Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gkYIjq_rF62DynCch7DZxOVncB8.roa
File: gkYIjq_rF62DynCch7DZxOVncB8.roa (raw, json)
Hash identifier: hP8CBnKP1FXY0et449lt5UNAxnq5UvMJKk8Vh2rpyD8=
Subject key identifier: 82:46:08:8E:AF:EB:17:AD:83:CA:70:9C:87:B0:D9:C4:E5:67:70:1F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198742BE39075A108BCFC85F5ABA099A281
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gkYIjq_rF62DynCch7DZxOVncB8.roa
Signing time: Mon 04 Aug 2025 08:21:29 +0000
ROA not before: Mon 04 Aug 2025 08:21:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31025
IP address blocks: 5.83.156.0/24 maxlen: 24
2a02:2fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:2b:e3:90:75:a1:08:bc:fc:85:f5:ab:a0:99:a2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 4 08:21:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8246088eafeb17ad83ca709c87b0d9c4e567701f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7f:9e:ff:eb:8f:5b:4a:8f:85:26:f7:47:71:
5f:98:c8:66:92:01:fd:1c:40:0e:f7:88:98:4c:4b:
7f:4c:12:67:65:49:18:58:4a:f0:2f:9e:b3:14:0b:
0d:56:74:29:09:56:7f:12:1a:79:77:bb:0c:b9:7d:
47:a6:0f:53:65:f9:ca:36:ba:fd:b5:39:b9:59:f1:
95:0c:f8:3c:39:a5:cd:8b:79:e4:b9:08:64:bb:fa:
f1:26:45:22:bd:a8:ce:e5:ba:ba:03:81:1b:8d:33:
84:7b:9a:13:0c:c9:b3:46:f3:52:ea:09:39:7e:09:
14:3e:24:ae:4a:06:83:a9:60:d2:d4:d6:df:76:d1:
08:03:f2:1a:3b:5d:76:fd:6d:5f:cb:76:33:e1:5a:
6e:57:ea:d9:8c:13:4b:0d:f4:89:c9:3b:55:29:df:
90:16:d0:63:6e:5e:e1:56:16:50:bb:2b:e4:2d:c9:
3f:a6:8e:46:4e:58:13:c7:b7:5a:83:51:74:62:c1:
72:c5:12:1c:22:3c:b6:9c:e0:e6:49:6a:10:d1:48:
b9:8a:ed:6e:44:5e:02:07:a1:30:4b:57:d3:43:08:
40:3e:15:2c:25:bd:07:cb:fd:6e:f2:ae:42:29:20:
95:79:a2:e6:fc:1c:0a:76:73:aa:1f:3f:e7:a7:68:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:46:08:8E:AF:EB:17:AD:83:CA:70:9C:87:B0:D9:C4:E5:67:70:1F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gkYIjq_rF62DynCch7DZxOVncB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.156.0/24
IPv6:
2a02:2fc0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:59:81:0d:70:bd:1e:d4:f4:19:98:3c:f8:ef:6d:ff:37:37:
b6:f4:14:9e:5b:b3:3e:f0:72:3c:f8:79:bf:ae:bd:57:d2:5e:
88:bf:a2:03:33:bf:9c:f0:47:11:d6:68:07:dd:d5:a0:40:97:
03:5c:99:fd:14:68:19:1d:60:f4:80:53:49:ca:a7:3e:c1:07:
90:fe:49:ce:b4:be:10:eb:c0:f1:1b:9a:52:c4:b1:df:de:b1:
9b:7d:9f:bc:c9:6b:b0:6f:ea:14:71:2c:4e:1e:e6:a9:e8:cf:
99:f8:7f:e0:69:20:dd:65:63:a5:f8:7d:28:ae:28:86:d7:92:
dc:1f:bf:5e:33:51:51:43:bf:ad:dc:c9:7a:df:6f:8c:75:68:
4e:57:45:60:f0:f0:05:59:99:90:21:14:f0:8f:50:b8:6a:dd:
4e:30:aa:f8:30:c3:ac:77:d6:78:3e:44:d2:2f:bd:ef:fd:9a:
ba:f9:fb:69:8a:c2:c7:5f:8b:1f:e8:a8:91:f1:38:01:0a:d5:
9a:9d:81:cf:dd:8d:f1:23:11:ea:b5:b6:40:39:8b:04:11:86:
bf:15:7a:8d:2f:8b:ca:80:dd:f1:f4:7b:11:92:a1:c7:0f:58:
23:c7:9b:27:35:18:de:fd:67:99:c2:94:24:2e:ca:45:ac:48:
6e:10:ac:e7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZh0K+OQdaEIvPyF9augmaKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwODA0MDgyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjQ2MDg4ZWFmZWIxN2FkODNjYTcwOWM4N2IwZDljNGU1Njc3MDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X+e/+uPW0qPhSb3R3FfmMhmkgH9
HEAO94iYTEt/TBJnZUkYWErwL56zFAsNVnQpCVZ/Ehp5d7sMuX1Hpg9TZfnKNrr9
tTm5WfGVDPg8OaXNi3nkuQhku/rxJkUivajO5bq6A4EbjTOEe5oTDMmzRvNS6gk5
fgkUPiSuSgaDqWDS1NbfdtEIA/IaO112/W1fy3Yz4VpuV+rZjBNLDfSJyTtVKd+Q
FtBjbl7hVhZQuyvkLck/po5GTlgTx7dag1F0YsFyxRIcIjy2nODmSWoQ0Ui5iu1u
RF4CB6EwS1fTQwhAPhUsJb0Hy/1u8q5CKSCVeaLm/BwKdnOqHz/np2jX8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIJGCI6v6xetg8pwnIew2cTlZ3AfMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZ2tZSWpxX3JGNjJEeW5DY2g3RFp4T1ZuY0I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABVOcMA8E
AgACMAkDBwAqAi/AAAAwDQYJKoZIhvcNAQELBQADggEBAB5ZgQ1wvR7U9BmYPPjv
bf83N7b0FJ5bsz7wcjz4eb+uvVfSXoi/ogMzv5zwRxHWaAfd1aBAlwNcmf0UaBkd
YPSAU0nKpz7BB5D+Sc60vhDrwPEbmlLEsd/esZt9n7zJa7Bv6hRxLE4e5qnoz5n4
f+BpIN1lY6X4fSiuKIbXktwfv14zUVFDv63cyXrfb4x1aE5XRWDw8AVZmZAhFPCP
ULhq3U4wqvgww6x31ng+RNIvve/9mrr5+2mKwsdfix/oqJHxOAEK1Zqdgc/djfEj
Eeq1tkA5iwQRhr8Veo0vi8qA3fH0exGSoccPWCPHmyc1GN79Z5nClCQuykWsSG4Q
rOc=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:45 2025 by rpki-client