Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/gXnyfZ7WRzAT1jk1R3OiRc3jdHI.roa
File: gXnyfZ7WRzAT1jk1R3OiRc3jdHI.roa (raw, json)
Hash identifier: 1IuLazqVse8UR3WGm/7OBA3uGo+uBSbgZ52bY8PWM0E=
Subject key identifier: 81:79:F2:7D:9E:D6:47:30:13:D6:39:35:47:73:A2:45:CD:E3:74:72
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0197B0178BF297D41840F431AEA46D06FE8E
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/gXnyfZ7WRzAT1jk1R3OiRc3jdHI.roa
Signing time: Fri 27 Jun 2025 06:33:42 +0000
ROA not before: Fri 27 Jun 2025 06:33:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 188.212.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:17:8b:f2:97:d4:18:40:f4:31:ae:a4:6d:06:fe:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 27 06:33:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8179f27d9ed6473013d639354773a245cde37472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:69:16:2b:57:e2:c9:bd:3b:44:9d:f3:ea:d6:
d6:6d:98:0c:69:0b:08:62:83:f1:af:c2:01:4c:d6:
f9:5a:01:04:68:51:65:43:68:65:6f:0d:73:e1:7b:
08:75:40:43:4f:b7:0d:1c:f6:0f:3d:06:32:46:3a:
7f:6e:b2:f6:2d:7b:fe:79:2c:73:4f:b1:ef:16:21:
1d:36:ce:dc:8b:6b:8f:9d:4e:1b:d1:dc:f5:54:00:
d0:a5:e2:29:38:27:3f:9e:02:bc:af:fc:be:76:6b:
c1:86:7b:00:0b:98:0a:eb:ef:c7:ef:99:1b:25:a8:
46:09:0d:ce:5d:8f:92:7d:eb:f1:b6:4b:8d:b8:09:
a9:f2:a5:2f:49:6f:1e:c8:18:ae:6b:f3:cc:27:f2:
c6:67:dc:c8:77:0e:00:36:d9:ee:c2:13:00:5e:5b:
ac:3d:23:94:2e:4d:db:53:41:a1:2a:44:30:c3:07:
03:fe:4a:8c:9d:68:fc:1e:18:25:f3:fb:eb:af:79:
b1:27:c5:e9:c7:d8:34:27:b2:c2:a5:20:a5:6d:67:
9d:8e:7f:85:56:69:ef:8e:da:88:23:0a:e2:be:91:
85:05:60:e0:de:5b:da:26:78:32:3a:89:d8:1b:b7:
c0:37:66:02:f3:c3:63:9a:cf:33:7a:7b:e8:2f:e0:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:79:F2:7D:9E:D6:47:30:13:D6:39:35:47:73:A2:45:CD:E3:74:72
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/gXnyfZ7WRzAT1jk1R3OiRc3jdHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.98.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d3:fd:08:d7:62:45:1e:7c:d2:fa:06:8e:9a:ff:55:5e:9f:
a4:d3:94:3b:f6:ed:fa:b6:22:62:e2:4b:b9:74:6c:44:16:b0:
2c:64:71:22:2f:10:6b:19:dd:89:dc:5d:46:24:b4:1d:56:b2:
81:e2:43:40:00:29:be:74:22:4b:f9:4d:72:54:89:e0:40:3a:
9e:4e:9f:9a:16:f4:08:5a:a7:ab:2c:20:39:30:c2:76:13:ed:
5c:58:95:aa:83:e7:9a:11:8e:4a:41:03:be:84:0c:7a:af:58:
e4:69:08:8e:f6:e3:37:80:bd:9b:6f:14:dc:50:a2:45:80:44:
68:a9:67:15:2b:70:65:93:e8:68:91:11:eb:ec:2a:e6:08:fa:
8c:74:fa:b7:71:1d:cb:2a:5a:32:fb:08:eb:f6:22:1d:17:25:
2b:31:21:69:0f:5e:b4:d1:ce:31:45:1b:3c:ac:82:30:82:95:
d4:81:21:1a:1b:44:91:7d:85:61:ba:f8:32:6f:c2:3c:9a:8c:
22:06:01:78:a5:9d:bd:48:b7:ac:c8:f0:bc:8c:41:3f:71:c1:
f4:69:13:27:94:d7:2e:04:28:b4:12:9b:82:e2:ab:5f:6c:93:
0f:e4:b5:4b:1c:1a:9c:7e:93:8f:af:b3:9e:d8:bc:2c:1f:c6:
c4:8f:d4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 01:56:55 2025 by rpki-client