Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/o41yDBZggn4lr9NsPB_Gp8GKfBM.roa
File: o41yDBZggn4lr9NsPB_Gp8GKfBM.roa (raw, json)
Hash identifier: KRnKN0lrEk1hL6MxXIHkfLYCNSrhlEIODabcvB9s1Rk=
Subject key identifier: A3:8D:72:0C:16:60:82:7E:25:AF:D3:6C:3C:1F:C6:A7:C1:8A:7C:13
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 0197EAC4AB0268A41973A6CA165E723701CA
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/o41yDBZggn4lr9NsPB_Gp8GKfBM.roa
Signing time: Tue 08 Jul 2025 16:00:46 +0000
ROA not before: Tue 08 Jul 2025 16:00:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216139
IP address blocks: 109.120.141.0/24 maxlen: 24
109.120.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:c4:ab:02:68:a4:19:73:a6:ca:16:5e:72:37:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jul 8 16:00:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a38d720c1660827e25afd36c3c1fc6a7c18a7c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:e2:ca:a6:8c:08:24:11:c2:54:6b:e5:07:
52:35:4b:1b:7c:e9:e9:2d:f2:0b:f6:e1:a9:9f:61:
e0:37:08:58:4d:ec:a5:2c:6c:9c:a8:84:a3:8d:2b:
bd:5f:b2:d4:3f:ab:e0:f0:11:8d:3b:f4:e0:99:de:
c9:00:22:77:c1:0f:7f:8b:7a:55:1b:d7:51:6b:ec:
99:9e:57:cf:b8:24:b8:ec:58:3e:b1:91:ae:86:43:
d1:a7:e2:3e:51:d8:16:ef:a9:ce:53:b6:78:43:62:
90:f7:4c:a3:f4:70:58:38:ae:22:6b:4b:ea:e9:18:
b8:32:2a:c2:4b:b0:99:d0:62:df:61:d8:e4:09:64:
cb:2e:23:ee:4c:93:29:84:f3:f5:ed:f3:d3:55:b4:
e5:65:62:be:fa:95:08:c9:10:27:14:b3:55:31:16:
45:96:9e:9b:d9:8e:00:e0:17:5c:bd:8d:e3:88:1e:
fe:cc:dd:d3:37:f3:30:4c:c1:c8:3a:85:84:d3:8c:
cd:7b:e0:1e:d8:37:87:91:cb:9a:18:25:2a:14:63:
74:65:f9:79:c1:d0:2d:c2:cb:42:d9:d6:86:f9:88:
3c:a4:37:d1:22:7f:09:1d:37:05:14:c6:a5:52:50:
06:f2:d5:59:6c:c8:da:dc:8a:4f:93:a1:52:b4:1c:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8D:72:0C:16:60:82:7E:25:AF:D3:6C:3C:1F:C6:A7:C1:8A:7C:13
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/o41yDBZggn4lr9NsPB_Gp8GKfBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.141.0/24
109.120.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:da:15:cd:12:6d:b1:a0:9e:da:cf:dd:5c:de:a7:20:34:55:
21:57:8a:1c:71:cf:c3:4e:06:da:32:8b:f7:ea:14:57:50:1a:
c5:32:2b:21:17:d9:b4:bf:bf:5e:e3:1c:d0:6c:6c:6f:2d:0f:
db:29:10:7d:94:7c:29:95:b2:f6:80:c7:d6:a8:16:b5:76:28:
20:54:51:f2:2b:3a:08:28:c1:77:d0:0c:47:5e:92:9d:db:61:
f5:d4:4b:f5:f0:7a:c4:79:0a:5d:7a:d0:60:4e:31:11:5f:c7:
ac:d0:69:6b:b6:77:a0:68:34:a1:8a:75:39:83:0a:29:8a:40:
61:11:29:b9:fe:ae:26:fa:69:dd:27:cb:0f:32:64:5d:cc:84:
30:43:53:e8:27:44:a5:72:4a:95:8f:93:b5:bc:7c:5e:a7:a0:
b2:37:e1:b7:24:f3:79:28:ab:bb:d1:4f:da:95:7e:47:f3:29:
9b:64:8d:ad:81:b4:3a:8d:d3:a1:52:4a:49:ca:fb:6f:41:f3:
19:89:fc:8d:c2:76:2f:91:64:33:b6:03:62:53:f0:1d:0b:dd:
07:e9:c3:19:c1:38:16:fc:5c:23:7f:28:af:22:6b:15:73:89:
21:c5:fb:7e:72:80:de:5f:45:bf:60:bf:cb:87:84:dd:8b:d9:
35:9c:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:15:07 2025 by rpki-client