Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/G2yz5IOuIAolOcaG3P6KU7S_ojw.roa
File: G2yz5IOuIAolOcaG3P6KU7S_ojw.roa (raw, json)
Hash identifier: YoDPpfODBV4pY6slsVIzzeOYSsO9aQhlE67f77Baq04=
Subject key identifier: 1B:6C:B3:E4:83:AE:20:0A:25:39:C6:86:DC:FE:8A:53:B4:BF:A2:3C
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 01980DD3EA4D2C52B3218EFF7FC5FC4E5199
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/G2yz5IOuIAolOcaG3P6KU7S_ojw.roa
Signing time: Tue 15 Jul 2025 11:24:08 +0000
ROA not before: Tue 15 Jul 2025 11:24:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56624
IP address blocks: 91.237.236.0/22 maxlen: 22
2001:67c:2b7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:d3:ea:4d:2c:52:b3:21:8e:ff:7f:c5:fc:4e:51:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Jul 15 11:24:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b6cb3e483ae200a2539c686dcfe8a53b4bfa23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:56:84:2d:ec:d9:a3:ed:bf:91:23:4c:70:
cd:ba:a3:8d:4e:5d:d9:79:e0:af:a4:4a:64:f5:e1:
5f:99:5e:8e:83:1d:34:ed:9d:47:d2:b0:60:e9:9c:
6a:67:f4:82:5d:c4:99:ac:7f:73:58:65:36:4f:76:
11:66:e0:35:1c:c5:32:6f:9d:5a:7e:4e:ef:fb:b3:
18:79:49:97:38:07:e9:c4:89:e5:ef:ed:46:a9:5d:
7a:2f:c7:3e:df:80:f3:d8:b4:4b:2c:dc:ad:18:33:
bf:27:c8:42:f9:89:50:d4:4a:fa:08:95:42:49:89:
51:56:e4:ce:9e:52:ef:f6:18:ad:19:05:90:c5:73:
23:04:6c:58:3b:77:25:fa:02:6a:93:b8:03:cb:f7:
54:98:f5:3c:9e:3f:f4:28:b9:3f:69:95:4a:aa:ef:
da:ea:e0:c6:d1:4f:59:21:2a:1f:ac:29:80:b9:a1:
e8:06:c1:2d:50:3c:41:48:1f:30:98:0d:a0:f3:97:
eb:93:5c:8f:92:5a:67:1d:f4:0c:6e:fe:ee:eb:e5:
2b:5c:8c:84:7d:81:68:d0:2c:7b:e9:d6:cd:15:9c:
e8:fb:9e:5c:56:16:b9:81:b8:14:a9:36:78:61:b5:
34:a7:75:40:93:59:f1:4b:c0:49:9b:a0:91:1d:b3:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6C:B3:E4:83:AE:20:0A:25:39:C6:86:DC:FE:8A:53:B4:BF:A2:3C
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/G2yz5IOuIAolOcaG3P6KU7S_ojw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.236.0/22
IPv6:
2001:67c:2b7c::/48
Signature Algorithm: sha256WithRSAEncryption
99:66:00:30:df:db:3e:99:f8:41:90:b2:17:b3:1f:af:f7:34:
43:ae:4a:99:33:64:d3:4a:48:ca:2c:77:49:02:4b:99:17:53:
c5:73:90:f8:10:03:28:12:ae:22:cd:57:2d:fd:db:18:b9:c4:
4f:4b:55:e5:44:ce:66:3c:7d:fe:61:ed:75:b4:23:30:e8:62:
95:d1:a7:ac:dd:d1:87:c1:2b:20:93:53:f8:4c:73:ec:bc:8c:
a4:c0:aa:23:fa:3a:02:58:c6:81:e2:ca:a7:ff:e3:c0:1e:7b:
40:60:61:7d:6d:e5:f6:bc:d3:88:5e:29:45:fa:e6:49:d0:3b:
1f:db:20:8b:86:04:81:6a:2b:a9:dc:5a:a9:b9:e1:20:29:93:
80:ad:85:be:17:48:0a:a4:5f:f6:e7:68:fd:a2:20:ee:4e:f4:
81:c3:b6:46:7e:13:42:9e:f3:c4:3d:d0:17:1b:0e:2e:a0:c0:
45:1e:96:0c:ce:25:31:c9:2b:01:0b:82:1e:5d:05:77:9c:a4:
61:0b:77:8c:f6:bf:d7:27:fb:18:2c:08:85:88:50:60:58:c5:
81:a6:53:4b:ee:58:5b:42:e2:55:af:e6:f4:8c:f9:b7:da:ee:
11:b9:a3:ea:74:18:bc:bc:0c:d7:64:bc:83:fc:05:fb:dd:ab:
4f:58:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:10:44 2025 by rpki-client