Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/G6B9A4y1vunn5MKgeHsyp6tE69U.roa
File: G6B9A4y1vunn5MKgeHsyp6tE69U.roa (raw, json)
Hash identifier: gklXuGrLdtP1rCaQ51AZEWKzi+IMgFPv2LCau3AUEqg=
Subject key identifier: 1B:A0:7D:03:8C:B5:BE:E9:E7:E4:C2:A0:78:7B:32:A7:AB:44:EB:D5
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DB2109ABC430345A2C1A739C515C6A
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/G6B9A4y1vunn5MKgeHsyp6tE69U.roa
Signing time: Sun 06 Jul 2025 22:28:43 +0000
ROA not before: Sun 06 Jul 2025 22:28:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216119
IP address blocks: 194.67.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:db:21:09:ab:c4:30:34:5a:2c:1a:73:9c:51:5c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:28:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ba07d038cb5bee9e7e4c2a0787b32a7ab44ebd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:71:01:5a:43:cc:14:58:ef:16:95:9f:da:
6f:15:b7:0b:19:43:01:b5:86:d1:b1:dc:cb:eb:f1:
0c:27:0b:8c:0c:75:78:dc:02:58:00:80:d2:2d:df:
70:a3:e0:d0:45:9e:c0:4a:ae:bb:85:fd:df:80:38:
c7:3a:af:0c:f9:55:9f:2e:d3:56:ad:74:67:d2:32:
34:86:20:e7:f2:2c:f5:59:18:e2:40:7f:8c:8d:c7:
aa:78:b3:b1:45:f1:8b:e9:17:12:4b:86:0b:dc:17:
a4:41:87:9f:25:4d:3d:5e:06:62:af:dd:94:fb:10:
19:13:b6:93:28:3c:1b:24:fb:17:9b:9a:d9:ae:73:
f6:2d:e4:25:6c:a3:80:e7:10:82:50:be:0e:9e:e0:
1c:20:e9:1e:b9:63:c0:aa:32:7b:4e:7e:6b:1d:04:
45:b4:f3:b5:a2:0d:fa:3a:16:60:aa:52:e9:b5:73:
62:2f:63:46:f3:0a:46:48:26:42:97:1f:73:ec:17:
99:33:3d:da:b9:ff:ea:ce:3d:bf:5e:38:48:36:8a:
a0:17:df:23:0c:96:f8:72:a0:d6:df:80:46:25:0f:
f1:00:51:b3:bd:e3:e9:6d:4e:3f:91:fb:41:d6:ff:
99:15:64:7e:8c:98:51:93:92:f4:00:02:00:32:f4:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:7D:03:8C:B5:BE:E9:E7:E4:C2:A0:78:7B:32:A7:AB:44:EB:D5
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/G6B9A4y1vunn5MKgeHsyp6tE69U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.195.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9e:21:49:69:3e:d5:78:1e:12:ef:4d:d8:c9:73:4a:e8:0f:
a9:63:11:96:52:bf:7e:03:35:90:c3:a7:25:14:b5:13:cc:70:
02:0a:8c:3c:cf:62:05:0e:10:0e:2c:03:70:7a:8e:7a:13:ea:
e6:f8:5f:e9:6a:f4:97:79:00:8e:9f:ff:a3:3f:da:c0:8c:a1:
25:ae:88:59:5d:c3:e6:63:0e:bb:ad:06:86:72:91:7e:9d:c1:
ac:16:b8:31:cc:a8:ca:6d:08:e3:69:11:cf:79:d2:a8:5d:8f:
26:7d:31:75:b1:97:03:c9:0b:42:23:ad:84:23:62:e2:57:12:
77:4c:63:cb:e8:2a:fc:ca:37:7c:48:a2:e7:1c:f8:dd:5f:ce:
bf:63:c9:e6:45:70:cd:6a:1e:a3:a9:87:1b:e2:6d:3d:e1:d3:
35:f4:b2:ee:62:16:07:8b:57:3a:44:80:fb:be:78:22:a7:d9:
99:e5:4b:39:ae:9f:89:d8:d7:bc:0d:c3:30:d9:1a:49:09:79:
99:fb:02:95:84:23:22:24:17:9d:b1:e4:f4:32:3f:73:05:d6:
ac:eb:b0:18:59:e8:a8:58:1d:90:6d:79:7a:83:bf:0c:8d:b8:
7d:da:8e:9c:cf:ac:4c:3c:01:ca:56:02:40:03:23:a4:86:5e:
7a:57:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:23 2025 by rpki-client