Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/GEAO-RpDOblA62IXyDgWLKyaZE4.roa
File: GEAO-RpDOblA62IXyDgWLKyaZE4.roa (raw, json)
Hash identifier: B/mmE5K4Y0+TtLR8pgvUmngTm+hQZlJcszavfMaBB+I=
Subject key identifier: 18:40:0E:F9:1A:43:39:B9:40:EB:62:17:C8:38:16:2C:AC:9A:64:4E
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01980E25246B7E6C084B63596D8AA2474107
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/GEAO-RpDOblA62IXyDgWLKyaZE4.roa
Signing time: Tue 15 Jul 2025 12:52:51 +0000
ROA not before: Tue 15 Jul 2025 12:52:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16246
IP address blocks: 77.87.232.0/21 maxlen: 21
78.108.144.0/21 maxlen: 21
78.108.152.0/21 maxlen: 21
82.150.160.0/19 maxlen: 19
86.63.192.0/19 maxlen: 19
91.197.116.0/22 maxlen: 22
92.240.160.0/19 maxlen: 19
94.74.192.0/18 maxlen: 18
95.143.128.0/20 maxlen: 20
176.98.96.0/20 maxlen: 20
178.17.96.0/20 maxlen: 20
185.15.252.0/22 maxlen: 22
188.175.0.0/16 maxlen: 16
213.180.32.0/19 maxlen: 19
2a02:350::/29 maxlen: 29
2a03:b4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:25:24:6b:7e:6c:08:4b:63:59:6d:8a:a2:47:41:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jul 15 12:52:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18400ef91a4339b940eb6217c838162cac9a644e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:9a:ef:65:ed:c6:a8:d6:bf:c2:da:e6:45:
6b:bc:94:5b:59:7f:05:1e:1c:83:67:e9:1c:23:ba:
2e:19:48:98:fa:09:30:4e:09:cf:4e:a9:61:99:18:
10:a3:e3:6d:85:de:b8:87:83:ad:b7:39:db:9c:17:
4c:24:60:8a:88:7f:ca:be:09:dd:48:79:94:98:d1:
70:46:f8:64:bd:94:ee:7a:ef:e0:6c:84:b0:3b:37:
bf:21:6a:8e:68:c1:75:0c:0a:53:b9:92:3b:64:2e:
25:b3:a0:e2:da:88:c3:c4:fe:e3:a1:42:06:f0:2d:
15:77:a2:c7:76:80:86:d0:92:b2:cf:ef:57:56:e8:
04:73:41:1d:ba:50:42:1a:a2:48:ce:62:19:bc:6e:
a6:b9:17:e7:48:ae:ed:39:d2:6a:23:dd:1e:82:34:
79:2b:06:03:48:ce:9b:80:d3:9b:3a:f7:71:6d:54:
48:db:bc:34:46:20:ef:0f:0e:2a:35:e1:61:8c:1b:
6f:10:65:e3:fd:e6:0a:aa:18:b2:a6:e1:d7:dd:97:
da:3a:cc:53:90:93:9b:bd:c3:5f:46:8e:34:89:ed:
81:6f:96:81:12:89:8d:5b:ef:53:83:cd:e5:db:00:
92:ff:42:47:53:23:47:f7:64:b6:12:72:28:7b:57:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:40:0E:F9:1A:43:39:B9:40:EB:62:17:C8:38:16:2C:AC:9A:64:4E
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/GEAO-RpDOblA62IXyDgWLKyaZE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.232.0/21
78.108.144.0/20
82.150.160.0/19
86.63.192.0/19
91.197.116.0/22
92.240.160.0/19
94.74.192.0/18
95.143.128.0/20
176.98.96.0/20
178.17.96.0/20
185.15.252.0/22
188.175.0.0/16
213.180.32.0/19
IPv6:
2a02:350::/29
2a03:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:88:64:82:cd:69:aa:e6:bd:9d:7a:06:1a:d8:b1:a8:51:34:
af:e2:c1:f6:22:a3:19:20:b3:42:1f:d2:3d:12:b2:f3:cc:3e:
51:f5:d7:39:28:db:10:aa:e1:68:0f:38:56:ad:93:a2:71:45:
b3:fd:7d:a9:fb:13:04:e1:ca:80:67:31:5c:c3:0f:79:63:d6:
4b:4a:38:3d:80:06:3b:56:6c:1b:50:ac:23:27:fa:61:7b:a3:
15:35:c5:11:76:87:dd:83:d0:5a:33:e9:46:8d:87:29:fd:4f:
b0:4e:02:00:42:a3:9f:1e:87:ec:f7:6a:8b:8e:7c:e6:b2:f4:
a1:8f:87:71:1b:cd:be:9d:75:cc:7a:e7:91:07:03:45:cc:de:
68:28:55:90:27:2d:c1:59:e0:82:7d:ff:ab:9b:a4:5d:62:0d:
91:68:8f:a5:a7:09:fb:5f:dd:20:8f:7b:f8:fb:7b:29:05:19:
1b:2f:0d:62:c8:7b:ac:59:f9:90:89:d2:84:c0:eb:b0:cd:a0:
c4:43:6d:90:6c:73:2e:a9:94:bc:e9:fd:a9:a3:a7:48:07:f6:
0a:76:d1:f6:c1:c0:bc:df:a3:66:b8:a5:8a:a5:ae:03:65:5d:
c8:c0:21:92:85:93:41:c5:65:8c:1f:c0:18:93:3c:11:15:09:
5a:5e:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:45:11 2025 by rpki-client