Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/GduTVoXL90rcY5IbBMohmd6Di4U.roa
File: GduTVoXL90rcY5IbBMohmd6Di4U.roa (raw, json)
Hash identifier: FpxhDiPtRQpdrB9mwbp5ACWnV465MFksntDsy9t3DCM=
Subject key identifier: 19:DB:93:56:85:CB:F7:4A:DC:63:92:1B:04:CA:21:99:DE:83:8B:85
Certificate issuer: /CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Certificate serial: 01980491C6A6FA620499FB65EBAC08EE9D48
Authority key identifier: 86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/GduTVoXL90rcY5IbBMohmd6Di4U.roa
Signing time: Sun 13 Jul 2025 16:15:19 +0000
ROA not before: Sun 13 Jul 2025 16:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208076
IP address blocks: 2001:67c:2098::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:04:91:c6:a6:fa:62:04:99:fb:65:eb:ac:08:ee:9d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e80d181c253d14da1e0ba9c1d5666f5626d581
Validity
Not Before: Jul 13 16:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19db935685cbf74adc63921b04ca2199de838b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:1c:df:7b:31:3e:93:5e:be:0f:86:7b:65:
8a:fe:a6:ed:32:5a:00:a6:78:cf:0e:92:27:dd:fd:
dc:7a:43:fd:ca:a0:25:d6:c5:47:0d:77:28:5a:30:
7a:b2:73:4f:4c:a6:b7:6b:6f:43:9a:0f:93:45:03:
7b:14:20:f4:1e:0d:f3:bf:e5:16:fd:56:c8:b3:fb:
4f:a3:58:88:12:2c:a5:97:fe:5c:ac:1d:b6:ab:45:
25:7e:7d:4d:31:e3:f7:21:bc:5c:fa:1d:89:77:e3:
3c:78:e4:a4:c3:f8:c8:04:20:93:cb:74:e7:21:ef:
df:bc:0f:ee:cd:fc:b0:a6:aa:ec:7c:5f:99:fb:05:
5d:e6:57:4b:da:49:86:83:19:9c:b1:de:e0:27:2e:
9f:6c:b7:0c:52:65:53:aa:f5:52:8f:46:6d:74:00:
11:3d:df:d7:eb:54:f8:e5:21:a4:c8:5a:69:ee:70:
2c:24:b3:23:21:81:7a:a7:df:d1:be:cb:81:24:35:
93:ea:0b:4f:d7:a3:95:d2:8c:87:54:7b:83:92:f0:
de:40:1a:94:6f:6a:2a:e9:e0:d2:43:74:2d:3a:34:
6d:3c:1f:de:a0:23:d9:ea:59:20:56:c7:44:10:ac:
88:d2:7a:c3:cb:27:87:6c:41:e0:d5:85:51:52:b6:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DB:93:56:85:CB:F7:4A:DC:63:92:1B:04:CA:21:99:DE:83:8B:85
X509v3 Authority Key Identifier:
keyid:86:E8:0D:18:1C:25:3D:14:DA:1E:0B:A9:C1:D5:66:6F:56:26:D5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hugNGBwlPRTaHgupwdVmb1Ym1YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/GduTVoXL90rcY5IbBMohmd6Di4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ea609e-6538-4723-8259-73f54348823c/1/hugNGBwlPRTaHgupwdVmb1Ym1YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2098::/48
Signature Algorithm: sha256WithRSAEncryption
69:7f:d4:ba:a0:1c:b8:57:d1:33:c3:be:ac:69:d7:54:fe:b0:
03:4f:54:1d:9f:16:a0:5c:29:63:8d:89:e0:64:49:01:0d:a2:
13:70:7b:ac:4d:4e:7f:6b:c4:8b:5c:23:c7:a7:29:e0:41:0e:
1c:6a:e6:95:2b:aa:31:bc:ca:7a:8d:75:7c:b3:d4:a9:ef:6f:
a7:3c:77:81:64:4a:9d:29:77:0b:f4:b7:ef:1b:99:71:ab:63:
a3:2d:8f:07:08:ba:4e:fc:bf:16:61:5e:22:84:8c:80:ed:c0:
87:39:59:cc:7e:57:a1:5a:da:48:6d:43:c2:5e:72:2e:dd:9e:
f3:52:9a:d1:af:bd:d4:9b:77:e4:f6:f1:78:f1:42:f0:08:82:
f2:c5:9e:a9:fa:a9:38:68:94:70:fe:c9:fe:98:6c:5b:01:cf:
4b:be:41:2f:9b:38:34:30:e6:34:bc:39:1f:e1:b0:a8:00:23:
d0:f2:5d:c2:a6:21:7c:47:1f:18:40:f9:35:ba:43:0a:59:1f:
07:e7:26:f2:c7:c1:35:e1:a4:2e:d0:23:31:38:43:5c:98:dd:
dd:81:a4:55:c7:85:74:56:fe:bf:3c:d9:c1:91:14:74:31:f9:
ed:8e:65:5a:7b:d7:f9:fc:98:c0:d3:12:74:4f:65:9c:7b:b6:
21:72:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:30:16 2025 by rpki-client