Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/gTeW8KgwMI0CF5LdugHx9i_aL9A.roa
File: gTeW8KgwMI0CF5LdugHx9i_aL9A.roa (raw, json)
Hash identifier: OXWLHtmhLlBTeQ4ewU+HqOIA8XwCstLgb3pc2bSVDXk=
Subject key identifier: 81:37:96:F0:A8:30:30:8D:02:17:92:DD:BA:01:F1:F6:2F:DA:2F:D0
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019813A6C3BD1F0EFC275C8E9CD571A84447
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/gTeW8KgwMI0CF5LdugHx9i_aL9A.roa
Signing time: Wed 16 Jul 2025 14:32:32 +0000
ROA not before: Wed 16 Jul 2025 14:32:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 2a0d:d940:11::/48 maxlen: 48
2a0d:d940:9008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:a6:c3:bd:1f:0e:fc:27:5c:8e:9c:d5:71:a8:44:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 16 14:32:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=813796f0a830308d021792ddba01f1f62fda2fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:19:8d:40:49:ce:b5:4d:13:05:fc:9d:38:
5d:42:10:42:ae:48:6b:ee:87:b7:b2:8d:b3:de:48:
aa:f8:97:b7:b1:29:af:c0:c8:6e:6c:cb:32:c9:7c:
67:5a:5a:19:68:8c:b3:fb:92:69:31:27:0f:5c:23:
74:89:24:45:c1:d4:82:f9:06:b7:b9:b4:92:f5:61:
42:86:d1:43:8b:fb:f5:1d:10:35:3a:e9:d5:33:49:
c4:69:af:a3:dc:aa:ab:71:d9:30:3b:07:df:33:20:
97:a6:20:7e:fd:48:cb:6a:36:17:67:f5:12:14:fe:
e4:35:25:aa:0a:3e:39:1d:29:a3:d8:cb:60:74:b2:
07:92:42:c8:d2:f3:c9:e7:3b:00:1f:19:6f:0f:ca:
a8:bc:05:de:27:d1:e7:57:c8:8d:68:91:99:0e:66:
08:ae:64:28:c0:8f:94:a2:85:90:88:ae:2a:39:03:
6c:1a:64:fb:1a:9d:f9:18:67:60:d3:36:be:b8:38:
d9:53:04:d8:be:8b:b1:da:6c:23:35:6a:90:3a:4f:
57:3e:3c:cc:0c:d3:26:45:46:41:9b:ae:09:59:1a:
26:e9:ad:ca:20:06:73:49:0c:15:42:bd:46:0c:a7:
23:36:2b:39:d9:fe:ca:ee:d9:e7:30:ad:97:1b:48:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:96:F0:A8:30:30:8D:02:17:92:DD:BA:01:F1:F6:2F:DA:2F:D0
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/gTeW8KgwMI0CF5LdugHx9i_aL9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:11::/48
2a0d:d940:9008::/48
Signature Algorithm: sha256WithRSAEncryption
2c:ac:1f:cf:0f:4d:e3:cf:e6:84:d9:e5:01:e1:35:23:f1:69:
d1:db:3b:99:3a:16:f0:d4:a1:ad:e7:79:b0:28:5d:73:e7:71:
ad:35:c2:5b:03:ff:27:88:5d:f4:d6:b8:42:f3:0c:31:b8:17:
79:8b:1d:6d:ce:93:73:52:25:27:27:f3:4f:ae:ec:ae:4a:bb:
cf:53:57:36:c5:0a:98:07:f1:d6:1a:97:11:7d:3e:b9:cd:83:
3c:95:5d:a8:73:d0:2b:df:25:b6:18:7a:73:c6:b4:df:4f:c0:
40:db:0b:97:50:5c:d9:0b:e6:b3:41:bf:82:b8:49:da:65:20:
f2:c1:e1:9e:76:9a:26:8a:11:e9:b0:b6:3f:f0:ed:a7:19:b5:
06:fd:b7:37:e2:b2:f5:aa:42:29:14:ba:db:e2:25:4f:ef:3f:
a1:26:9d:ec:ee:f9:2d:cf:11:6d:23:ee:4e:76:24:a9:87:3f:
5e:01:e3:a3:b2:38:f4:e2:51:f7:aa:33:cf:ce:ef:4a:d7:2a:
2f:1c:6e:d6:71:ae:6f:dd:c3:44:af:65:c9:c7:35:a1:e6:ec:
8a:ac:1c:c1:60:8f:e0:da:bb:4a:b3:fd:1b:a5:8c:e4:b1:01:
e8:73:97:fd:7c:ac:84:1f:85:ad:44:94:f0:e3:a1:dc:0e:ba:
14:cd:49:d0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZgTpsO9Hw78J1yOnNVxqERHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjUwNzE2MTQzMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTM3OTZmMGE4MzAzMDhkMDIxNzkyZGRiYTAxZjFmNjJmZGEyZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U8ZjUBJzrVNEwX8nThdQhBCrkhr
7oe3so2z3kiq+Je3sSmvwMhubMsyyXxnWloZaIyz+5JpMScPXCN0iSRFwdSC+Qa3
ubSS9WFChtFDi/v1HRA1OunVM0nEaa+j3KqrcdkwOwffMyCXpiB+/UjLajYXZ/US
FP7kNSWqCj45HSmj2MtgdLIHkkLI0vPJ5zsAHxlvD8qovAXeJ9HnV8iNaJGZDmYI
rmQowI+UooWQiK4qOQNsGmT7Gp35GGdg0za+uDjZUwTYvoux2mwjNWqQOk9XPjzM
DNMmRUZBm64JWRom6a3KIAZzSQwVQr1GDKcjNis52f7K7tnnMK2XG0ifIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIE3lvCoMDCNAheS3boB8fYv2i/QMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvZ1RlVzhLZ3dNSTBDRjVMZHVnSHg5aV9hTDlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg3ZQAAR
AwcAKg3ZQJAIMA0GCSqGSIb3DQEBCwUAA4IBAQAsrB/PD03jz+aE2eUB4TUj8WnR
2zuZOhbw1KGt53mwKF1z53GtNcJbA/8niF301rhC8wwxuBd5ix1tzpNzUiUnJ/NP
ruyuSrvPU1c2xQqYB/HWGpcRfT65zYM8lV2oc9Ar3yW2GHpzxrTfT8BA2wuXUFzZ
C+azQb+CuEnaZSDyweGedpomihHpsLY/8O2nGbUG/bc34rL1qkIpFLrb4iVP7z+h
Jp3s7vktzxFtI+5OdiSphz9eAeOjsjj04lH3qjPPzu9K1yovHG7Wca5v3cNEr2XJ
xzWh5uyKrBzBYI/g2rtKs/0bpYzksQHoc5f9fKyEH4WtRJTw46HcDroUzUnQ
-----END CERTIFICATE-----
Generated at Wed Jul 23 22:49:59 2025 by rpki-client