Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gEMaL2gZr4EVEyfor8qYQycUgSo.roa
File: gEMaL2gZr4EVEyfor8qYQycUgSo.roa (raw, json)
Hash identifier: 7AB8RKVTbeirjkto7WRPC8Y/aDdlwXSSo/de1OUKQFE=
Subject key identifier: 80:43:1A:2F:68:19:AF:81:15:13:27:E8:AF:CA:98:43:27:14:81:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197F866165D7B9821B8FDA71A6773169E01
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gEMaL2gZr4EVEyfor8qYQycUgSo.roa
Signing time: Fri 11 Jul 2025 07:32:09 +0000
ROA not before: Fri 11 Jul 2025 07:32:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 45.88.88.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:66:16:5d:7b:98:21:b8:fd:a7:1a:67:73:16:9e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 11 07:32:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80431a2f6819af81151327e8afca98432714812a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:60:d5:28:86:24:7a:e8:57:80:b2:af:f2:
ce:41:a9:19:90:ec:f2:ab:6a:68:b6:85:f2:f7:56:
49:a8:ea:ec:6a:cb:1f:94:ca:1b:31:fd:fc:49:eb:
06:0e:b0:24:fd:7f:78:10:e9:c3:c0:ae:96:57:81:
29:9e:e9:58:2c:ae:69:8a:f0:aa:d3:65:33:be:19:
44:38:1f:be:73:e2:1d:96:4a:70:f5:6e:d6:1c:b7:
0d:15:c3:6c:ef:05:a2:71:42:87:de:39:e5:0e:b3:
20:bf:b9:4f:a1:72:6c:76:9c:f8:49:33:4b:f1:4a:
76:1e:f2:4e:85:f7:7b:40:c5:97:79:6f:b7:dd:57:
96:d9:02:42:97:f6:2f:6e:98:da:92:68:c4:49:68:
36:f1:b6:84:11:87:e5:fe:a7:10:f7:51:fd:f5:2d:
19:cd:f7:da:47:4f:08:1d:87:01:79:d3:e0:3f:9b:
08:9f:37:c1:82:ab:c5:f0:88:ec:2d:9f:da:df:2b:
6e:99:6e:1a:3e:08:ec:eb:64:54:b4:5e:14:ad:d7:
71:c7:ff:4a:c2:b3:72:f3:0a:47:e5:64:dc:d3:56:
f8:dc:2b:98:f7:61:3a:f8:83:1d:19:9c:73:34:dd:
21:1b:52:61:ac:1b:89:a8:12:98:93:50:9a:7c:95:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:43:1A:2F:68:19:AF:81:15:13:27:E8:AF:CA:98:43:27:14:81:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gEMaL2gZr4EVEyfor8qYQycUgSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
141.98.1.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:60:41:31:64:2e:32:c9:ba:e4:df:b6:d3:d9:dc:8a:cb:a1:
a5:92:17:b1:4b:0f:3b:7d:7c:bb:c7:a0:6e:d5:1b:72:09:09:
9e:d0:d1:0f:36:91:ff:b9:86:b7:6a:a2:f9:5f:81:07:c9:43:
eb:aa:b6:2d:f7:65:10:4d:0d:e7:62:b0:78:7d:07:e3:2c:7b:
24:05:51:5d:0d:12:b2:bd:86:29:06:90:9d:1f:0e:cd:d1:f0:
59:d8:de:8b:f4:9e:27:ef:ab:e1:e9:bf:ce:bc:12:73:af:a6:
2d:e5:8a:be:77:81:96:55:07:78:15:a6:bd:d9:48:67:b9:e9:
04:b1:2d:e7:5b:36:88:a8:28:d3:fb:56:ff:6d:4a:41:67:07:
55:2c:2b:1e:62:36:82:ef:53:13:4d:0f:75:d4:e5:42:1f:54:
cc:b0:fc:cc:b1:b6:85:39:af:34:2f:1b:8a:3f:44:a9:0d:04:
87:90:63:83:cf:3c:41:38:79:f8:52:34:00:27:b5:84:eb:09:
ad:1c:13:66:a2:81:9c:8c:18:e2:5e:85:03:d9:6e:34:95:9c:
df:1d:42:cc:db:9b:38:bb:1b:2b:5c:4c:58:7c:53:02:38:5c:
12:b7:61:fe:6e:4b:a1:1e:9d:2b:1e:c2:37:8b:f7:bf:9f:8c:
3b:8b:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:56:47 2025 by rpki-client