Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/gtqtvDZxxq5MJdwetq5IVth42z0.roa
File: gtqtvDZxxq5MJdwetq5IVth42z0.roa (raw, json)
Hash identifier: DsoC8S+ekUdxd5VaMM9eODyiV+OQ6KDTcMckhDvQ+dw=
Subject key identifier: 82:DA:AD:BC:36:71:C6:AE:4C:25:DC:1E:B6:AE:48:56:D8:78:DB:3D
Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial: 019961D528E3F17B3ACFA19C831C4DF9EA25
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/gtqtvDZxxq5MJdwetq5IVth42z0.roa
Signing time: Fri 19 Sep 2025 11:56:23 +0000
ROA not before: Fri 19 Sep 2025 11:56:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 94.139.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:d5:28:e3:f1:7b:3a:cf:a1:9c:83:1c:4d:f9:ea:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Validity
Not Before: Sep 19 11:56:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82daadbc3671c6ae4c25dc1eb6ae4856d878db3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:9c:5d:64:d3:fb:b6:92:88:24:b3:8e:76:
4f:e2:aa:45:22:3f:b9:fb:97:13:35:3b:b2:f4:82:
95:c5:8d:35:6f:48:b0:04:76:c0:55:3e:e4:cb:2f:
10:be:75:ab:5a:4d:8f:6c:1d:bc:8c:22:bb:85:b0:
08:70:b4:7d:04:9e:61:61:be:0f:f9:75:38:dc:a6:
58:a6:2a:52:60:86:82:05:1f:ea:e5:89:f3:53:b0:
ae:a1:ce:49:e0:6d:b6:28:60:b1:40:af:69:fc:41:
4d:4e:ad:df:ab:04:81:98:dd:3e:9a:41:8e:42:37:
64:61:49:d5:39:7f:df:3b:38:bb:66:dc:f9:13:59:
be:99:c0:3b:cb:f6:49:ce:58:f0:b0:41:f0:6d:ae:
ce:0a:a0:28:2f:73:0d:92:2c:38:b7:98:77:5c:35:
46:51:7f:d7:bb:f8:2b:cc:f3:94:b2:4d:15:1e:37:
6d:ad:6d:cf:1b:a4:c1:88:f8:2d:b1:c6:77:5c:cb:
0d:40:2e:b6:04:c1:9d:c4:f8:3e:fd:5e:3b:3b:98:
71:4a:34:67:9a:fd:12:29:ba:08:d5:69:72:9c:c5:
0a:f1:f9:a6:6a:b4:a6:1a:2b:62:67:dd:75:63:41:
18:45:a1:6f:f7:6e:00:19:36:52:cf:f9:5e:33:53:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:AD:BC:36:71:C6:AE:4C:25:DC:1E:B6:AE:48:56:D8:78:DB:3D
X509v3 Authority Key Identifier:
keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/gtqtvDZxxq5MJdwetq5IVth42z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.62.0/23
Signature Algorithm: sha256WithRSAEncryption
46:8d:8c:be:52:4b:da:ba:1e:d5:be:ed:5c:32:25:58:54:44:
a5:97:64:52:8c:19:76:78:38:10:0d:f5:f3:41:08:2f:69:d6:
79:e8:e4:da:96:e5:ee:99:26:96:09:ec:9b:75:cc:11:2d:1d:
a5:7e:31:70:b1:b9:5d:a5:e4:bb:f8:59:2b:a9:75:01:e2:ce:
55:1b:8f:02:64:3a:47:c8:e7:fc:dd:23:19:fc:12:5f:0f:fe:
be:99:8a:4a:a6:a2:9a:55:11:93:a6:f2:b1:1a:bd:2f:f7:e0:
c4:96:4c:9a:dd:0f:38:05:5a:4b:14:67:49:c8:b3:86:39:51:
f4:15:6d:ec:59:8f:d5:77:ae:c3:11:b1:5b:2c:c3:5c:0f:a8:
2d:50:d4:c7:60:6a:16:14:35:a9:e0:44:03:e9:a7:ae:2b:47:
b5:c7:fc:4c:f5:a3:07:92:c0:34:c0:d0:3f:59:d8:87:73:67:
a8:98:db:10:71:f3:ab:00:15:53:32:4b:2b:79:88:b8:c2:0d:
ea:e2:ef:93:6b:49:f9:91:64:2a:41:c1:05:7c:36:45:25:54:
51:2e:37:d9:76:7a:1e:da:b3:88:09:b4:81:ed:ca:41:74:48:
9c:da:3b:3d:3b:38:66:35:1b:8d:ee:e1:06:04:48:c7:4d:d5:
80:70:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:41:05 2025 by rpki-client