Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GfsR7fzmFN-ZSY4pxA5voaxpXMs.roa
File: GfsR7fzmFN-ZSY4pxA5voaxpXMs.roa (raw, json)
Hash identifier: ypX4I4bHhsk4HMDZt9hz9zcpF1Mi0jIgioHY8whf0qU=
Subject key identifier: 19:FB:11:ED:FC:E6:14:DF:99:49:8E:29:C4:0E:6F:A1:AC:69:5C:CB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01975A28E2134DD7F31B6AC26072D67A02BB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GfsR7fzmFN-ZSY4pxA5voaxpXMs.roa
Signing time: Tue 10 Jun 2025 14:05:18 +0000
ROA not before: Tue 10 Jun 2025 14:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59598
IP address blocks: 31.25.88.0/23 maxlen: 24
185.217.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:28:e2:13:4d:d7:f3:1b:6a:c2:60:72:d6:7a:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 10 14:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19fb11edfce614df99498e29c40e6fa1ac695ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:33:60:66:1d:1d:17:13:a0:25:92:38:25:
91:f4:2d:a2:da:d0:74:b0:f7:c9:b1:86:96:16:79:
7f:ab:7d:17:f9:66:20:33:0a:76:7e:26:55:09:fd:
9f:7e:64:51:85:37:b0:be:04:ef:18:a9:2f:59:af:
f2:71:4f:f3:e9:5f:4e:eb:a1:42:7b:3d:83:d4:fd:
0b:5a:12:a5:64:62:00:6e:77:14:b7:3b:a9:28:6a:
2f:4d:47:58:dc:d8:35:35:96:4b:82:7f:84:82:6a:
42:77:dd:84:57:f7:af:ed:cb:ef:4c:ad:dc:8e:5e:
3e:e1:19:82:7b:52:ce:1f:bd:aa:72:27:d7:44:b3:
cc:cc:48:1d:d2:4c:38:2e:78:48:68:02:ef:51:07:
2a:96:46:8e:19:4b:c8:5e:73:76:84:21:cb:01:a7:
dd:3f:35:ec:45:7c:93:7d:58:18:b8:59:f1:9d:0a:
c4:03:82:71:52:10:4e:1f:df:cd:5b:7f:66:d4:cf:
62:c5:3d:d2:c3:a4:ae:02:3c:64:1b:c1:38:b9:d4:
db:f9:60:83:ba:28:57:b1:cd:d1:d7:6b:56:e1:0d:
64:32:74:f5:cb:d7:da:bc:9a:cc:99:74:4c:75:89:
35:1e:cf:c2:20:f2:c4:89:85:8d:a1:bf:2c:a4:c9:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:11:ED:FC:E6:14:DF:99:49:8E:29:C4:0E:6F:A1:AC:69:5C:CB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GfsR7fzmFN-ZSY4pxA5voaxpXMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.88.0/23
185.217.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:10:13:a4:eb:03:37:03:3c:52:19:41:3c:0b:9e:93:17:4b:
23:f8:24:e4:4c:90:03:74:1a:96:ca:0b:94:e6:1d:df:2b:a1:
3c:96:aa:e6:75:09:aa:7e:2b:65:28:40:03:d8:38:72:c2:ec:
7a:23:c8:97:0c:c8:5e:a2:00:4b:69:9e:56:c0:b1:3c:b8:49:
f4:ac:ed:32:69:58:09:aa:0d:ab:93:d2:33:5d:5d:74:7f:b7:
e4:b5:dd:cd:ce:b4:24:ea:a8:19:17:21:be:54:9a:fb:a4:95:
58:36:89:dd:66:e0:58:93:56:f3:cc:69:af:19:4c:1d:9a:90:
25:16:99:6f:4d:7e:43:29:d1:21:c2:51:81:a4:3b:ba:35:22:
df:4a:a8:c2:31:9d:ff:3d:58:c6:1b:f1:39:c6:f7:12:6b:cf:
9b:f3:d7:43:3b:59:51:a7:19:30:ab:51:8d:bb:b9:41:31:fb:
80:17:99:ac:18:6d:e6:77:68:f5:0f:5c:c7:27:f5:bf:5e:56:
03:d7:db:cd:35:3f:07:dc:49:23:16:40:ad:b1:93:83:6d:c4:
05:51:3f:0d:69:32:89:9c:62:e6:0a:31:7d:2b:71:1d:17:4d:
4f:5b:82:c8:69:00:d6:67:18:8b:34:8c:f5:43:45:23:3f:24:
82:65:dc:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdaKOITTdfzG2rCYHLWegK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwNjEwMTQwNTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWZiMTFlZGZjZTYxNGRmOTk0OThlMjljNDBlNmZhMWFjNjk1Y2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zozYGYdHRcToCWSOCWR9C2i2tB0
sPfJsYaWFnl/q30X+WYgMwp2fiZVCf2ffmRRhTewvgTvGKkvWa/ycU/z6V9O66FC
ez2D1P0LWhKlZGIAbncUtzupKGovTUdY3Ng1NZZLgn+EgmpCd92EV/ev7cvvTK3c
jl4+4RmCe1LOH72qcifXRLPMzEgd0kw4LnhIaALvUQcqlkaOGUvIXnN2hCHLAafd
PzXsRXyTfVgYuFnxnQrEA4JxUhBOH9/NW39m1M9ixT3Sw6SuAjxkG8E4udTb+WCD
uihXsc3R12tW4Q1kMnT1y9favJrMmXRMdYk1Hs/CIPLEiYWNob8spMm93QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBn7Ee385hTfmUmOKcQOb6GsaVzLMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvR2ZzUjdmem1GTi1aU1k0cHhBNXZvYXhwWE1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBHxlYAwQC
udlsMA0GCSqGSIb3DQEBCwUAA4IBAQB/EBOk6wM3AzxSGUE8C56TF0sj+CTkTJAD
dBqWyguU5h3fK6E8lqrmdQmqfitlKEAD2Dhywux6I8iXDMheogBLaZ5WwLE8uEn0
rO0yaVgJqg2rk9IzXV10f7fktd3NzrQk6qgZFyG+VJr7pJVYNondZuBYk1bzzGmv
GUwdmpAlFplvTX5DKdEhwlGBpDu6NSLfSqjCMZ3/PVjGG/E5xvcSa8+b89dDO1lR
pxkwq1GNu7lBMfuAF5msGG3md2j1D1zHJ/W/XlYD19vNNT8H3EkjFkCtsZODbcQF
UT8NaTKJnGLmCjF9K3EdF01PW4LIaQDWZxiLNIz1Q0UjPySCZdwj
-----END CERTIFICATE-----
Generated at Fri Jun 13 10:02:17 2025 by rpki-client