Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/Gof8cYl_-_S4WvBztVMMpN2lO6Y.roa
File: Gof8cYl_-_S4WvBztVMMpN2lO6Y.roa (raw, json)
Hash identifier: 6km18MyJ5IHTThvCW2WxtbASJyCxFy1OyHEgHJJtY7Y=
Subject key identifier: 1A:87:FC:71:89:7F:FB:F4:B8:5A:F0:73:B5:53:0C:A4:DD:A5:3B:A6
Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial: 0198EBE2C578D7BBA6DAE0EE330701F38F27
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/Gof8cYl_-_S4WvBztVMMpN2lO6Y.roa
Signing time: Wed 27 Aug 2025 14:16:04 +0000
ROA not before: Wed 27 Aug 2025 14:16:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29399
IP address blocks: 185.49.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:e2:c5:78:d7:bb:a6:da:e0:ee:33:07:01:f3:8f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
Validity
Not Before: Aug 27 14:16:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a87fc71897ffbf4b85af073b5530ca4dda53ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:69:e6:c1:95:56:5c:e7:fb:0f:b7:96:08:
72:bd:41:5f:bc:f7:fe:39:19:f5:0e:ad:70:8c:4b:
1c:a2:5e:74:d6:50:f2:09:ae:48:93:4b:db:31:7f:
6b:5a:6a:04:e0:be:45:32:1e:ca:f5:07:8b:e3:0e:
99:e4:b6:6f:97:ab:e7:c8:99:0f:06:7a:89:8b:47:
c6:e0:89:12:99:fd:b0:d0:74:f8:30:02:57:27:a3:
5f:28:29:d3:9f:d7:c4:16:ce:f0:4f:34:c2:c0:9a:
f8:da:68:79:a8:ea:4e:d1:46:34:3f:8e:f5:5c:73:
76:52:20:61:6b:b8:da:86:e2:17:5f:92:da:ef:6f:
e7:23:d4:24:f6:6d:c6:0c:6f:39:5f:46:93:25:9e:
4d:3f:8a:2b:e8:cb:b9:62:47:8c:70:c8:84:d8:f2:
20:80:db:a1:14:52:cd:fc:29:2d:dc:7c:de:8c:72:
5e:14:58:ea:a8:21:d0:dd:ad:16:57:dc:03:dc:72:
88:85:62:03:10:c8:ce:95:5b:d5:92:01:72:9e:0b:
19:63:03:a6:77:4c:1f:49:90:a7:7e:dd:b8:87:1e:
8d:78:3c:3b:31:34:a4:0b:61:16:3c:5b:39:94:a2:
ac:ec:1a:13:a2:b9:d2:cf:6b:c0:74:ef:d2:ea:a0:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:87:FC:71:89:7F:FB:F4:B8:5A:F0:73:B5:53:0C:A4:DD:A5:3B:A6
X509v3 Authority Key Identifier:
keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/Gof8cYl_-_S4WvBztVMMpN2lO6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.172.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b8:50:30:11:7c:b2:49:20:5a:6f:f2:b9:96:16:4b:29:58:
9a:4c:81:c7:2c:9a:3f:11:47:16:78:0a:ca:f0:81:2f:18:ec:
85:fb:3b:e7:10:cc:96:56:b2:62:4a:33:bd:06:0d:cb:7a:79:
99:01:7e:25:7a:a0:18:20:1a:29:13:47:bd:0d:86:b9:45:05:
0c:2d:b3:4e:5d:dc:63:15:54:48:12:20:f3:d5:10:16:9b:e9:
79:11:b8:b8:70:9f:6c:2b:13:d5:b5:66:7b:99:fd:c3:b5:f7:
3e:ab:f9:f3:51:4a:2b:fa:4c:14:36:45:50:06:f9:94:12:54:
7a:c0:87:6d:11:27:a3:2b:9e:c0:21:fb:44:64:a4:cb:87:e8:
e6:12:25:a5:f5:d3:d6:49:4b:61:b2:e8:3b:88:08:21:79:57:
33:cd:e6:28:78:3e:67:24:03:42:94:36:3c:80:66:e5:a1:b3:
ff:99:cb:03:fb:97:34:5f:dd:0f:32:f5:2b:88:78:45:bc:d2:
8b:b2:9b:9e:8e:d7:16:0a:46:8c:25:3d:af:8a:aa:e7:bf:d2:
9e:7d:dd:73:36:9a:ce:c7:97:f5:69:6c:2b:d4:f2:23:8d:44:
99:9c:34:9d:9a:6f:39:b8:d9:87:fb:ba:6f:55:60:de:30:b2:
40:f4:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:05:09 2025 by rpki-client