Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/GvpbXDZ3PvGHC6CRPFaBrB4OBOU.roa
File: GvpbXDZ3PvGHC6CRPFaBrB4OBOU.roa (raw, json)
Hash identifier: QK6+N1u3xwguItDTFCohthwXAVIsV2u4+FjHuAM9tAY=
Subject key identifier: 1A:FA:5B:5C:36:77:3E:F1:87:0B:A0:91:3C:56:81:AC:1E:0E:04:E5
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019A17FA7D549D72D65E6C8834027487289A
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/GvpbXDZ3PvGHC6CRPFaBrB4OBOU.roa
Signing time: Fri 24 Oct 2025 20:48:03 +0000
ROA not before: Fri 24 Oct 2025 20:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 46.20.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:fa:7d:54:9d:72:d6:5e:6c:88:34:02:74:87:28:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 24 20:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1afa5b5c36773ef1870ba0913c5681ac1e0e04e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:a0:56:be:04:a3:3f:85:1d:fa:9b:65:ef:
01:f5:14:4c:af:86:9c:ad:04:1f:57:66:d3:e3:24:
cc:fe:c2:d0:58:63:90:d0:18:3c:31:7e:fe:66:06:
49:58:ce:d4:c0:48:a5:b0:91:53:6a:40:82:2a:90:
ff:cb:77:dc:0f:74:5c:54:bf:e0:97:9e:af:9a:36:
ff:9f:57:d3:e4:66:a4:d0:2f:54:53:23:fc:d1:98:
63:aa:d4:36:8f:a7:96:bc:7f:31:97:a7:2a:1a:6e:
52:b6:09:29:b8:a0:bf:17:9d:bc:36:55:5f:56:35:
b2:36:35:cd:07:83:c7:f7:63:b3:db:bb:c8:00:03:
b6:8b:7a:db:5a:2b:4d:57:65:e8:aa:9a:f5:83:4e:
bc:e7:40:63:3e:84:ec:bc:ec:aa:04:5f:13:5e:40:
45:61:56:ab:03:91:f2:a5:a4:28:6c:55:5a:ee:ff:
7a:77:ef:1c:4f:f7:1e:24:dd:92:26:92:24:40:b1:
f4:da:d0:ae:80:d1:b5:7f:1c:2c:27:87:2c:06:90:
c8:48:e7:2b:5c:7b:63:92:85:e4:83:69:01:b9:ba:
c0:d6:97:36:15:4e:30:da:39:fa:8e:d4:c3:b1:d9:
05:df:f0:43:92:41:6c:8c:bb:17:db:07:4b:10:dd:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FA:5B:5C:36:77:3E:F1:87:0B:A0:91:3C:56:81:AC:1E:0E:04:E5
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/GvpbXDZ3PvGHC6CRPFaBrB4OBOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6c:b1:88:e0:b3:d1:2d:52:be:21:7d:c9:2f:e7:b5:ee:48:
b6:11:0a:41:af:5c:e1:b0:1f:0b:5e:ac:18:9e:bb:cc:72:bf:
97:f4:1a:38:f2:62:98:1e:e4:07:45:c3:3d:2b:bd:98:94:01:
ed:95:35:79:a4:84:e7:cd:30:96:19:49:a2:e6:77:6f:d7:c9:
c2:43:60:19:33:de:6b:94:18:fa:42:0c:c5:47:92:8a:92:bb:
13:47:8f:52:69:42:49:93:14:c5:86:3f:57:03:8e:10:39:f7:
2e:c5:1e:b4:88:d4:1e:9f:10:e4:6f:cf:bf:be:7d:9f:c0:7c:
0c:93:6a:1a:30:9d:8c:39:ed:aa:16:1b:f9:d1:8f:3d:ef:05:
90:5c:c0:6a:2b:63:39:8c:d2:99:d9:b0:f7:01:1f:63:05:14:
af:cb:c6:f3:8f:c9:67:c3:8a:37:56:aa:7e:07:6b:ef:b6:f8:
db:9b:b4:b8:46:46:66:d3:4a:0a:44:4a:9f:5f:4d:6f:99:84:
b7:93:1b:c6:2d:32:d7:55:83:81:48:69:71:07:42:f2:3c:ff:
8e:6e:86:84:0d:76:ac:9b:43:18:9b:77:19:09:d1:8f:28:99:
2a:4a:74:86:73:b8:54:46:be:05:a6:77:ce:09:4f:1c:dc:73:
92:04:79:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:47:56 2025 by rpki-client