Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/GVP6YRET1GMrlKgZYAjt13RVqgw.roa
File: GVP6YRET1GMrlKgZYAjt13RVqgw.roa (raw, json)
Hash identifier: LUthf2xa7fthu+iWne8EMO8YrNzfF2//h9ZZZBNsubE=
Subject key identifier: 19:53:FA:61:11:13:D4:63:2B:94:A8:19:60:08:ED:D7:74:55:AA:0C
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0197C0BB7F46CEDAC6FB54074E0C207D12AA
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/GVP6YRET1GMrlKgZYAjt13RVqgw.roa
Signing time: Mon 30 Jun 2025 12:06:42 +0000
ROA not before: Mon 30 Jun 2025 12:06:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216178
IP address blocks: 185.37.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:bb:7f:46:ce:da:c6:fb:54:07:4e:0c:20:7d:12:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 30 12:06:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1953fa611113d4632b94a8196008edd77455aa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:d4:ce:55:76:b8:c5:d9:c6:e6:e2:8d:6d:
fa:a7:5a:c4:e4:99:f3:c6:45:19:4e:80:73:59:3e:
51:e3:86:67:07:58:ef:0e:48:44:ae:66:b6:a9:3d:
ac:93:54:98:f6:c6:6e:3e:a1:1e:18:c0:c4:f9:d2:
17:d1:de:9f:0f:84:b2:d3:34:c4:d8:52:13:4a:b4:
e1:db:83:09:65:9b:55:19:f6:48:b0:f1:16:60:6a:
60:19:e5:6a:40:d9:05:f2:9f:8a:c0:dd:98:30:fa:
7f:73:27:a1:59:a0:e6:72:c4:c4:30:6d:3e:e0:7a:
d2:8f:a4:28:3f:ed:c1:63:3a:3f:62:82:40:f0:f6:
28:af:20:19:0e:af:1d:4b:63:a4:45:f3:f6:cb:c5:
c4:dd:a5:5e:1e:d8:10:3f:c4:83:fb:a6:cd:24:85:
3a:4e:ad:16:b4:d6:d2:ca:ac:29:63:1f:66:43:22:
ae:cf:76:f2:c3:18:f8:c9:74:de:bd:68:3a:be:a4:
90:e4:c7:2c:ef:cf:e0:3c:ea:b8:a6:5e:9f:a9:de:
87:3a:2a:8c:97:6e:e9:ef:53:f0:b4:43:bd:a8:0f:
9e:6f:a6:a2:ee:da:f5:71:85:bc:ed:eb:da:77:fc:
ed:d6:70:ff:64:52:a8:e2:d4:bd:c9:84:2f:09:54:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:53:FA:61:11:13:D4:63:2B:94:A8:19:60:08:ED:D7:74:55:AA:0C
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/GVP6YRET1GMrlKgZYAjt13RVqgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.194.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2a:b9:70:41:31:0b:63:41:3f:a3:41:8b:19:b8:9a:9b:a6:
f6:b7:fd:0f:f0:7b:8f:13:37:11:e4:f6:09:33:6b:e5:36:c0:
53:94:03:1b:8e:58:90:4f:a5:4e:67:18:c6:9f:bc:1f:1c:55:
08:da:f0:65:8d:6d:2e:a2:e0:41:5d:da:53:14:c2:c1:bb:c7:
46:3d:c9:3b:dc:cd:58:59:e5:b2:5b:20:ee:bd:97:1b:0e:51:
4f:3b:04:23:73:ac:6e:76:b4:20:6d:15:91:7c:11:44:7d:32:
63:28:e6:cd:cd:90:b8:03:a8:b6:9b:57:6d:60:a1:7a:7b:70:
c9:43:0c:5a:d7:c0:77:0d:16:45:b9:33:be:3c:9d:3b:11:df:
39:19:f1:9e:1b:26:21:eb:2e:a4:d1:0f:33:36:d4:b3:88:8d:
a5:6e:ce:d3:ca:12:c5:cc:72:4c:49:a1:3e:4b:70:90:e5:24:
36:c6:3d:5b:22:73:3f:ef:2b:44:58:9f:67:03:8e:f2:31:e9:
24:52:87:65:d6:09:28:02:07:28:23:a3:02:29:ed:1f:eb:ac:
54:de:21:6a:98:4e:a2:4e:4e:fe:c5:3b:4a:e5:68:17:ce:87:
3e:44:a4:72:0e:ed:5a:f6:61:e4:3a:c6:a3:6d:33:59:80:f9:
6b:23:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:26:30 2025 by rpki-client