Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Gorp7yrvitojOV_x2G1ssm8g-tU.roa
File: Gorp7yrvitojOV_x2G1ssm8g-tU.roa (raw, json)
Hash identifier: khoQdpSj4EGZTcCHPn4JP/6w1CMqU/52sxMPUzupcd0=
Subject key identifier: 1A:8A:E9:EF:2A:EF:8A:DA:23:39:5F:F1:D8:6D:6C:B2:6F:20:FA:D5
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0196EF943955BFEF5C007093BC38AF0B60F4
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Gorp7yrvitojOV_x2G1ssm8g-tU.roa
Signing time: Tue 20 May 2025 21:23:10 +0000
ROA not before: Tue 20 May 2025 21:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:aa02::/40 maxlen: 40
2a0e:aa06:502::/48 maxlen: 48
2a0e:aa06:503::/48 maxlen: 48
2a0e:aa06:52a::/48 maxlen: 48
2a0e:aa07:f0d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ef:94:39:55:bf:ef:5c:00:70:93:bc:38:af:0b:60:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: May 20 21:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a8ae9ef2aef8ada23395ff1d86d6cb26f20fad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:a9:b7:79:e8:76:26:2b:5a:e6:3d:a4:bf:
8e:6c:67:a6:1a:69:b1:a1:0f:19:2d:4b:49:92:67:
c6:a3:93:ce:7c:f4:38:df:95:15:a7:f8:65:b0:b0:
df:cc:99:a7:0c:7b:12:ad:7c:cf:91:23:f9:4a:a5:
0b:e7:5c:28:d7:19:20:89:9e:19:79:ca:8b:9c:b9:
57:4d:95:32:8d:9d:62:85:ff:cd:b9:ee:46:ed:55:
1d:28:62:20:2e:42:c5:70:2f:a4:0e:c4:f7:2c:75:
ea:4b:36:92:ed:c1:fc:91:61:8e:a9:5d:1c:f7:48:
e5:e1:87:53:ea:f4:39:15:b9:ea:b1:27:5b:dc:a8:
33:3d:b8:15:06:e6:19:be:72:f7:9c:f6:1f:06:4f:
a4:89:7b:be:aa:a4:ad:71:61:61:ee:91:5a:36:09:
f7:e9:20:3e:fb:ff:8e:84:d1:89:94:0b:48:9c:19:
3a:f6:63:37:c1:c3:ad:b6:68:dd:44:09:01:2c:18:
35:18:22:51:1d:61:85:d8:c9:24:5c:b2:7e:de:de:
7e:c1:dd:f7:dd:2e:78:04:72:c7:67:e4:24:e1:84:
db:39:fa:ea:00:39:45:57:49:c3:09:35:ed:74:37:
e3:3c:50:44:1b:8c:f0:01:9e:1b:51:34:c9:f7:da:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8A:E9:EF:2A:EF:8A:DA:23:39:5F:F1:D8:6D:6C:B2:6F:20:FA:D5
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Gorp7yrvitojOV_x2G1ssm8g-tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa02::/40
2a0e:aa06:502::/47
2a0e:aa06:52a::/48
2a0e:aa07:f0d0::/44
Signature Algorithm: sha256WithRSAEncryption
33:fa:87:90:b3:b2:f5:05:dc:b2:50:9f:6a:35:fa:45:3c:5f:
73:5f:a6:a2:0f:62:e9:c7:1d:67:b8:97:6b:ca:87:55:fa:28:
7d:83:7c:0f:80:7c:1f:12:68:49:6c:ee:a7:53:0e:10:c1:9b:
d0:e7:bc:e3:cb:3f:5e:6a:e6:34:99:62:2c:91:74:9b:10:8e:
e5:11:d2:cb:5e:7b:17:2e:43:af:05:aa:89:9b:92:d1:9e:5b:
76:56:71:37:7c:bc:cd:b4:89:7c:f6:89:14:67:c1:98:fd:9b:
54:ac:94:dc:47:6b:03:f9:1c:b0:8e:74:9c:01:c6:2d:15:e7:
b6:16:15:ed:5a:48:19:46:7d:55:67:48:34:45:ca:1a:b3:0c:
ef:f4:99:fa:be:b3:26:33:6c:7c:4d:32:96:0d:79:d6:32:b3:
49:56:13:d5:a2:9e:6b:8a:88:e4:63:04:6a:61:6e:7b:57:d7:
dd:13:7f:cd:36:11:77:f8:38:e2:93:c4:7f:f0:93:f4:92:43:
bd:7f:38:ef:8d:ef:95:a8:8e:32:63:39:c4:62:de:9c:a8:79:
c6:6c:e2:84:e8:f6:19:87:8c:e8:20:3d:64:4d:f1:64:13:f9:
03:3f:9c:9d:bb:67:bd:0f:a0:69:9d:32:f1:d6:6c:5c:a7:4a:
eb:bd:e0:d8
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZbvlDlVv+9cAHCTvDivC2D0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwNTIwMjEyMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYThhZTllZjJhZWY4YWRhMjMzOTVmZjFkODZkNmNiMjZmMjBmYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwqpt3nodiYrWuY9pL+ObGemGmmx
oQ8ZLUtJkmfGo5POfPQ435UVp/hlsLDfzJmnDHsSrXzPkSP5SqUL51wo1xkgiZ4Z
ecqLnLlXTZUyjZ1ihf/Nue5G7VUdKGIgLkLFcC+kDsT3LHXqSzaS7cH8kWGOqV0c
90jl4YdT6vQ5FbnqsSdb3KgzPbgVBuYZvnL3nPYfBk+kiXu+qqStcWFh7pFaNgn3
6SA++/+OhNGJlAtInBk69mM3wcOttmjdRAkBLBg1GCJRHWGF2MkkXLJ+3t5+wd33
3S54BHLHZ+Qk4YTbOfrqADlFV0nDCTXtdDfjPFBEG4zwAZ4bUTTJ99rDAQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFBqK6e8q74raIzlf8dhtbLJvIPrVMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvR29ycDd5cnZpdG9qT1ZfeDJHMXNzbThnLXRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwYAKg6qAgAD
BwEqDqoGBQIDBwAqDqoGBSoDBwQqDqoH8NAwDQYJKoZIhvcNAQELBQADggEBADP6
h5CzsvUF3LJQn2o1+kU8X3NfpqIPYunHHWe4l2vKh1X6KH2DfA+AfB8SaEls7qdT
DhDBm9DnvOPLP15q5jSZYiyRdJsQjuUR0steexcuQ68FqombktGeW3ZWcTd8vM20
iXz2iRRnwZj9m1SslNxHawP5HLCOdJwBxi0V57YWFe1aSBlGfVVnSDRFyhqzDO/0
mfq+syYzbHxNMpYNedYys0lWE9WinmuKiORjBGphbntX190Tf802EXf4OOKTxH/w
k/SSQ71/OO+N75WojjJjOcRi3pyoecZs4oTo9hmHjOggPWRN8WQT+QM/nJ27Z70P
oGmdMvHWbFynSuu94Ng=
-----END CERTIFICATE-----
Generated at Wed Jun 4 10:55:52 2025 by rpki-client