Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/GXNfhhCLmXkcBaMcM3Wqb41chEc.roa
File: GXNfhhCLmXkcBaMcM3Wqb41chEc.roa (raw, json)
Hash identifier: rifz7ON+2GOQGOKbBBrmdaYyl9eb/JIR5S1cj3TU4jE=
Subject key identifier: 19:73:5F:86:10:8B:99:79:1C:05:A3:1C:33:75:AA:6F:8D:5C:84:47
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 0197FEAF943137FD0C4BC8384FDF6AF8B621
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/GXNfhhCLmXkcBaMcM3Wqb41chEc.roa
Signing time: Sat 12 Jul 2025 12:50:09 +0000
ROA not before: Sat 12 Jul 2025 12:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 87.248.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:af:94:31:37:fd:0c:4b:c8:38:4f:df:6a:f8:b6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 12 12:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19735f86108b99791c05a31c3375aa6f8d5c8447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:8c:a7:0e:44:9e:a1:41:b7:f9:bb:1f:56:
23:73:f2:22:28:fd:04:17:1f:88:21:de:05:94:6a:
36:03:25:82:6d:db:c3:d7:c5:a2:4f:7d:57:3f:ac:
e6:ba:b2:5e:66:0c:b8:16:51:46:bc:13:cd:7c:f4:
00:5f:64:69:1f:64:b3:52:f8:25:08:07:df:34:45:
a7:87:ac:64:4b:a5:e9:28:7c:8a:97:ad:58:2b:6c:
f3:a7:f0:53:2b:a3:3f:de:67:e4:7d:7d:a6:41:bf:
0e:f3:df:5e:a8:36:ff:99:30:01:f9:bb:88:a5:98:
f7:51:0a:93:c3:7a:15:e1:8c:55:e5:9d:45:ce:16:
97:cd:81:4f:2f:29:4f:a2:eb:1e:0d:80:c4:b7:43:
ed:2d:f6:ac:be:fc:c5:23:0e:8c:0b:a1:7a:c0:67:
3a:2a:9b:65:3f:56:73:c5:d3:a5:cd:be:2b:35:9a:
d9:0d:b5:af:38:67:7e:ae:e8:7f:49:a2:6d:80:15:
10:86:6c:bf:61:7d:f8:d4:e7:67:e0:67:7e:52:0d:
13:17:0b:e7:54:40:a6:8c:b1:4b:61:1e:f4:cf:96:
32:20:78:36:93:5d:ab:f4:fc:92:84:5b:6e:41:6d:
51:ab:b0:b7:68:7c:3b:a2:63:94:ee:25:59:48:58:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:73:5F:86:10:8B:99:79:1C:05:A3:1C:33:75:AA:6F:8D:5C:84:47
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/GXNfhhCLmXkcBaMcM3Wqb41chEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.146.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ec:ba:00:c7:ef:2d:95:fb:7a:34:22:25:46:5f:9f:83:c0:
30:dc:02:38:c5:80:e2:be:bb:80:8f:aa:43:c4:69:89:6f:c0:
99:c1:ac:bf:c4:bf:f4:17:9b:01:13:46:b9:f0:11:b5:5a:77:
37:25:70:85:af:b7:e6:ed:70:4c:b5:eb:f3:a0:e5:a0:b8:b0:
75:f6:89:32:5c:ae:32:15:cd:b1:51:2a:68:89:6f:9c:22:5f:
71:52:bd:8f:5b:96:06:76:ed:dc:f4:f0:e0:09:b6:4f:8b:ad:
9b:55:cc:2e:eb:3b:cc:61:b8:41:4f:95:33:b0:08:02:35:f1:
9b:df:ae:c9:9f:62:dc:d2:3b:ce:02:e3:1d:a6:5f:df:9b:08:
cd:3d:76:e0:99:b7:eb:27:3a:03:a5:1b:48:ae:12:7d:0f:e1:
cc:58:a7:57:35:92:61:30:0a:0a:c2:09:b4:25:2f:e1:d2:aa:
e8:22:86:82:d3:34:ac:d8:37:45:5d:7a:67:6d:16:e3:99:10:
e7:de:59:0e:7c:07:f0:83:dd:f6:7b:8e:99:95:9b:b2:40:53:
01:d2:07:a8:d0:22:3e:8b:75:3e:17:2a:e0:f3:05:a9:7a:44:
94:f3:fb:69:22:7f:09:7a:73:38:06:3e:d3:37:17:27:1e:f5:
e3:c4:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:04 2025 by rpki-client