Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/G5bYAs5-DWEC8k2PerkxyvzK3O8.roa
File: G5bYAs5-DWEC8k2PerkxyvzK3O8.roa (raw, json)
Hash identifier: 0wZ64Natb0gIUfylulMGJdNUBBW0kgaRtyK7K218h3k=
Subject key identifier: 1B:96:D8:02:CE:7E:0D:61:02:F2:4D:8F:7A:B9:31:CA:FC:CA:DC:EF
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019779CD76A7C68D06F274F57C3505BB728B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/G5bYAs5-DWEC8k2PerkxyvzK3O8.roa
Signing time: Mon 16 Jun 2025 17:33:17 +0000
ROA not before: Mon 16 Jun 2025 17:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.22.142.0/23 maxlen: 24
89.185.0.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:cd:76:a7:c6:8d:06:f2:74:f5:7c:35:05:bb:72:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 16 17:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b96d802ce7e0d6102f24d8f7ab931cafccadcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:11:7e:12:36:5d:da:f2:0d:92:31:71:3b:
d6:9a:fd:c6:16:cb:97:e3:fc:bf:de:1a:c6:1a:de:
6f:4d:6a:7b:35:fb:3f:a8:c4:57:e2:60:7a:00:78:
c2:9f:cc:a4:98:81:77:97:25:67:b4:b1:0a:b7:66:
53:46:02:cf:86:e5:7f:90:44:a8:93:c1:85:a1:55:
0a:11:af:2e:f7:a0:0c:9c:fd:c0:77:d8:a3:f9:20:
36:6b:0f:43:f4:1d:0f:61:95:33:d8:21:9c:f5:46:
ce:53:41:93:6c:9a:90:b8:15:cf:96:92:6a:a0:7b:
4d:7f:5d:5d:b6:f5:9d:08:f7:0c:19:4e:5b:85:d3:
8b:dc:23:a3:ad:a9:07:65:3d:f9:e8:03:0d:eb:cc:
75:e0:92:a8:38:2a:c7:47:1c:11:89:f2:49:ad:1b:
62:de:dc:ae:fb:1a:6b:ed:81:86:40:28:32:ae:cb:
17:5e:2d:88:1a:65:55:0f:30:b1:8c:bb:14:d2:56:
f5:c4:a7:1a:bb:b3:d3:fa:a8:d8:9a:90:73:6f:48:
7f:1f:16:61:fe:e4:d1:ef:ca:a2:b5:dc:51:4e:52:
87:93:36:74:67:7a:d0:5c:1f:38:c2:00:54:88:fc:
1e:08:fb:b0:4d:d6:7c:3e:68:94:04:c7:f9:d5:c6:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:96:D8:02:CE:7E:0D:61:02:F2:4D:8F:7A:B9:31:CA:FC:CA:DC:EF
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/G5bYAs5-DWEC8k2PerkxyvzK3O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.142.0/23
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
35:55:27:34:d9:9b:61:4d:7b:a4:82:ce:e8:8f:af:af:c4:5d:
ab:60:9a:16:29:67:14:2d:d6:2f:fe:cb:fc:f7:cd:fa:0f:19:
57:f7:af:12:86:62:db:5e:16:e6:4d:e4:df:2e:55:5e:f2:23:
3e:71:7a:50:c4:0f:44:75:77:f7:2f:8d:60:6c:5c:16:5e:68:
e0:ea:35:d9:07:9b:ed:1b:a4:0a:61:cf:45:a2:7d:b4:62:17:
31:28:96:09:25:70:04:3e:f6:66:09:ef:31:49:ab:59:be:f3:
4a:ea:9c:58:4d:f1:b3:26:22:cb:0d:85:07:74:9b:e9:ee:24:
af:d3:69:bf:b5:b1:68:d7:04:61:10:c4:1d:1a:27:af:3c:21:
61:68:22:20:10:55:5b:6b:56:4d:34:1d:04:7f:0a:69:ee:3f:
17:86:42:2c:14:f6:f1:09:1a:e3:03:58:3c:0d:63:6d:09:a4:
95:f2:0c:3c:05:3c:56:80:3d:79:e3:c5:40:35:4b:bb:89:75:
45:f0:a7:35:de:b3:bd:73:2f:12:05:4b:d4:b8:72:40:9c:6a:
15:2d:20:ae:e4:1d:b4:2a:94:7a:e3:84:70:a9:67:bc:55:b8:
ef:00:24:38:f5:a6:73:a8:e3:27:d6:b4:a3:69:c5:45:7e:58:
e1:99:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:37:35 2025 by rpki-client