Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/GnrB7Fd7Rg0Izzl2CcYyxF3uC9M.roa
File: GnrB7Fd7Rg0Izzl2CcYyxF3uC9M.roa (raw, json)
Hash identifier: 5W1UPJlc7q2qwrOgo4Cf0M5PPMa5x9YyDkf7wVYVJbA=
Subject key identifier: 1A:7A:C1:EC:57:7B:46:0D:08:CF:39:76:09:C6:32:C4:5D:EE:0B:D3
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 019836EFD9565FB554EBCC66A4B199711D38
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/GnrB7Fd7Rg0Izzl2CcYyxF3uC9M.roa
Signing time: Wed 23 Jul 2025 10:59:05 +0000
ROA not before: Wed 23 Jul 2025 10:59:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50749
IP address blocks: 217.66.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:ef:d9:56:5f:b5:54:eb:cc:66:a4:b1:99:71:1d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jul 23 10:59:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a7ac1ec577b460d08cf397609c632c45dee0bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:3e:79:94:82:9f:2f:6f:68:98:d5:2f:8d:
fc:67:5d:fd:2a:45:71:91:d4:3b:04:b1:41:da:3e:
23:7e:b0:fc:d0:00:21:b1:10:02:4c:9a:b4:55:b1:
62:e6:42:be:09:2c:a4:20:70:73:da:e2:ad:58:7d:
93:8a:a6:f0:26:43:36:2b:88:84:ae:b3:d9:cc:d2:
5c:b6:a8:06:4c:32:d0:e2:21:66:e2:a8:1c:93:90:
ee:9d:65:57:d6:ac:6b:5a:88:71:c6:68:a7:9a:a2:
91:1f:bd:0e:b0:84:be:f1:67:c8:5e:85:de:9f:12:
2f:b8:51:46:dc:ab:62:ce:05:9c:ca:45:32:10:77:
5b:69:c3:85:3b:8e:09:b0:11:34:fe:bc:a0:99:cf:
1c:4e:aa:1b:fa:04:4d:d0:45:6f:e9:cf:ce:54:c7:
3b:2f:6a:91:ae:07:dd:61:90:8e:db:99:35:9a:91:
99:67:14:59:50:7c:db:29:a0:6f:39:80:7a:47:c7:
e0:86:35:d2:fb:26:e5:9b:bf:28:aa:f4:30:37:ff:
2a:38:fe:7a:d8:f7:c2:5d:59:ff:7f:31:6b:ef:cd:
96:b4:88:66:d1:a8:0a:2e:f5:d2:25:e9:36:3e:7f:
74:b4:73:98:4c:e3:e8:f4:6d:96:71:bd:2d:29:8a:
89:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:C1:EC:57:7B:46:0D:08:CF:39:76:09:C6:32:C4:5D:EE:0B:D3
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/GnrB7Fd7Rg0Izzl2CcYyxF3uC9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.66.205.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9a:d7:e4:83:7d:07:8d:88:dc:79:9c:8e:63:02:f6:4b:29:
b1:e1:48:c7:9d:43:56:48:e9:f1:14:72:17:13:fc:69:d5:fd:
05:70:51:51:ed:da:6d:e3:9e:23:34:76:9c:32:98:24:8e:d2:
36:57:14:0a:9f:f0:ea:69:a3:9d:91:ed:67:ba:8f:d7:f5:f5:
ea:27:a2:11:10:7d:99:0f:6f:91:94:1b:4e:68:37:fd:6e:39:
07:eb:ab:34:dd:4e:ae:f0:68:4d:d8:13:a1:0f:01:ce:8b:2f:
ac:0c:87:7c:a0:af:c8:05:df:d7:45:a8:e8:c1:03:b7:39:80:
8d:7a:bb:90:26:83:af:dd:97:0f:4b:37:56:8e:81:f9:65:9a:
bf:23:ce:07:45:97:03:03:21:a0:a5:01:b2:f3:67:af:cb:c4:
8e:3d:b1:ad:13:6c:46:0e:52:34:bc:a7:ae:22:1d:9d:2e:92:
a9:db:61:40:03:62:78:7a:0f:9b:d0:ae:7c:54:0d:f4:1a:35:
69:f8:10:45:8f:85:04:f9:4e:f4:dd:e4:c9:18:3e:d2:f0:38:
2d:db:e9:25:e7:4a:51:3e:4b:54:97:e3:11:2f:bd:ce:a6:d4:
4f:7c:dc:db:03:ef:34:85:79:de:44:a8:40:e2:ad:78:98:fe:
3f:22:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:03 2025 by rpki-client