Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/K1GYgGr3hVsUpWVJLHmGy32L5QA.roa
File: K1GYgGr3hVsUpWVJLHmGy32L5QA.roa (raw, json)
Hash identifier: V+/gfd5Z1YHEZovVaNN6AlDJJhDgcbG2IadrxrDNEPo=
Subject key identifier: 2B:51:98:80:6A:F7:85:5B:14:A5:65:49:2C:79:86:CB:7D:8B:E5:00
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01990FEA40DB34DC3DD4952D82B3AF6B1CF3
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/K1GYgGr3hVsUpWVJLHmGy32L5QA.roa
Signing time: Wed 03 Sep 2025 14:10:34 +0000
ROA not before: Wed 03 Sep 2025 14:10:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201744
IP address blocks: 150.40.97.0/24 maxlen: 24
150.40.98.0/24 maxlen: 24
150.40.109.0/24 maxlen: 24
150.40.110.0/24 maxlen: 24
150.40.111.0/24 maxlen: 24
150.40.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:ea:40:db:34:dc:3d:d4:95:2d:82:b3:af:6b:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Sep 3 14:10:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b5198806af7855b14a565492c7986cb7d8be500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:9b:bb:dc:f0:6d:ca:d2:9f:77:cd:6e:b6:
ef:f0:49:e6:fb:55:6f:c5:6e:a7:9b:10:71:ef:b2:
50:ca:61:f1:c8:03:ad:c2:f3:37:10:71:7b:2b:dc:
db:e0:5c:dc:a6:ad:97:4c:c1:26:22:51:20:65:f5:
dc:ee:0a:b3:4f:45:85:10:1b:74:f4:ff:6b:02:22:
f5:3b:a0:a8:20:7d:e1:82:a9:6e:4b:78:2b:38:14:
4d:84:aa:24:ac:c5:62:d1:1b:f1:3a:f9:d6:aa:b3:
7b:e2:40:f8:ae:19:c7:8c:eb:e0:af:e2:09:78:5e:
c4:35:62:96:74:3e:de:4c:34:be:d2:ff:f0:d5:bc:
54:37:c3:eb:74:46:3e:d1:33:92:9b:5a:ad:ef:1a:
65:31:29:7c:3b:f4:f0:66:89:e5:73:8d:93:91:80:
dc:1d:b1:4c:8f:c0:62:fd:ac:68:5c:2c:55:b8:7a:
45:4d:7e:2b:ab:70:dc:30:70:bf:a2:55:f6:0d:dd:
70:96:42:0b:d7:08:9b:f1:82:1e:1b:7e:ef:37:af:
32:ff:d2:cd:a5:5d:16:5f:94:39:82:bf:59:11:92:
55:4d:01:f7:17:23:5f:3e:40:6e:c7:d5:df:55:c2:
c3:ef:2a:c3:76:c9:a7:e4:60:4a:ef:51:7f:8b:77:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:51:98:80:6A:F7:85:5B:14:A5:65:49:2C:79:86:CB:7D:8B:E5:00
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/K1GYgGr3hVsUpWVJLHmGy32L5QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.97.0-150.40.98.255
150.40.109.0-150.40.112.255
Signature Algorithm: sha256WithRSAEncryption
3d:56:c5:f4:d3:79:0e:08:24:db:c0:8f:91:9a:22:4d:be:91:
79:fe:e7:93:ea:16:53:1e:37:03:ce:49:4e:64:68:70:95:08:
4c:b9:a5:ec:b4:a9:b8:ae:20:05:46:fd:85:50:23:21:ac:ae:
06:7d:9f:16:d0:c5:a7:31:6b:67:de:ef:13:69:9d:1a:74:8d:
c2:27:3a:0a:2a:12:ad:8e:6b:01:84:a1:fb:7a:8c:fb:82:dd:
b2:8f:fd:8f:26:4c:35:3d:90:8f:f6:39:6b:f3:85:78:0a:7f:
0f:5f:cf:cd:19:8c:49:10:0d:4f:8e:b1:8c:67:97:a2:c3:30:
48:b1:8a:e6:89:c2:ff:85:79:ce:dd:82:63:02:3b:4a:4f:e9:
e0:29:0c:3d:6c:9c:4e:df:8a:00:b5:1a:67:99:57:da:c2:78:
e6:5c:43:84:49:50:72:ab:d3:da:6e:49:c6:7a:e7:6f:19:5d:
c8:33:3f:53:a7:9e:ce:ea:41:b8:1f:f1:c8:e7:21:29:19:a4:
f9:88:c9:d9:e6:1b:f4:cc:ee:25:b2:1d:ce:be:13:aa:1f:45:
ad:fe:4f:6b:2e:3b:03:30:ad:65:9f:c5:24:69:25:74:cb:77:
9a:d1:38:b5:d4:17:41:87:0a:7f:1b:0d:61:a7:87:b6:e2:fa:
57:6c:75:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:47:20 2025 by rpki-client