Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/GJ7WM9XZ8aPvhFL3nonJQjZ3cyU.roa
File: GJ7WM9XZ8aPvhFL3nonJQjZ3cyU.roa (raw, json)
Hash identifier: WROjdaGli8Fi41MZppDPsHHJ/iTpg3Lqh4RMCj2LsKM=
Subject key identifier: 18:9E:D6:33:D5:D9:F1:A3:EF:84:52:F7:9E:89:C9:42:36:77:73:25
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01991E7DC9CE728665D1AB47B39CA9564E04
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/GJ7WM9XZ8aPvhFL3nonJQjZ3cyU.roa
Signing time: Sat 06 Sep 2025 10:06:24 +0000
ROA not before: Sat 06 Sep 2025 10:06:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 144.56.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 08:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:7d:c9:ce:72:86:65:d1:ab:47:b3:9c:a9:56:4e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 6 10:06:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=189ed633d5d9f1a3ef8452f79e89c94236777325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f7:a6:16:11:92:09:67:d3:f6:bb:55:25:e0:
a6:49:aa:f0:48:45:db:7a:eb:29:aa:1e:e7:ea:aa:
0b:f7:87:92:33:2f:69:3d:e0:01:cf:f3:cd:76:49:
1f:61:90:a3:b5:24:ce:76:5b:13:34:f3:77:4f:f8:
80:15:64:78:12:f4:f9:6f:55:77:db:53:96:88:a4:
51:07:ba:9d:d7:67:ff:69:80:4b:2c:ec:f8:fc:4e:
e8:f3:cc:cb:d2:27:fc:75:ed:42:61:ed:9b:a5:42:
1d:15:52:80:18:c1:ed:33:2c:2c:24:e3:cd:d2:85:
fc:d3:a8:b6:66:9c:28:81:85:47:32:e6:52:2d:75:
26:b8:34:3f:06:e3:88:3e:84:68:f1:6f:56:e1:2e:
96:c2:44:9d:0b:73:e1:d8:e6:ca:05:a2:f3:0e:63:
c8:f1:b1:fd:73:d8:17:b6:66:7a:15:0a:42:b1:96:
9b:fe:05:15:f4:b4:51:5f:ff:6a:78:e1:6d:2e:e7:
74:0f:60:a3:a3:aa:55:cf:48:eb:27:de:72:8d:62:
23:d1:c6:3a:53:06:82:d2:0d:8e:e9:0d:4e:e5:b3:
b8:7e:c0:85:c0:c9:19:65:af:ad:d3:ca:12:55:36:
9b:fb:d7:a7:d9:64:89:74:2e:5e:f9:20:fb:14:f7:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9E:D6:33:D5:D9:F1:A3:EF:84:52:F7:9E:89:C9:42:36:77:73:25
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/GJ7WM9XZ8aPvhFL3nonJQjZ3cyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.39.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4f:71:fd:f2:0d:54:20:59:4a:fe:14:5f:16:6f:82:fe:0d:
8a:31:8c:bc:42:86:a3:fe:00:a4:4b:43:7b:83:16:75:d8:84:
4f:6d:c9:33:87:23:52:ef:10:c9:11:56:75:67:64:d7:6c:13:
33:42:00:f8:3e:97:8a:24:88:d6:79:60:05:e9:14:7e:9c:84:
d7:65:cb:d1:02:b0:3b:62:19:b0:bf:a7:84:e4:9b:25:ba:b6:
32:e7:a3:4b:2a:dc:df:ee:99:31:59:0e:21:f4:df:e8:d0:84:
17:d6:28:65:d3:1b:cc:30:23:6a:c3:e9:71:86:b9:ce:ca:39:
1a:8f:57:20:bd:13:5a:fd:95:7c:b8:fc:6b:4a:67:a7:36:0f:
6b:85:d9:c9:31:ee:45:1e:70:5f:2f:44:3f:3f:98:9b:ad:4f:
81:0e:17:8f:db:cd:7e:0c:08:c2:98:b9:83:1d:06:a1:58:e8:
0f:c1:aa:51:fa:b5:1d:f3:6f:17:6a:a6:f3:3e:c8:ef:1a:12:
1c:35:20:86:08:b4:f4:19:0a:bf:67:96:aa:85:cb:0e:7d:5e:
c3:5b:fa:2a:38:b1:4b:43:5d:97:55:f4:7a:32:21:30:e7:6c:
ce:f1:71:c4:fa:ab:f2:3c:55:76:93:8e:79:28:1a:b5:c2:cf:
ed:75:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:27:44 2025 by rpki-client