Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/GARacSR6V57Y6TQk681wM879MUA.roa
File: GARacSR6V57Y6TQk681wM879MUA.roa (raw, json)
Hash identifier: +vTb3y8+XIrCgm7/mqAGLEfHq0fDAqkxuL8o1BkKcFU=
Subject key identifier: 18:04:5A:71:24:7A:57:9E:D8:E9:34:24:EB:CD:70:33:CE:FD:31:40
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019915A78567D3CB913FDD6F3008F8D79615
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/GARacSR6V57Y6TQk681wM879MUA.roa
Signing time: Thu 04 Sep 2025 16:55:24 +0000
ROA not before: Thu 04 Sep 2025 16:55:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215664
IP address blocks: 194.36.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:a7:85:67:d3:cb:91:3f:dd:6f:30:08:f8:d7:96:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Sep 4 16:55:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18045a71247a579ed8e93424ebcd7033cefd3140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:45:6b:b7:0f:39:98:7c:0f:55:14:a4:20:
a3:5b:75:09:7b:8e:9c:e7:44:d5:44:83:29:42:99:
9f:cb:26:07:11:d0:9d:e5:a3:66:1c:12:f2:17:21:
b5:df:94:b3:5f:64:e0:e3:e3:fc:dd:b6:2c:cf:78:
5a:05:7f:67:17:37:e1:63:c5:90:5b:00:a8:c7:27:
36:b6:9a:13:81:9c:35:43:fe:38:35:92:9e:59:a1:
86:62:da:d9:0e:f9:47:e3:ae:da:64:87:3d:49:b8:
2a:b4:1b:d9:a9:67:ee:e0:e1:89:0b:d2:ca:be:8e:
2f:ce:85:c7:8f:c0:3e:7f:b8:52:ad:cf:21:41:89:
52:e6:87:71:8b:dd:cb:46:60:50:8a:6c:41:69:42:
60:42:d4:2d:9b:7f:fa:23:27:4e:09:c7:b0:2a:57:
17:25:e4:19:9f:b2:bc:3f:b7:c4:4e:97:5a:bc:78:
aa:97:d8:0f:f7:e3:9e:c2:da:fa:ae:f6:9f:9d:7b:
d4:be:b7:f0:cd:99:98:05:c4:e0:63:6e:ec:a9:eb:
9e:09:c5:75:01:d4:87:96:d4:95:d4:59:8d:14:e2:
ea:af:2b:73:01:e3:c1:96:43:bb:59:47:f6:be:63:
29:8c:f4:82:d2:a7:3c:42:42:8e:80:da:dc:8e:c9:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:04:5A:71:24:7A:57:9E:D8:E9:34:24:EB:CD:70:33:CE:FD:31:40
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/GARacSR6V57Y6TQk681wM879MUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:cb:88:84:b0:0f:0f:5e:60:9a:2b:06:9c:bb:dd:a7:f8:1f:
b5:55:4d:47:e5:23:a7:fd:48:dd:76:0f:65:2f:f4:dd:f1:18:
b9:52:af:8b:fa:51:62:be:5e:10:2a:ad:02:ef:4a:aa:22:a5:
b0:a0:e3:4c:ab:21:2a:d6:28:ac:f0:20:ce:4a:52:da:28:f8:
df:d3:31:e9:cd:1d:c0:18:97:b4:f8:8b:28:95:1f:89:e0:ec:
d1:e7:b0:a9:ff:f9:22:ab:07:68:96:70:33:92:04:a8:e5:dc:
9f:0c:73:25:46:ba:87:e3:75:66:b9:b3:6e:c4:21:58:0c:a4:
49:b2:dc:6f:2f:9a:f3:dc:4d:55:71:86:5a:3a:d8:c6:d0:c8:
5d:2f:54:18:ab:4d:10:d0:7a:9a:21:98:dc:65:fc:e3:05:8c:
82:02:1a:79:11:bd:d2:e5:01:33:99:df:2f:51:73:0f:02:3d:
58:cb:6a:af:90:27:86:83:56:e7:fb:5d:30:66:71:55:e2:86:
64:2b:09:11:bb:a7:64:48:22:b7:e7:12:b6:a0:2d:22:b0:73:
0a:d5:b5:18:eb:ba:c5:0c:65:65:ef:9c:1f:a3:72:53:47:57:
2d:79:9f:2a:5e:b9:0b:f3:24:69:81:9f:b5:c9:33:09:fe:1d:
6a:c1:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:23:22 2025 by rpki-client