Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/G9dZ5r4m371OBTQhAUF2j7baz7Y.roa
File: G9dZ5r4m371OBTQhAUF2j7baz7Y.roa (raw, json)
Hash identifier: B7NSm9g64XLALIBjI5GU/NjrZiQcCShIB/93FWdmyPM=
Subject key identifier: 1B:D7:59:E6:BE:26:DF:BD:4E:05:34:21:01:41:76:8F:B6:DA:CF:B6
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01985715E3D3ACE16A030B36E1EAA2E36431
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/G9dZ5r4m371OBTQhAUF2j7baz7Y.roa
Signing time: Tue 29 Jul 2025 16:48:29 +0000
ROA not before: Tue 29 Jul 2025 16:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216344
IP address blocks: 37.32.46.0/24 maxlen: 24
185.212.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:15:e3:d3:ac:e1:6a:03:0b:36:e1:ea:a2:e3:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jul 29 16:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bd759e6be26dfbd4e0534210141768fb6dacfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:12:cf:63:82:ef:f1:56:86:51:08:7f:e4:
a4:e7:cd:30:1c:77:fb:86:12:5e:78:7d:ae:10:49:
7f:20:9a:1f:f0:31:00:10:05:a1:f4:cc:7a:ab:5a:
a9:46:b4:63:32:13:ee:d8:3f:a5:5b:4a:4a:b3:e7:
9d:c4:e4:ac:71:39:25:0d:ad:f4:d4:a2:60:8e:27:
a0:0c:66:de:79:ee:b5:4e:db:aa:7b:d8:1f:ef:fb:
31:f4:21:97:f1:28:7c:52:5f:4b:39:d8:83:77:01:
5d:7e:dd:c2:b0:e9:e0:71:ea:e2:0d:cc:db:1e:65:
ce:2c:20:09:c2:9e:aa:99:15:7c:f2:c4:3e:47:d7:
25:94:f9:bf:80:7d:93:7a:d0:a1:74:03:ed:37:01:
0c:65:d3:81:9e:0a:78:9f:85:d8:9c:e9:ad:69:0b:
96:6f:c0:67:68:02:7b:fe:c6:e7:c8:ee:ee:55:f4:
69:2a:54:41:db:55:c6:0b:85:cd:56:07:c7:9c:05:
97:4e:ea:6c:31:cf:58:36:14:0c:e9:4c:65:00:a6:
b3:8f:3e:c2:54:18:85:b9:a1:ad:6b:8d:00:e0:25:
83:de:c0:83:b4:be:3f:dc:af:60:11:15:0e:52:d8:
e9:e4:04:77:82:cd:8d:2e:54:7d:e7:fb:e5:6d:fa:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D7:59:E6:BE:26:DF:BD:4E:05:34:21:01:41:76:8F:B6:DA:CF:B6
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/G9dZ5r4m371OBTQhAUF2j7baz7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.46.0/24
185.212.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a0:d0:bf:a2:8f:d3:be:c1:48:47:d5:a9:53:ca:ed:78:92:
ef:b5:9f:0b:73:59:5a:f9:d8:e7:04:6e:0c:1c:13:50:fe:42:
03:76:03:c7:a9:f3:d5:8c:6b:63:37:46:e3:b2:74:a4:5a:88:
a7:45:fb:f9:f9:47:14:21:4e:c9:0c:19:b7:95:69:4d:12:63:
7e:28:15:d1:26:52:fd:8d:af:53:67:67:aa:9f:e0:1e:65:64:
d4:7f:8a:3e:71:a2:54:0c:b8:25:ea:24:5a:83:d2:c6:77:47:
e1:ed:df:a6:16:bf:0a:f9:5f:7f:75:12:d3:fa:7b:81:8c:03:
91:fe:54:a4:84:b1:16:15:af:ce:e0:00:9a:02:43:8d:ac:3e:
ea:23:4c:12:c1:6e:ee:94:b8:f4:da:4d:4c:72:06:0d:3f:32:
48:4f:7e:cc:23:0c:c5:67:d7:71:ad:a9:fc:9b:ae:cc:c2:0a:
f1:92:3c:50:83:1e:5f:eb:c6:03:8b:e1:b8:d4:79:11:46:d5:
fe:60:5c:7e:1a:1a:07:a9:ea:56:fc:84:5f:ec:23:be:4c:e9:
f7:e3:5d:d3:de:90:f8:18:2c:11:c4:50:de:91:69:8f:4f:48:
58:87:36:61:ef:5e:1f:68:2f:4c:43:81:3f:11:e9:cc:79:1f:
69:16:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 22:35:43 2025 by rpki-client