Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/pGHEbNMtjLRu8Cprmj0HiXypKR0.roa
File: pGHEbNMtjLRu8Cprmj0HiXypKR0.roa (raw, json)
Hash identifier: bK/eBtnsCEyHAZ1AGMsdtF+zE9uQoD6waTin5Xv5Q5M=
Subject key identifier: A4:61:C4:6C:D3:2D:8C:B4:6E:F0:2A:6B:9A:3D:07:89:7C:A9:29:1D
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01999607E1FF7281843A41CC4B99D18C044F
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/pGHEbNMtjLRu8Cprmj0HiXypKR0.roa
Signing time: Mon 29 Sep 2025 15:12:02 +0000
ROA not before: Mon 29 Sep 2025 15:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154049
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:96:07:e1:ff:72:81:84:3a:41:cc:4b:99:d1:8c:04:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Sep 29 15:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a461c46cd32d8cb46ef02a6b9a3d07897ca9291d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:52:ce:10:5e:a6:41:57:54:b8:9e:6b:33:bc:
d3:62:ba:8d:07:17:ae:c6:36:1d:b7:3c:b2:47:1c:
0b:ac:b4:f0:1c:70:ae:05:f4:ca:12:6b:49:f9:9c:
eb:94:1b:81:8b:e7:68:f3:d3:c2:49:80:63:20:e6:
55:e8:36:51:2d:f5:c1:90:04:7b:49:f9:d3:36:06:
78:60:8e:9f:cc:0c:57:8d:f1:79:1b:0f:75:94:81:
b1:bc:11:11:12:86:2b:43:4b:01:89:a6:32:3a:a9:
70:05:c1:bf:c2:d5:ad:8a:a8:5f:d6:e6:89:b4:18:
10:d8:76:09:5f:9a:00:a8:ea:38:c8:12:df:9a:fd:
ed:8b:fc:66:2f:5b:a3:e6:a8:af:59:db:b1:20:12:
e4:73:c6:7e:2c:8c:80:f5:ea:90:a3:fd:2f:5c:b1:
3e:77:28:ee:df:4d:38:48:28:d4:71:ae:59:14:a7:
a5:3d:20:32:f6:9e:43:a7:a6:73:2f:bd:59:b9:86:
ed:a6:8c:3a:b5:84:f9:03:de:cf:8b:82:54:ec:67:
e3:05:8b:2e:ac:a3:d7:1f:48:6d:99:d4:b5:fd:d3:
29:f5:ce:86:5c:2b:4b:7b:f7:e0:76:12:50:b9:23:
6f:6a:73:8b:bc:f6:ec:eb:91:a4:d6:f3:0b:57:ff:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:C4:6C:D3:2D:8C:B4:6E:F0:2A:6B:9A:3D:07:89:7C:A9:29:1D
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/pGHEbNMtjLRu8Cprmj0HiXypKR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:01:b6:06:cc:80:2e:e9:f0:a0:22:e9:61:98:af:d1:f2:6c:
7f:17:ff:ca:7a:12:52:49:5a:18:b1:03:ef:2c:81:9a:88:bf:
a1:69:16:71:6d:63:0a:07:61:57:f1:a9:fb:84:e5:2e:b8:4b:
23:1d:d5:2e:f5:84:26:0c:ef:88:b2:b0:5f:89:ff:63:ec:af:
3f:9b:05:30:fa:6f:92:1f:1c:96:f2:0c:8a:49:b3:34:5e:05:
75:0e:4a:73:b3:6a:0f:01:e9:28:17:01:88:cf:b5:c0:58:61:
29:bd:e2:56:0d:92:72:d3:90:4c:43:2b:37:70:5d:ad:c6:3c:
35:96:99:0c:3c:c8:ac:0d:15:40:34:e8:45:f6:32:39:b1:71:
0b:0d:65:e1:9b:bb:10:3d:0f:bf:b0:eb:44:4b:93:1b:91:5b:
52:f9:07:3c:16:3e:c0:a9:25:b8:b4:66:4a:ba:32:36:d9:50:
f0:65:a0:98:c9:c5:3a:e6:0a:19:09:2a:7f:25:fa:cc:3a:aa:
29:b6:14:78:17:3d:4c:9e:72:41:ba:5b:95:2b:5a:31:67:6e:
05:61:54:fa:8f:b8:fd:c2:e2:d2:23:a7:4f:a2:75:06:f9:4b:
c6:dd:4a:4d:e8:4f:e4:e1:d6:1c:a1:db:60:ea:cf:55:1c:66:
83:7f:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:38 2025 by rpki-client