:13:74:c7:76:cc:84:f7:8d:ab:20:f0:44:
fc:f5:f8:cd:e9:30:97:f9:3d:fc:ab:8d:a0:6d:90:
3a:bc:35:60:a4:46:09:76:de:da:91:5a:ac:21:1e:
9a:72:1e:2e:5d:9f:ca:b4:f5:60:91:64:8d:24:6f:
52:a1:97:36:86:03:47:34:a7:62:14:ba:e2:96:27:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D9:3F:AE:29:58:76:46:90:FB:8D:5E:7D:61:80:A1:07:00:1B:18
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/q9k_rilYdkaQ-41efWGAoQcAGxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.249.0-79.98.251.255
Signature Algorithm: sha256WithRSAEncryption
8a:a0:9f:47:c5:80:af:dc:9e:6e:b8:75:84:ea:cf:46:74:7a:
f3:08:49:97:b4:25:bf:eb:49:35:a9:88:87:c3:ac:cf:e9:c8:
36:d8:f5:25:32:1c:cb:2e:67:95:1c:f4:6d:21:4a:e8:ea:0a:
94:73:3f:7d:6c:1f:f4:42:3a:54:22:eb:74:c8:d4:45:53:17:
9f:13:b6:04:49:e8:f5:00:72:55:25:7e:cd:4c:64:40:12:02:
75:65:1f:16:c2:10:cb:7e:9a:73:e4:cb:52:d4:bc:a9:b3:b0:
77:b7:88:cc:46:4c:6a:02:1e:b0:a2:12:d3:13:1f:fb:d7:18:
6f:b3:2f:9f:f2:36:bb:cd:be:72:2f:49:ad:0e:0f:a7:0e:c5:
2d:fd:b5:ac:2f:96:50:07:e3:41:f9:5c:73:a5:00:19:88:d2:
26:19:f8:11:15:62:77:bb:e2:70:4d:06:68:86:e7:f9:5e:69:
e1:12:c3:00:e0:5a:b3:d0:22:92:15:84:b6:fc:bd:72:d5:89:
f2:15:2c:a2:ab:2c:fe:22:7f:6d:0c:6e:6e:ee:51:e2:cb:36:
98:39:1c:05:8e:10:6d:f6:05:e9:82:7d:80:c7:3b:5a:5e:e6:
f2:37:cc:ae:d9:da:c5:da:71:dc:33:b8:c3:68:fa:87:ee:cb:
72:17:5f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:29:52 2025 by rpki-client