Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/G4uMj4jEgbl0nPqapbiYN9oWNtk.roa
File: G4uMj4jEgbl0nPqapbiYN9oWNtk.roa (raw, json)
Hash identifier: 0hgew6NK06cNsc5ACwn1eMXrZldgM8YdDncSgwy28f4=
Subject key identifier: 1B:8B:8C:8F:88:C4:81:B9:74:9C:FA:9A:A5:B8:98:37:DA:16:36:D9
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019871656D98454FC8FE2B19CE302F5FB43F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/G4uMj4jEgbl0nPqapbiYN9oWNtk.roa
Signing time: Sun 03 Aug 2025 19:25:29 +0000
ROA not before: Sun 03 Aug 2025 19:25:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 89.251.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:71:65:6d:98:45:4f:c8:fe:2b:19:ce:30:2f:5f:b4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 3 19:25:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b8b8c8f88c481b9749cfa9aa5b89837da1636d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:62:ed:b8:af:8a:19:90:ee:56:10:f2:04:
1b:b7:8e:91:59:a5:bf:8b:6e:e1:c1:76:94:35:79:
a4:c6:ee:dd:19:8c:7c:8f:4e:13:f4:a0:88:a7:df:
aa:14:91:ea:bb:2e:09:15:2b:aa:61:ac:15:0f:df:
08:e7:b7:3c:45:62:dc:18:83:60:be:fb:cd:39:3e:
45:2a:c4:0b:9f:76:3d:fc:03:b8:0e:f9:92:69:b5:
9e:24:d2:3c:df:82:b7:cc:6c:c3:3e:e7:c1:0b:0d:
4d:c3:4e:8c:a6:72:e2:3b:0d:d4:64:6b:50:24:7c:
aa:fb:f0:50:e1:25:7f:d3:8a:56:67:60:6e:b1:b0:
58:2b:5d:ed:60:a5:58:c2:df:33:0a:dd:f1:b9:94:
65:a2:5a:5b:19:6f:15:d5:7e:8b:60:89:5c:1b:50:
a9:51:8f:cd:f7:2f:00:c7:d0:60:82:1c:bb:f5:84:
42:cd:51:cc:b3:06:19:9e:90:55:ee:f6:04:f4:3d:
70:b4:55:6b:ad:30:50:f6:f6:c1:1d:46:f9:7c:87:
29:fa:1c:91:66:1f:8d:c0:d2:a8:2a:65:f9:3d:f3:
41:ad:87:69:b8:77:2e:bb:e3:e7:5f:a6:3a:f0:dd:
16:3d:5c:a1:b1:61:c4:4b:6e:70:9f:d0:cd:89:dc:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8B:8C:8F:88:C4:81:B9:74:9C:FA:9A:A5:B8:98:37:DA:16:36:D9
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/G4uMj4jEgbl0nPqapbiYN9oWNtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.29.0/24
Signature Algorithm: sha256WithRSAEncryption
61:3d:dc:0a:40:90:34:ed:bf:82:cd:03:2f:6b:4e:1f:35:73:
14:06:19:c3:4c:b8:6a:01:c4:4a:d0:c1:df:aa:c9:f6:26:08:
ac:cf:c1:87:e8:3c:56:b4:71:b1:19:b1:e1:32:74:31:04:85:
ac:bf:e7:02:e0:21:96:5c:90:94:b0:65:a8:0e:49:d3:af:f3:
27:1e:e3:17:60:af:7c:0d:d1:1b:4a:35:32:99:4a:5e:c3:a0:
4c:7f:1a:2a:e8:11:18:8e:2b:d8:f6:c4:97:44:27:a6:65:e7:
7c:76:00:df:96:53:14:0e:c2:0b:34:26:1c:8a:34:18:90:53:
d1:e9:e3:d5:2e:45:ea:3a:c9:fb:0e:b9:b8:8f:35:81:ba:3d:
9f:78:01:f6:f8:91:4e:10:35:3e:c6:ff:0c:4f:31:59:50:db:
92:fc:54:e8:f1:2b:08:74:ef:83:d3:e2:13:5b:7d:54:08:7b:
04:92:59:88:1a:80:ba:a5:32:7b:4a:e1:c1:ce:87:19:9d:34:
c7:51:64:9d:8a:97:1d:09:87:ac:63:5b:a2:f7:0c:15:65:96:
bc:d4:ea:bf:de:66:a6:ba:db:e2:a2:93:07:69:92:c1:ea:ce:
a6:cf:ef:f0:2b:ec:ab:22:ed:72:84:7b:5a:a4:b5:24:b6:c2:
82:22:ea:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:03 2025 by rpki-client