Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GWIG048xmcHusazSxPYHeSyIeCo.roa
File: GWIG048xmcHusazSxPYHeSyIeCo.roa (raw, json)
Hash identifier: juGJLXksO5+zMEfJ/hM96IeIdhZyXQhZSJYWtmZbe0E=
Subject key identifier: 19:62:06:D3:8F:31:99:C1:EE:B1:AC:D2:C4:F6:07:79:2C:88:78:2A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A36415862686B3FD6E5D79A50A99709DA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GWIG048xmcHusazSxPYHeSyIeCo.roa
Signing time: Thu 30 Oct 2025 17:54:03 +0000
ROA not before: Thu 30 Oct 2025 17:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208111
IP address blocks: 89.106.64.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:41:58:62:68:6b:3f:d6:e5:d7:9a:50:a9:97:09:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 30 17:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=196206d38f3199c1eeb1acd2c4f607792c88782a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:61:8b:43:18:da:6d:51:17:01:df:b3:4f:
4d:5b:2e:cb:80:d4:c2:00:73:e4:1d:31:ea:f3:d6:
af:8d:98:0d:9c:6d:17:37:3e:e8:79:5f:9f:42:ae:
26:32:a4:db:4f:e0:a3:fb:e0:e5:f4:5b:9a:ea:2b:
52:8f:ff:60:90:5c:8c:48:21:01:50:41:b1:2f:e7:
b8:82:30:d5:73:1f:47:72:cd:51:2c:df:f8:9c:ce:
d9:48:80:c0:2d:b1:9c:93:f1:e1:08:96:28:45:d1:
db:49:38:d8:9f:7c:1a:96:73:04:b2:42:b8:95:8d:
72:a5:34:4d:5c:b9:5b:9c:20:5f:7c:4b:ee:db:1b:
1d:43:21:94:17:6a:ce:36:75:66:bf:53:33:af:7b:
91:0e:ca:35:c0:4e:c3:8b:2f:c2:52:fc:6c:1a:e6:
8c:bc:61:43:71:63:50:45:7a:f6:48:3b:6a:86:9a:
b6:d6:47:15:4e:ba:bf:f5:9e:b3:32:9c:f7:bd:2f:
8e:b7:9e:60:d7:98:63:ac:44:a9:2c:bd:26:e2:57:
aa:a6:1a:c9:d5:93:0b:a8:16:5e:e7:27:af:72:0d:
52:11:1c:57:c3:b0:e0:59:00:c9:79:a2:f8:eb:64:
a4:1c:48:cb:55:59:4c:9a:64:3f:f2:85:86:7b:05:
99:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:06:D3:8F:31:99:C1:EE:B1:AC:D2:C4:F6:07:79:2C:88:78:2A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GWIG048xmcHusazSxPYHeSyIeCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.64.0/24
185.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2b:66:a8:b7:06:ff:a7:63:3c:17:8d:5f:20:7e:ba:a0:3f:
e2:60:42:60:d7:27:34:e1:6b:db:6d:14:16:cd:eb:8a:f6:9f:
f7:7e:f8:ae:77:01:ad:0a:f9:40:1b:95:23:95:54:f2:62:dd:
2a:1f:08:0f:a3:10:f0:8f:99:eb:c4:10:fb:ac:bb:a6:0b:28:
52:e5:f4:59:44:3f:53:59:5d:6a:8f:e8:f5:60:3f:6a:3d:04:
c8:da:0d:49:22:4c:a9:e5:a4:5c:85:aa:2b:85:30:da:0e:de:
93:45:38:f8:dd:f5:6e:f4:e7:ea:ca:c2:3a:d9:af:4a:ed:c7:
60:f3:aa:47:8c:d1:05:a8:8f:80:18:6b:7f:ce:7b:95:ca:5e:
e5:fc:8c:3d:20:b3:71:af:58:ce:2d:77:40:f0:20:8f:9e:3c:
f6:b8:34:68:32:c1:51:35:53:e4:ce:71:02:0c:5d:77:20:1d:
b8:eb:59:6c:ef:d3:cb:2b:78:6d:19:2b:40:97:fb:e2:86:aa:
3c:4f:51:f0:51:3d:9d:b8:46:e8:f8:be:91:14:70:90:75:68:
d4:7e:83:4a:ae:1d:54:35:d9:5d:40:4b:74:29:9b:1a:67:f5:
54:c4:cc:64:51:54:46:54:66:4c:6a:3b:ae:e7:c1:bb:7b:15:
e3:16:dc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:04:38 2025 by rpki-client