Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GOe6-ZtfECOJMEwmWNnobkEeCQY.roa
File: GOe6-ZtfECOJMEwmWNnobkEeCQY.roa (raw, json)
Hash identifier: mnrlqrFqqVx6wy1iDVAz0+YpU1K1nnep5PyNHcJjt1U=
Subject key identifier: 18:E7:BA:F9:9B:5F:10:23:89:30:4C:26:58:D9:E8:6E:41:1E:09:06
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01991D1B7A8650849971F6ACD60858486082
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GOe6-ZtfECOJMEwmWNnobkEeCQY.roa
Signing time: Sat 06 Sep 2025 03:39:24 +0000
ROA not before: Sat 06 Sep 2025 03:39:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62390
IP address blocks: 82.115.0.0/24 maxlen: 24
185.231.174.0/24 maxlen: 24
185.231.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:1b:7a:86:50:84:99:71:f6:ac:d6:08:58:48:60:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 6 03:39:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18e7baf99b5f102389304c2658d9e86e411e0906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:3b:61:17:0a:6b:14:f8:a9:8b:bf:74:c1:
83:e7:fb:ff:4c:27:7f:f6:e9:4c:c9:5b:1d:98:26:
7b:fb:e8:89:4e:11:34:83:35:4b:99:5e:ae:c7:bd:
85:01:6a:86:b6:4e:45:e2:94:45:79:94:a7:cc:84:
30:33:b3:ce:43:78:63:57:85:a8:01:c0:b7:cf:1b:
5a:1e:46:88:95:85:09:f7:b2:30:89:c2:bf:76:4f:
28:f8:64:d7:cb:05:1c:f2:24:11:7d:5f:8a:a9:5c:
1b:e7:51:61:8d:a4:08:09:86:41:f6:f2:f1:fe:36:
ab:e3:7f:1e:93:68:06:44:c0:b3:de:7f:27:a4:31:
0a:39:be:1b:b6:e2:90:9f:09:18:0e:4b:96:8e:1f:
b5:89:2a:e1:4b:6f:f7:fd:f7:0b:1d:c6:71:ca:7d:
2c:ee:27:b3:f2:85:0a:b1:d9:1b:d2:e9:5a:cb:dd:
9e:b6:ef:8a:e6:9d:54:ac:49:86:5c:53:3a:45:0e:
3c:1e:d0:e7:6d:c2:14:89:73:a4:86:2c:f2:dd:43:
95:e1:9e:69:f1:1d:e0:54:e2:35:47:71:c5:71:f7:
ff:3c:ce:a7:30:5a:78:37:87:1e:78:78:60:e4:d8:
c9:d1:16:3b:91:72:16:02:30:f6:f1:90:a8:ce:32:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E7:BA:F9:9B:5F:10:23:89:30:4C:26:58:D9:E8:6E:41:1E:09:06
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GOe6-ZtfECOJMEwmWNnobkEeCQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.0.0/24
185.231.174.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:5c:ce:45:41:a8:09:ed:fc:b1:82:d9:0e:3b:b7:f2:e0:28:
23:4f:4e:c5:77:98:4d:15:5b:84:b3:3f:e0:df:f2:be:d1:84:
9e:d1:27:64:d4:b6:6f:2b:72:38:ec:20:19:97:93:6b:07:75:
cf:8d:94:dd:e4:63:56:93:ff:74:ab:33:8f:29:67:fc:af:8f:
72:63:4b:6f:ab:f8:1e:48:50:03:f2:e7:11:70:b3:d7:0b:4d:
c1:fd:f5:84:bf:57:ba:ce:66:87:fc:6e:4f:fd:d8:02:e8:a2:
bf:13:f7:64:d4:97:c8:76:de:5c:33:3d:a3:63:f5:4a:e3:ea:
91:27:8e:0a:2b:c7:00:b5:a8:24:b8:06:ab:42:70:0b:c2:d3:
57:1e:6d:0b:de:f7:22:b7:5a:ce:68:fa:7f:5e:c6:6a:69:38:
2c:fc:25:f6:2e:a6:83:b8:90:c2:33:19:c7:ef:07:41:11:01:
27:75:f5:bf:ef:66:dd:c0:52:cc:22:3f:94:61:09:a4:48:b4:
7c:b5:f5:69:98:6f:9d:9f:79:f2:17:b8:b0:7c:ae:aa:c5:f3:
bb:80:90:04:fa:f1:54:ed:92:c5:f1:94:0c:6b:94:50:22:6c:
0e:e5:1b:9c:51:7f:b7:78:52:a7:91:23:e3:71:61:85:c4:18:
82:55:5b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:19:11 2025 by rpki-client