Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/S_8GPNUKK2NonGLARuFoZizua04.roa
File: S_8GPNUKK2NonGLARuFoZizua04.roa (raw, json)
Hash identifier: tOdeEOsd+JGeAQtzEQ6Wb80t+6gXpPWijq1aLw4dCDU=
Subject key identifier: 4B:FF:06:3C:D5:0A:2B:63:68:9C:62:C0:46:E1:68:66:2C:EE:6B:4E
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 01990A48549F0BAD2DEDBF9B0590D7BD56F7
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/S_8GPNUKK2NonGLARuFoZizua04.roa
Signing time: Tue 02 Sep 2025 11:55:36 +0000
ROA not before: Tue 02 Sep 2025 11:55:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 109.175.210.0/24 maxlen: 24
109.205.193.0/24 maxlen: 24
2a01:fb00::/32 maxlen: 32
2a01:fb00::/33 maxlen: 33
2a01:fb00::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:48:54:9f:0b:ad:2d:ed:bf:9b:05:90:d7:bd:56:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Sep 2 11:55:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bff063cd50a2b63689c62c046e168662cee6b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:19:37:f4:fe:fd:98:8b:13:96:a6:35:94:
ec:9d:87:87:3f:fb:43:cf:39:2e:3d:45:f1:26:a1:
69:11:77:35:54:cf:ef:c2:ce:3c:1f:68:eb:b8:dc:
a8:b8:41:2f:53:c9:b8:35:fa:50:dc:75:e5:f6:0b:
1a:e7:10:98:a8:f7:c9:ce:bc:ba:31:ba:2f:a2:16:
6c:dc:83:0b:a2:26:3c:26:d3:5f:30:21:30:15:c7:
52:bb:f0:f0:a7:a3:ec:1d:46:5d:8f:da:42:67:d3:
10:7b:e7:4d:a7:c3:fa:e1:b4:a0:9e:ef:40:9b:34:
e8:86:ae:1a:fc:2a:ec:64:7e:b2:41:c7:c4:5c:c0:
24:b4:78:82:ae:99:66:0d:44:42:50:4a:1f:78:30:
5e:3c:89:3b:73:ea:e2:ba:47:5a:14:86:e0:14:29:
6d:27:f5:ea:f3:d3:d1:16:d2:b8:a6:29:57:c6:a8:
9a:33:3e:aa:46:66:26:8b:96:87:0b:09:c4:95:61:
02:94:f6:ca:c4:d6:a7:17:42:a9:77:c6:25:e7:11:
5c:7c:19:06:f0:8c:17:b2:56:18:ba:27:fd:1e:de:
c3:9d:12:bf:c4:09:0f:96:b3:b5:a5:df:38:8f:df:
a3:dc:a9:a4:37:8d:45:1f:e5:70:31:dc:40:e0:64:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FF:06:3C:D5:0A:2B:63:68:9C:62:C0:46:E1:68:66:2C:EE:6B:4E
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/S_8GPNUKK2NonGLARuFoZizua04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.210.0/24
109.205.193.0/24
IPv6:
2a01:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
2e:05:ea:84:a2:f2:a3:f2:22:f1:5e:44:d5:a5:13:31:4c:cb:
87:03:53:79:2a:6f:11:ef:87:83:33:01:3b:e9:e2:d1:67:d7:
0e:ef:89:9c:97:f3:fb:1b:aa:60:a0:b8:7b:2f:b0:3c:8c:25:
ec:18:87:16:41:5d:a5:ce:a7:b3:f0:dc:27:a0:6a:26:62:65:
ed:25:d9:01:d8:83:28:c0:35:39:f4:84:8a:d2:90:fe:de:95:
c2:c9:55:91:6e:b8:21:ba:d4:33:5f:ed:00:c0:46:ee:ad:24:
a6:a6:77:ba:5c:5b:82:3d:50:20:15:c0:68:96:7c:51:62:1b:
2e:c8:4b:7b:6e:02:1d:48:19:a6:66:c4:aa:03:89:67:6b:3c:
ae:90:6c:9b:69:39:6e:a4:51:cb:f7:81:76:eb:79:04:7b:93:
30:b9:51:26:37:9c:1e:83:ab:d3:2e:9c:ec:ae:75:5d:4a:f1:
81:d3:98:1c:0e:a1:0c:9e:39:40:ab:26:77:fc:1e:b6:a1:b0:
33:fa:ad:3b:6d:19:a8:78:1c:7b:8b:e0:05:bd:70:4d:87:49:
88:32:20:2b:9c:6e:bf:be:5e:6b:c5:18:46:48:8a:9b:a6:22:
a6:72:54:7d:52:28:2f:99:52:72:ea:ec:7e:bf:b0:bc:5d:34:
60:f5:41:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:42:54 2025 by rpki-client