Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/gvFUcQAtyqgcAtGHbXP7pjSFHcU.roa
File: gvFUcQAtyqgcAtGHbXP7pjSFHcU.roa (raw, json)
Hash identifier: Z0izDMe/hUL6X2HZt86h00GbmMnQFZywc+AJBC3qqJA=
Subject key identifier: 82:F1:54:71:00:2D:CA:A8:1C:02:D1:87:6D:73:FB:A6:34:85:1D:C5
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 01993CE6623C4518D0188BCD9DB02607348E
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/gvFUcQAtyqgcAtGHbXP7pjSFHcU.roa
Signing time: Fri 12 Sep 2025 07:49:15 +0000
ROA not before: Fri 12 Sep 2025 07:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55201
IP address blocks: 2001:3782::/32 maxlen: 32
2a12:4042::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 22:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:e6:62:3c:45:18:d0:18:8b:cd:9d:b0:26:07:34:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Sep 12 07:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82f15471002dcaa81c02d1876d73fba634851dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:a1:7f:69:ee:05:2b:cd:df:2f:24:dc:33:
5e:e9:65:b2:3a:f4:e7:fb:13:a5:a9:68:da:a6:ca:
fd:37:1b:08:e5:79:43:0c:05:2a:37:99:df:a7:78:
24:34:7a:6c:ed:40:d1:c0:79:50:cb:8e:b0:2d:07:
a8:08:58:4f:93:c8:b0:2c:15:53:67:df:d6:3d:c6:
05:e1:05:28:f4:eb:cf:7c:8b:a0:2b:4a:07:8c:31:
02:19:ec:41:ea:a6:de:d7:3b:6e:ae:95:1e:7d:93:
1d:3e:cf:3a:b6:e2:bc:c4:de:77:63:59:42:7a:b4:
80:7b:87:85:bb:15:85:2d:18:bd:56:85:9f:aa:44:
04:86:bc:36:3d:a8:91:e5:c6:70:9a:25:ca:8f:52:
04:bd:df:d3:f9:89:8c:44:58:28:66:8d:f3:2e:43:
ca:bc:37:22:cf:a2:cb:9f:8c:72:02:2e:6f:f8:bc:
50:64:a1:3a:f7:32:9a:2a:2c:b0:d3:16:e5:f0:e6:
df:1e:ab:f0:8a:ef:6f:68:4b:34:71:b3:1d:70:96:
8f:a3:28:94:17:f7:4c:f4:25:4b:94:31:f1:69:71:
af:0d:9a:09:c7:c8:9e:df:73:b8:c9:d2:83:d2:d4:
6a:73:13:63:6a:71:ff:5b:90:73:62:8f:47:bb:39:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F1:54:71:00:2D:CA:A8:1C:02:D1:87:6D:73:FB:A6:34:85:1D:C5
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/gvFUcQAtyqgcAtGHbXP7pjSFHcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3782::/32
2a12:4042::/32
Signature Algorithm: sha256WithRSAEncryption
a8:7d:a6:ed:6f:9b:c0:e0:0f:60:e8:d9:13:b8:12:db:2d:37:
53:a4:68:be:f6:e0:bf:ec:33:ed:3f:e5:2a:3b:ba:9e:80:b0:
68:85:09:29:6e:b8:57:9a:df:7b:7e:a4:d9:f7:12:62:8d:cf:
c5:a6:7f:77:80:20:2f:84:95:df:33:0a:be:18:4e:08:fc:0f:
5d:c8:18:04:67:63:3c:e4:7d:c1:a5:09:0f:89:2f:80:89:f4:
a5:c4:26:b7:9f:bc:82:1a:99:32:06:e3:24:96:a7:37:ac:b5:
b8:0d:17:e5:64:36:9e:44:7a:73:ef:67:88:9f:13:d7:d0:ab:
16:52:94:a1:b8:e1:ac:06:20:8a:38:9c:6f:f5:fd:06:7f:5a:
b6:c5:fc:33:8a:4f:d9:97:d9:06:b7:47:41:65:db:8f:61:b9:
02:a3:34:74:91:49:23:e6:9b:05:cb:df:27:df:b8:d6:8f:7f:
0f:04:c7:72:32:7e:67:a7:c7:22:4f:69:04:5a:24:02:23:16:
3b:20:95:48:43:2a:97:68:c4:c2:05:57:fd:f3:4e:ab:4a:6f:
e5:39:47:ed:9b:c4:2d:a2:f2:17:f6:9e:9d:79:6c:50:1d:0d:
dc:3f:56:06:d8:0d:28:7b:e6:ad:b3:9a:8a:13:2b:df:23:68:
cd:6b:3a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:25:40 2025 by rpki-client