Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GPsu5DBLFibZt3ShgTwhZAr3q3U.roa
File: GPsu5DBLFibZt3ShgTwhZAr3q3U.roa (raw, json)
Hash identifier: qOusNi9WkAzXs1UMD2Pio2dCTJ1ui2vMJOX2Kxg//6Y=
Subject key identifier: 18:FB:2E:E4:30:4B:16:26:D9:B7:74:A1:81:3C:21:64:0A:F7:AB:75
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019737205FF490CBAB7108A00C93B477E1BB
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GPsu5DBLFibZt3ShgTwhZAr3q3U.roa
Signing time: Tue 03 Jun 2025 18:49:18 +0000
ROA not before: Tue 03 Jun 2025 18:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215059
IP address blocks: 2a13:c044::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:20:5f:f4:90:cb:ab:71:08:a0:0c:93:b4:77:e1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 3 18:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18fb2ee4304b1626d9b774a1813c21640af7ab75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:7f:f2:f7:83:f5:6e:23:c3:e3:f0:0e:56:
25:7a:50:f1:3d:ba:a5:13:b1:64:0e:2f:0e:9b:8f:
5c:51:f2:28:d9:fd:15:ff:db:7d:cc:40:c7:5d:78:
73:ff:af:cd:7c:d4:19:e0:87:0e:ab:f6:57:e9:5b:
63:24:f1:62:31:a9:3f:a1:b8:d9:e9:6d:7b:dd:23:
6e:0a:23:9b:76:0a:46:43:8d:65:84:25:4d:70:9d:
e4:db:9e:55:39:37:e7:1e:3e:6d:ec:66:20:02:cc:
3c:4c:25:18:db:f4:37:7a:5a:41:e2:cf:5e:bb:48:
3f:2e:85:38:55:11:7c:1c:c6:fa:1c:ac:b1:41:c0:
ac:2b:58:c4:5b:9e:27:aa:cd:5c:03:9d:58:07:d3:
7c:85:a1:d8:43:30:c5:be:03:aa:8d:97:d1:38:6a:
48:79:df:21:9f:94:ee:77:45:3f:6f:97:c5:83:72:
9f:d5:d0:0a:54:68:3c:e7:35:79:9d:59:c9:52:d7:
40:10:ab:c3:b8:d3:9a:1c:37:51:e4:ec:6d:90:f7:
67:d8:55:12:e3:50:c1:67:b1:15:38:09:c0:89:c5:
4f:99:65:d1:fb:29:39:e5:ad:ab:5f:e6:89:3e:d4:
76:5c:99:d0:b6:4e:82:01:e9:f4:92:f1:03:a2:11:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FB:2E:E4:30:4B:16:26:D9:B7:74:A1:81:3C:21:64:0A:F7:AB:75
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GPsu5DBLFibZt3ShgTwhZAr3q3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c044::/32
Signature Algorithm: sha256WithRSAEncryption
54:fd:d0:62:68:71:8b:ba:1c:28:e8:33:84:50:d9:7a:45:85:
8c:f1:c4:88:b7:e0:be:8e:02:9c:c4:b6:00:77:b6:2c:45:2e:
b4:aa:44:25:82:5b:6e:85:47:ac:f2:dc:c2:10:e1:8b:51:07:
03:85:7f:87:98:0f:2c:3a:a5:1a:0c:9e:8a:7d:be:40:74:82:
03:88:a6:63:59:97:d6:cc:f5:ae:94:18:8d:95:f3:4c:78:27:
19:96:3e:9c:07:ca:55:2a:4f:c5:43:29:9c:63:d7:ee:c2:f4:
92:5f:35:9d:3a:c7:6c:09:99:8a:12:23:ab:f9:2d:05:12:61:
40:c6:10:41:db:7d:96:9a:5c:55:11:81:fd:54:24:fe:25:c0:
c8:7c:ec:c8:2c:64:40:b2:52:2a:d1:f1:a4:d9:a7:cd:74:df:
6e:52:a9:e1:7e:16:6a:34:b6:d5:bc:60:3e:36:46:f2:85:fe:
92:c6:a9:6b:de:9a:69:b0:a3:a5:f3:77:f3:54:b2:05:65:d8:
62:40:a5:89:42:87:94:61:db:92:ae:51:7a:d4:d1:a8:ca:9a:
44:f1:66:62:b5:6b:14:27:96:12:9d:81:fe:74:5e:21:d2:64:
17:65:86:4f:71:6b:f3:90:7b:d5:56:87:24:05:d9:20:9f:16:
dd:cb:b5:df
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZc3IF/0kMurcQigDJO0d+G7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjUwNjAzMTg0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGZiMmVlNDMwNGIxNjI2ZDliNzc0YTE4MTNjMjE2NDBhZjdhYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKJ/8veD9W4jw+PwDlYlelDxPbql
E7FkDi8Om49cUfIo2f0V/9t9zEDHXXhz/6/NfNQZ4IcOq/ZX6VtjJPFiMak/objZ
6W173SNuCiObdgpGQ41lhCVNcJ3k255VOTfnHj5t7GYgAsw8TCUY2/Q3elpB4s9e
u0g/LoU4VRF8HMb6HKyxQcCsK1jEW54nqs1cA51YB9N8haHYQzDFvgOqjZfROGpI
ed8hn5Tud0U/b5fFg3Kf1dAKVGg85zV5nVnJUtdAEKvDuNOaHDdR5OxtkPdn2FUS
41DBZ7EVOAnAicVPmWXR+yk55a2rX+aJPtR2XJnQtk6CAen0kvEDohHwPQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBj7LuQwSxYm2bd0oYE8IWQK96t1MB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvR1BzdTVEQkxGaWJadDNTaGdUd2haQXIzcTNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPARDAN
BgkqhkiG9w0BAQsFAAOCAQEAVP3QYmhxi7ocKOgzhFDZekWFjPHEiLfgvo4CnMS2
AHe2LEUutKpEJYJbboVHrPLcwhDhi1EHA4V/h5gPLDqlGgyein2+QHSCA4imY1mX
1sz1rpQYjZXzTHgnGZY+nAfKVSpPxUMpnGPX7sL0kl81nTrHbAmZihIjq/ktBRJh
QMYQQdt9lppcVRGB/VQk/iXAyHzsyCxkQLJSKtHxpNmnzXTfblKp4X4WajS21bxg
PjZG8oX+ksapa96aabCjpfN381SyBWXYYkCliUKHlGHbkq5RetTRqMqaRPFmYrVr
FCeWEp2B/nReIdJkF2WGT3Fr85B71VaHJAXZIJ8W3cu13w==
-----END CERTIFICATE-----
Generated at Fri Jun 6 15:54:55 2025 by rpki-client