Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Gu0a9sF-oTlzUTSX-FJz6zhqZ-4.roa
File: Gu0a9sF-oTlzUTSX-FJz6zhqZ-4.roa (raw, json)
Hash identifier: CcypVr6VDhCIB6YUKvCqhmxCZKQJ5brEG0gJUCIGl6M=
Subject key identifier: 1A:ED:1A:F6:C1:7E:A1:39:73:51:34:97:F8:52:73:EB:38:6A:67:EE
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019938370C8147B0F0CE853FE8712E9425AD
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Gu0a9sF-oTlzUTSX-FJz6zhqZ-4.roa
Signing time: Thu 11 Sep 2025 09:59:15 +0000
ROA not before: Thu 11 Sep 2025 09:59:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213999
IP address blocks: 194.61.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:37:0c:81:47:b0:f0:ce:85:3f:e8:71:2e:94:25:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 11 09:59:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aed1af6c17ea13973513497f85273eb386a67ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:2c:fa:3d:c5:f3:9d:60:ca:3d:4e:bf:40:
be:39:c7:4a:13:68:d3:df:94:67:82:6a:86:c1:ef:
b4:be:aa:28:34:20:37:96:63:27:e7:50:66:02:82:
3e:96:56:db:2e:3f:09:54:2e:2e:bb:2c:98:6b:8e:
6c:c1:7a:05:b0:2d:50:0d:50:ae:1d:b3:0c:14:69:
99:c0:34:cd:24:04:3f:96:f0:f7:d8:c7:a2:10:dd:
ad:12:c1:36:a6:42:21:f6:1d:ef:89:9a:ff:99:ea:
2f:14:cf:0a:7c:5b:2d:b1:9b:1f:18:ff:b4:d6:f4:
33:02:6b:3d:01:3a:2b:99:6b:9f:bc:c8:ea:84:a2:
a1:0d:9a:dc:61:89:f7:ca:97:0b:36:6e:54:15:32:
1a:e4:d1:6c:d6:68:bc:04:14:d0:a6:cd:f3:dd:78:
05:bb:84:7f:95:87:17:fb:7a:29:3b:e9:6c:30:a0:
76:ec:55:61:2a:93:de:93:2e:7d:04:11:d1:e4:ad:
74:de:ff:cd:ea:bb:42:3b:f2:58:ba:bc:4a:de:3a:
c0:91:29:b2:4d:bd:f7:94:7f:f9:fc:26:59:a0:41:
43:1e:bb:f1:6b:5f:c2:0d:92:66:b3:e3:b3:fb:6d:
20:3b:9b:3b:7a:68:30:ce:9c:1d:1f:fb:24:4a:ae:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:ED:1A:F6:C1:7E:A1:39:73:51:34:97:F8:52:73:EB:38:6A:67:EE
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Gu0a9sF-oTlzUTSX-FJz6zhqZ-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.9.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7f:6e:d6:fc:9b:df:fb:e3:39:33:a6:05:41:b2:05:03:b0:
bd:97:3f:60:a4:aa:d8:d0:00:15:a6:ae:98:da:3e:dd:3e:f6:
21:5a:77:26:9b:ff:58:ac:23:ff:fe:44:e1:df:f7:03:12:b1:
83:18:8b:f9:1b:0b:aa:a2:61:d8:36:04:02:d4:e7:69:0a:8e:
9a:df:34:4b:48:1b:bd:9e:29:95:cd:f0:c7:da:09:16:c6:60:
86:3e:19:a6:38:b3:de:4f:91:a2:70:e3:78:a1:9c:25:04:a2:
dd:23:bb:6d:0c:43:d7:dd:f3:3b:49:47:80:33:61:a6:93:be:
63:a5:f9:e4:76:95:e6:2b:65:dc:33:4f:a1:0e:08:cd:a2:b1:
e7:70:1a:c8:6f:8d:a7:f6:93:e7:37:bb:a6:02:e0:48:6d:9f:
5e:fe:ec:fd:bc:19:76:58:56:55:fe:a7:6e:8c:93:7c:4a:8d:
f2:e9:ab:14:71:f9:45:54:f8:59:49:db:fa:ff:b7:19:57:be:
c3:08:be:f5:e7:15:3a:af:43:e0:08:3a:f3:19:60:54:06:85:
9e:72:b2:a9:06:61:06:cc:5a:30:3c:38:a0:39:ad:ac:72:42:
08:01:42:65:1a:75:84:f6:bb:bf:8b:b2:eb:12:79:e8:ad:eb:
38:32:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 05:54:59 2025 by rpki-client