Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/gNi743mJaJJJpWWUxpf7RubXOek.roa
File: gNi743mJaJJJpWWUxpf7RubXOek.roa (raw, json)
Hash identifier: hburpHLX614e/9N2G5KI/cnIBQfgISQPCQg2JsjnMcA=
Subject key identifier: 80:D8:BB:E3:79:89:68:92:49:A5:65:94:C6:97:FB:46:E6:D7:39:E9
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 019A0AE1D40E2B527BE58953E7BF23735701
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/gNi743mJaJJJpWWUxpf7RubXOek.roa
Signing time: Wed 22 Oct 2025 07:46:03 +0000
ROA not before: Wed 22 Oct 2025 07:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56754
IP address blocks: 178.217.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:e1:d4:0e:2b:52:7b:e5:89:53:e7:bf:23:73:57:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Oct 22 07:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80d8bbe37989689249a56594c697fb46e6d739e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:e5:e2:34:4e:00:ee:91:91:ce:bb:de:f8:
b1:45:1c:34:95:a6:e1:21:7d:ee:12:94:11:9d:95:
f9:89:a1:35:98:ee:04:8c:c2:4a:6a:dd:eb:c3:55:
9f:2c:cc:35:d0:92:ab:b1:45:6f:f8:34:a9:80:22:
b5:53:e1:93:df:52:51:e9:bb:6a:40:f7:04:b7:60:
dd:da:26:e1:31:46:3e:88:ab:49:a2:e5:c2:8b:1a:
45:de:c3:3b:df:b0:f3:6a:a7:ce:1f:82:af:38:01:
8f:bf:7a:98:96:9d:ff:32:8c:f5:3e:13:c7:7b:08:
99:a0:e2:8c:71:87:53:d3:9a:1a:8d:a2:2d:c4:bb:
3d:89:da:6d:4a:63:a9:cc:97:30:fd:07:59:c6:e2:
13:95:98:7e:22:9e:04:2c:38:e8:60:90:09:66:25:
3e:2c:41:dc:28:6f:be:63:f4:b3:b4:7a:44:f2:5d:
49:17:4c:d1:a6:00:ac:72:d1:86:34:dd:a4:ff:ba:
76:8b:7c:07:91:af:51:31:10:02:aa:3e:f6:07:11:
4a:e1:b9:01:67:de:be:88:bf:04:63:94:dc:31:26:
70:3e:82:ef:08:eb:95:1d:ca:c6:05:58:1c:42:ba:
2f:02:d3:ba:13:47:2b:8e:4d:dd:6d:b1:74:87:8e:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D8:BB:E3:79:89:68:92:49:A5:65:94:C6:97:FB:46:E6:D7:39:E9
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/gNi743mJaJJJpWWUxpf7RubXOek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:63:4d:38:60:ef:b6:85:33:f5:37:20:ed:3d:13:0f:a9:52:
4d:6b:98:83:8c:0d:7c:d6:50:26:8e:75:89:9a:c5:85:8d:58:
14:ba:2a:79:ec:21:c3:5d:16:36:a1:bc:3b:d9:39:43:b6:86:
c3:7e:b5:33:d0:7a:e3:86:b8:3a:f8:43:4d:9d:12:79:4e:fa:
44:c8:37:7e:73:fa:67:e0:4a:ff:d9:2c:7d:22:4d:06:69:0c:
80:79:ee:e2:e8:26:68:12:9f:e9:26:ba:1e:b4:46:e0:74:65:
d2:58:5a:97:3f:59:b7:06:74:8b:b5:61:8f:95:6d:35:49:30:
71:74:1b:70:f9:47:8a:b0:3d:0b:c3:e9:f0:20:93:64:00:97:
07:26:dd:a1:9c:e4:41:6b:fa:43:63:6c:9f:88:e3:7b:6b:69:
c1:f5:d9:51:74:b1:ac:f6:b9:dc:01:bd:09:39:eb:82:56:0f:
e1:6e:a5:88:06:19:48:56:2c:64:d5:be:9c:a9:7b:59:3e:d7:
53:76:a5:2e:23:20:5e:3c:2a:a7:67:7f:d7:96:ee:30:36:e3:
38:c6:a5:11:5b:c3:b8:d1:55:97:52:bb:72:59:9d:cd:8d:e6:
92:a3:1e:50:48:68:11:be:99:3f:65:a9:5d:4d:92:72:f1:83:
5f:00:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:28:53 2025 by rpki-client