Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/GMHzXo7-IPmzYXhPmW5mUb5PMGs.roa
File: GMHzXo7-IPmzYXhPmW5mUb5PMGs.roa (raw, json)
Hash identifier: nH4bS8gf7/I1aed2UFJ6bLIZ1f70L3EoTiE8Uj1XGds=
Subject key identifier: 18:C1:F3:5E:8E:FE:20:F9:B3:61:78:4F:99:6E:66:51:BE:4F:30:6B
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0196F7E495049E903C2AA08052F7EBD16027
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/GMHzXo7-IPmzYXhPmW5mUb5PMGs.roa
Signing time: Thu 22 May 2025 12:07:54 +0000
ROA not before: Thu 22 May 2025 12:07:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 5.56.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:e4:95:04:9e:90:3c:2a:a0:80:52:f7:eb:d1:60:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 22 12:07:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18c1f35e8efe20f9b361784f996e6651be4f306b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:37:e2:bd:54:ad:bd:8e:04:c6:ef:53:10:
7e:0a:ee:4b:47:e3:18:c5:99:d9:22:0a:4d:31:2f:
44:37:92:f7:34:41:26:82:9e:62:51:31:60:a1:b6:
73:75:7b:b9:da:92:f0:b8:37:ad:b1:5a:ac:52:cf:
e7:87:ef:62:77:44:1f:60:c4:9f:86:6a:19:01:2d:
ab:1e:3a:53:64:84:51:8b:00:d7:40:6f:6c:e6:b3:
cb:3d:88:bc:9e:15:30:f4:a7:7b:b4:5c:f2:48:19:
8c:53:e0:76:46:25:8d:d3:06:3a:c5:e5:2a:d7:97:
a1:6f:f3:66:e0:1c:b9:17:7e:07:fe:00:63:e7:f5:
d0:1c:8e:84:a1:4f:e9:17:21:34:ea:df:c8:71:cd:
c3:ca:86:a7:d8:d9:d5:7a:4e:a8:09:3b:38:55:c7:
7d:61:75:94:d7:ac:04:87:b5:9f:81:1d:7d:65:0f:
b5:b3:2d:65:1a:b0:2b:0e:77:0e:71:e5:6d:60:22:
b8:7c:ca:01:c3:7b:bf:26:ab:5f:55:67:7e:58:25:
2d:e2:ac:6b:d2:6f:e0:0d:5a:cb:11:a1:b4:d9:ba:
e0:6b:1c:de:b8:21:9d:5f:99:62:f6:1b:aa:3f:d4:
ab:c9:cf:d8:8e:86:a3:4d:0e:05:3f:8b:4e:59:4b:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C1:F3:5E:8E:FE:20:F9:B3:61:78:4F:99:6E:66:51:BE:4F:30:6B
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/GMHzXo7-IPmzYXhPmW5mUb5PMGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2a:c9:0d:c8:b1:24:c9:1a:04:99:d4:a5:bd:4f:05:c2:7f:
38:bc:92:64:dc:1b:a0:53:74:50:55:c7:25:95:f2:7d:92:31:
94:a3:e4:26:d0:bd:73:c2:50:d7:fb:56:4f:9d:eb:ca:52:b4:
53:55:c7:bb:17:83:5b:1f:bb:29:0c:7b:9f:c0:30:f8:2c:17:
4f:be:f3:da:d8:15:a0:c6:81:fa:bd:9d:01:e5:05:6a:d1:79:
13:f5:1c:8f:98:bb:86:19:75:f2:0a:b2:2d:65:28:6e:04:ae:
9b:34:22:73:4f:0f:ba:a8:88:90:0c:d9:6c:22:26:f8:52:c5:
8c:28:04:a9:a2:c9:ee:e1:76:6f:96:81:80:f2:53:b1:fa:9f:
5f:bb:a9:8e:e5:1a:0b:e4:ad:92:d2:c8:a9:1c:f3:f8:e1:21:
d1:2c:63:37:0e:3d:08:91:51:1d:7f:f7:73:26:8f:15:15:76:
ca:e0:83:f0:6b:85:34:b2:41:2b:8a:b9:91:98:68:d2:87:3e:
32:c3:c3:1d:7e:b4:3b:67:cb:80:1b:dd:f7:95:d4:a4:07:f0:
d0:e7:d2:d8:fa:36:cd:30:0b:f7:43:7b:af:22:09:0e:84:40:
f9:d1:b0:bf:39:90:8a:52:7a:26:01:c1:df:5e:d0:6d:ae:d4:
77:57:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:29 2025 by rpki-client