Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GOKgtqyMgUNwbAoQRHm-wzPGJWM.roa
File: GOKgtqyMgUNwbAoQRHm-wzPGJWM.roa (raw, json)
Hash identifier: VeQZDJm8WuBpv5q+XYi/Mjg5at1dHBdj/MJpQIJt3ek=
Subject key identifier: 18:E2:A0:B6:AC:8C:81:43:70:6C:0A:10:44:79:BE:C3:33:C6:25:63
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0198E2B00ABADB4F1747DA8851272AF17006
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GOKgtqyMgUNwbAoQRHm-wzPGJWM.roa
Signing time: Mon 25 Aug 2025 19:24:04 +0000
ROA not before: Mon 25 Aug 2025 19:24:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 64.188.76.0/24 maxlen: 24
64.188.77.0/24 maxlen: 24
64.188.78.0/24 maxlen: 24
64.188.79.0/24 maxlen: 24
64.188.80.0/24 maxlen: 24
64.188.81.0/24 maxlen: 24
64.188.82.0/24 maxlen: 24
64.188.83.0/24 maxlen: 24
87.251.16.0/24 maxlen: 24
87.251.17.0/24 maxlen: 24
87.251.18.0/24 maxlen: 24
87.251.19.0/24 maxlen: 24
144.31.168.0/22 maxlen: 24
193.23.216.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:b0:0a:ba:db:4f:17:47:da:88:51:27:2a:f1:70:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 25 19:24:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18e2a0b6ac8c8143706c0a104479bec333c62563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:b6:32:50:05:17:f7:d5:ee:92:b1:fa:b5:
ba:12:60:ea:53:69:8c:7b:32:09:61:66:ca:96:13:
02:ca:93:c2:dd:0a:eb:51:7a:8a:28:e6:a6:a1:41:
02:7a:79:4d:95:33:33:fd:4d:bf:a5:d1:45:a0:3b:
50:45:f3:a4:c6:d9:dc:05:aa:6a:25:be:fc:42:39:
99:a9:13:01:9c:23:e3:eb:ae:9c:a0:05:9d:99:bb:
a7:f7:2d:88:5a:a5:a7:fa:df:f9:82:0a:49:62:39:
0e:8f:78:45:e3:3a:cf:00:ba:fb:75:0f:9b:57:52:
0a:4c:e3:35:09:28:33:25:18:3a:f2:1b:ef:e1:d9:
72:62:e9:60:ba:1c:fa:bc:d9:b7:2e:df:73:da:4c:
14:90:60:bb:f6:92:5f:f9:a0:11:2a:b4:74:2a:5a:
f7:56:06:44:61:c1:e6:d0:2d:fe:cb:05:6b:39:8a:
62:c6:27:2a:14:ad:38:7d:5c:30:f1:b2:ab:98:a9:
54:a8:08:68:be:22:d7:31:90:c1:92:0e:60:6c:36:
97:13:2d:51:2d:56:62:b2:4c:50:f4:eb:1e:0e:03:
8a:6c:1c:0b:a7:60:3b:39:36:25:b6:3e:1b:d9:a8:
a7:f0:1e:e0:dc:fe:2e:09:f7:e5:4a:de:be:76:75:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E2:A0:B6:AC:8C:81:43:70:6C:0A:10:44:79:BE:C3:33:C6:25:63
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GOKgtqyMgUNwbAoQRHm-wzPGJWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.76.0-64.188.83.255
87.251.16.0/22
144.31.168.0/22
193.23.216.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
16:8f:48:fc:8f:f3:73:f5:fb:e4:6f:ff:d7:cf:ff:a9:af:0f:
91:e4:75:ae:48:8f:91:74:a5:ad:36:f7:7f:9d:88:14:3c:86:
1a:b6:28:34:03:36:cd:26:92:4d:d2:e1:a4:58:e2:9b:58:c7:
fb:6e:d4:a7:60:ac:0b:3e:63:cd:8d:ee:80:99:e5:5a:5c:73:
38:ab:48:ea:7b:db:db:77:27:ad:aa:7a:c2:e3:c2:a8:35:4e:
65:3d:d1:71:80:0c:0b:90:8e:3a:02:1d:09:0a:e5:b7:b9:27:
77:98:f6:96:7a:ec:72:c8:6d:56:65:dd:70:b9:c4:fa:f3:bd:
da:e0:89:fc:94:aa:d2:d0:5a:e3:dc:43:6a:08:1e:3f:b9:78:
66:7d:9d:24:31:95:4b:60:03:3a:40:0a:89:69:e1:1c:4d:11:
0c:7d:10:bb:63:e6:b0:70:a9:0d:73:6c:f9:d2:74:e3:fc:93:
1c:4a:bd:51:8c:9d:8f:54:d6:15:66:22:fb:73:d4:f2:b4:07:
99:32:b5:9d:a4:78:24:ee:13:89:23:e1:6c:0c:5c:8f:ef:5f:
90:7b:08:e5:8d:70:2e:cb:45:9f:ca:8f:c0:2b:4b:88:d7:15:
bc:87:05:9c:97:4a:e1:54:d8:cb:77:2c:7c:d4:b9:78:19:d9:
81:64:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 21:58:06 2025 by rpki-client