Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/glY7K_VBa2HojfqG898R2eLhffg.roa
File: glY7K_VBa2HojfqG898R2eLhffg.roa (raw, json)
Hash identifier: 80gYtNv3OgPif9u1ut/W6RSmda4Ikow/yLOby8605E8=
Subject key identifier: 82:56:3B:2B:F5:41:6B:61:E8:8D:FA:86:F3:DF:11:D9:E2:E1:7D:F8
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019832229C492F84A8149F939A5F2F54AF2C
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/glY7K_VBa2HojfqG898R2eLhffg.roa
Signing time: Tue 22 Jul 2025 12:36:25 +0000
ROA not before: Tue 22 Jul 2025 12:36:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.148.132.0/22 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.130.0/24 maxlen: 24
95.155.131.0/24 maxlen: 24
95.155.132.0/24 maxlen: 24
95.155.144.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/24 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.150.0/24 maxlen: 24
95.155.151.0/24 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.157.0/24 maxlen: 24
95.155.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:22:9c:49:2f:84:a8:14:9f:93:9a:5f:2f:54:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 22 12:36:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82563b2bf5416b61e88dfa86f3df11d9e2e17df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:c0:80:24:25:28:28:3a:e5:64:cc:01:b6:
6a:19:ef:75:e7:ed:bc:02:ee:ea:3f:87:42:ba:9b:
90:cc:87:88:69:6a:2a:dd:38:0b:49:c3:ac:10:aa:
c5:e1:d6:98:06:bc:70:f5:5f:b4:e0:74:7b:22:f7:
3d:ba:9e:78:08:a7:b6:f6:3f:f2:37:85:28:e1:de:
84:31:6c:09:46:58:27:a3:4f:0e:44:aa:46:fb:df:
84:42:b7:f4:0c:64:a8:87:5d:eb:50:bb:0d:bb:92:
9d:3e:f8:d9:bc:0c:ff:3c:ed:51:4b:98:4e:e5:00:
28:a0:87:15:be:bc:62:4e:30:37:4f:40:c1:40:0c:
60:70:42:99:12:58:00:03:b7:27:f5:2d:9f:07:e4:
66:b0:7b:fe:c4:a8:ba:7d:8e:89:2e:00:82:8b:bb:
ff:cc:ce:c2:1a:91:3b:66:91:52:96:4f:5d:0c:dd:
5e:84:c9:75:ff:07:d7:e1:4d:e0:ae:9d:f6:c6:55:
27:6b:31:bf:99:f5:97:e5:50:5a:97:f6:6b:22:f8:
f4:57:37:3c:92:75:e9:c0:7f:1f:f4:be:ef:a6:68:
e7:87:8b:69:80:4b:0b:c1:6e:22:4d:56:d7:6d:f5:
54:62:26:c1:29:24:9b:ad:88:62:15:f4:fe:e9:92:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:56:3B:2B:F5:41:6B:61:E8:8D:FA:86:F3:DF:11:D9:E2:E1:7D:F8
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/glY7K_VBa2HojfqG898R2eLhffg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.132.0/22
95.155.129.0-95.155.132.255
95.155.144.0/21
95.155.156.0-95.155.158.255
Signature Algorithm: sha256WithRSAEncryption
2a:1e:65:a7:63:f7:3b:03:55:63:2d:74:30:d1:a6:8e:1e:30:
6f:32:a1:95:d2:7d:0f:db:49:df:fe:eb:c9:eb:22:80:55:ed:
01:b4:e4:5a:3c:da:59:93:65:a7:95:2e:e0:4e:e3:37:88:e7:
a7:7f:93:1d:95:dc:06:c4:de:eb:82:69:fa:6d:9b:45:a7:c9:
c7:4d:f8:50:f5:32:4b:ac:79:d6:10:a3:8f:59:ef:d1:46:bf:
52:92:ca:4d:58:a4:cd:30:18:be:06:19:89:0a:c0:57:5f:ec:
07:31:0e:53:8d:ce:4a:8e:f0:17:d7:75:6f:cd:57:76:82:5c:
52:e8:99:93:b0:24:13:ff:8b:9e:a8:0e:b8:93:47:74:b7:43:
50:f1:f2:1c:06:5a:9e:21:12:c9:06:05:73:f1:91:b4:12:7a:
d9:50:ed:eb:36:f9:43:7e:87:56:2a:ae:ac:6a:02:af:de:89:
e8:b4:4c:03:24:32:3d:20:20:33:c9:8b:75:f2:c1:54:8e:4f:
5e:f0:6b:08:69:88:d0:f6:3b:d7:ee:57:23:1f:4b:0b:68:e6:
92:3c:0c:19:c0:5e:bd:9f:60:1a:01:c5:b0:24:89:a9:ac:7c:
48:67:57:54:10:9e:2a:4b:e3:bb:01:59:41:b2:5a:49:5d:59:
4c:6f:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:08:03 2025 by rpki-client