Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/g07GyHfG6F9WNQ8gUobRrfG7nRc.roa
File: g07GyHfG6F9WNQ8gUobRrfG7nRc.roa (raw, json)
Hash identifier: rWPEmaXinNaUvuqzHTSTPsHVll4A7NCQzuN/YhsHaWY=
Subject key identifier: 83:4E:C6:C8:77:C6:E8:5F:56:35:0F:20:52:86:D1:AD:F1:BB:9D:17
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019873A71FF757E9B85EADF3850C2303C075
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/g07GyHfG6F9WNQ8gUobRrfG7nRc.roa
Signing time: Mon 04 Aug 2025 05:56:29 +0000
ROA not before: Mon 04 Aug 2025 05:56:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.155.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:a7:1f:f7:57:e9:b8:5e:ad:f3:85:0c:23:03:c0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Aug 4 05:56:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=834ec6c877c6e85f56350f205286d1adf1bb9d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:0b:3f:c3:da:9b:b1:2a:1a:9e:25:1a:08:
dc:81:31:2d:7c:be:ab:7c:b6:82:96:b6:d6:89:8f:
c1:bc:6b:99:be:a1:06:19:68:08:17:1e:c6:9b:3c:
19:60:0a:08:d1:1d:2a:2c:20:12:69:9d:da:60:54:
4d:83:ed:2c:18:d9:d4:f6:26:b1:13:64:75:78:a4:
0c:83:76:ff:36:ce:1c:86:b2:50:d2:50:96:c3:e6:
ed:e4:9f:03:bb:53:ab:09:ef:0e:c1:de:7e:af:4f:
41:d8:9d:0e:46:a3:d7:3d:8e:fc:8f:a7:12:07:59:
ec:56:3e:ac:2a:19:a8:1a:78:99:30:16:d3:c3:3c:
2f:fd:03:e0:f6:0b:10:2f:d0:c8:03:c2:f5:8d:5d:
25:52:c9:2f:68:02:c9:34:45:ad:74:0b:3e:b6:f0:
c0:e9:62:de:18:d3:df:4a:90:b7:a5:6c:a8:d8:4d:
64:8b:29:15:e7:75:b4:6c:c2:de:01:32:60:28:65:
41:6c:a4:47:19:82:0d:16:0c:fd:dc:35:48:99:06:
fa:1e:09:dc:7c:19:32:38:5b:1a:4f:a3:cd:3f:4b:
80:35:88:ee:ae:56:ac:35:99:b8:8e:5a:3b:53:49:
ce:9f:5f:8c:c0:27:76:ec:12:ce:1d:fa:b5:f2:fe:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4E:C6:C8:77:C6:E8:5F:56:35:0F:20:52:86:D1:AD:F1:BB:9D:17
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/g07GyHfG6F9WNQ8gUobRrfG7nRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.164.0/24
Signature Algorithm: sha256WithRSAEncryption
67:1e:1d:cf:48:d8:92:48:ec:5d:22:fe:4b:ae:ea:13:22:f0:
50:95:15:f1:8d:a5:30:3c:26:72:5a:5a:78:a8:95:24:c5:a6:
da:4e:7e:68:a8:f8:89:8e:7e:c4:8f:5a:ac:df:29:ea:73:94:
94:ae:3d:08:fa:1c:40:98:c4:d9:56:1f:9a:d5:db:e9:da:63:
02:17:1e:79:1a:0e:d6:e7:01:ee:68:91:99:4f:8e:5b:84:59:
f0:64:cf:b1:61:d5:30:91:57:81:da:58:40:ac:bb:27:ad:d0:
f0:17:09:24:59:27:27:19:6e:a2:5d:ec:7e:99:51:8d:7e:5e:
3d:b8:9b:10:49:5f:81:d9:18:9e:0a:b4:ae:a7:30:bd:a0:49:
75:47:ea:c1:01:29:93:93:ac:e2:96:c6:0a:ec:44:e8:f0:57:
b4:20:f3:bc:bd:32:5e:98:45:e8:ea:cf:a6:b4:ec:2c:b1:f4:
e0:04:1f:9e:bb:3f:a5:d7:e7:62:c2:8a:b7:3d:1e:71:a8:74:
56:01:47:f6:46:b3:40:4e:2d:e3:13:59:f7:11:b4:19:59:5a:
8c:b0:25:b3:3d:93:eb:d3:71:a5:b4:81:97:84:f5:2a:d3:09:
7f:72:57:9b:45:b8:f3:62:0b:a7:c6:41:77:a8:98:96:a7:a9:
1a:23:d0:18
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZhzpx/3V+m4Xq3zhQwjA8B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjUwODA0MDU1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzRlYzZjODc3YzZlODVmNTYzNTBmMjA1Mjg2ZDFhZGYxYmI5ZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0cLP8Pam7EqGp4lGgjcgTEtfL6r
fLaClrbWiY/BvGuZvqEGGWgIFx7GmzwZYAoI0R0qLCASaZ3aYFRNg+0sGNnU9iax
E2R1eKQMg3b/Ns4chrJQ0lCWw+bt5J8Du1OrCe8Owd5+r09B2J0ORqPXPY78j6cS
B1nsVj6sKhmoGniZMBbTwzwv/QPg9gsQL9DIA8L1jV0lUskvaALJNEWtdAs+tvDA
6WLeGNPfSpC3pWyo2E1kiykV53W0bMLeATJgKGVBbKRHGYINFgz93DVImQb6Hgnc
fBkyOFsaT6PNP0uANYjurlasNZm4jlo7U0nOn1+MwCd27BLOHfq18v4/TwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFINOxsh3xuhfVjUPIFKG0a3xu50XMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xL2cwN0d5SGZHNkY5V05ROGdVb2JScmZHN25SYy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtm6Qw
DQYJKoZIhvcNAQELBQADggEBAGceHc9I2JJI7F0i/kuu6hMi8FCVFfGNpTA8JnJa
WniolSTFptpOfmio+ImOfsSPWqzfKepzlJSuPQj6HECYxNlWH5rV2+naYwIXHnka
DtbnAe5okZlPjluEWfBkz7Fh1TCRV4HaWECsuyet0PAXCSRZJycZbqJd7H6ZUY1+
Xj24mxBJX4HZGJ4KtK6nML2gSXVH6sEBKZOTrOKWxgrsROjwV7Qg87y9Ml6YRejq
z6a07Cyx9OAEH567P6XX52LCirc9HnGodFYBR/ZGs0BOLeMTWfcRtBlZWoywJbM9
k+vTcaW0gZeE9SrTCX9yV5tFuPNiC6fGQXeomJanqRoj0Bg=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:03 2025 by rpki-client