Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/gcyVEfl2Y641X6JyrJ5gHsnWGHM.roa
File: gcyVEfl2Y641X6JyrJ5gHsnWGHM.roa (raw, json)
Hash identifier: 4fScV3KfjcgkIMTXmX6XzXUXdZUkt2FHTuue2HpZKoE=
Subject key identifier: 81:CC:95:11:F9:76:63:AE:35:5F:A2:72:AC:9E:60:1E:C9:D6:18:73
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 019986BA5622F9D8678242716A6EF255226D
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/gcyVEfl2Y641X6JyrJ5gHsnWGHM.roa
Signing time: Fri 26 Sep 2025 15:53:02 +0000
ROA not before: Fri 26 Sep 2025 15:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207567
IP address blocks: 81.90.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:ba:56:22:f9:d8:67:82:42:71:6a:6e:f2:55:22:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Sep 26 15:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81cc9511f97663ae355fa272ac9e601ec9d61873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:6f:9d:cd:70:09:1b:7a:d1:c0:f9:6a:5e:
7e:ad:72:7b:da:84:b1:71:e6:e7:ca:c0:c1:16:9d:
52:65:03:26:33:66:05:7e:57:d7:ef:3c:49:3c:5f:
d1:e4:b2:3b:14:a6:70:63:9e:98:1d:03:4e:99:f6:
25:20:30:53:81:93:fa:15:37:b6:31:26:8e:bf:c2:
84:dc:16:89:4a:89:2a:6c:42:c5:1a:0f:7e:44:b9:
8b:d5:ca:11:89:f9:5c:ec:9d:d1:8a:b7:f6:08:64:
87:d7:bf:c2:17:0b:bc:ce:6c:14:41:e9:4e:96:f3:
6a:41:36:1d:27:b6:33:dd:0c:2e:6e:94:c1:c9:5a:
e4:7c:37:76:22:e4:f1:bf:dd:5a:aa:aa:9f:f9:e5:
8f:5f:b5:8c:77:8a:2e:5f:59:21:cd:e9:b4:d1:d9:
1c:07:b7:b5:9e:ea:f9:de:7a:da:a7:26:3e:bc:a8:
a2:74:74:74:7d:7b:29:b4:ae:38:81:cd:4d:e3:6c:
de:8a:b5:29:18:66:81:1f:fd:a5:df:1d:d6:f2:3b:
93:e6:81:d0:73:67:c7:b6:ce:d7:9b:cc:03:b1:78:
4d:c1:2d:76:b0:a5:15:f7:a2:77:1f:a3:52:c5:c4:
66:17:cf:80:dd:42:1b:18:26:26:42:ba:ae:35:3c:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CC:95:11:F9:76:63:AE:35:5F:A2:72:AC:9E:60:1E:C9:D6:18:73
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/gcyVEfl2Y641X6JyrJ5gHsnWGHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.28.0/24
Signature Algorithm: sha256WithRSAEncryption
33:a7:72:fe:e0:44:72:e3:9f:52:49:e4:90:66:b8:92:20:2a:
b5:1f:b5:9c:66:58:1b:44:a7:e3:f1:c3:63:a6:69:40:7d:ff:
a7:27:6d:01:2e:c8:f7:85:e6:1b:a0:0c:7c:6a:43:fb:60:14:
7e:fa:b6:cd:dc:4f:fd:05:19:44:cf:ee:b3:c2:54:af:23:21:
df:7e:b2:31:18:c6:73:29:8c:68:32:14:5b:1a:93:f5:fe:cc:
9b:19:67:4a:e0:b7:16:ca:cf:6e:3c:08:f2:1e:10:48:28:2e:
ae:e3:75:a1:73:b6:43:ec:11:59:4b:9c:fe:51:5a:64:30:9d:
8c:44:c1:31:16:51:3c:ab:a3:8f:f8:bc:34:73:ae:96:35:b2:
97:a7:b5:01:8a:67:50:49:03:b9:c3:96:9b:5e:8f:4b:3c:5c:
d9:85:3e:8a:bd:68:b5:12:6e:d6:cd:2d:31:e3:ac:93:44:28:
4a:97:9a:3d:a4:a2:87:ec:00:80:1e:e8:84:c8:41:f6:12:d6:
e6:55:ab:f8:1f:d7:60:91:a1:c4:82:c3:fc:77:c2:66:69:fc:
b5:ae:73:c2:b7:c3:84:62:37:a2:60:ef:65:c8:5d:e6:20:8e:
23:9c:0f:48:8a:8e:eb:bd:b2:2f:a7:36:61:37:85:8c:bd:49:
a7:e1:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 21:23:05 2025 by rpki-client