Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GCRSvOseIgshlNf-VIZVY_LndcU.roa
File: GCRSvOseIgshlNf-VIZVY_LndcU.roa (raw, json)
Hash identifier: 7MBxRMWAc8dOv8CZOcVJFRh4r20lRdv4LiYVgfjWINQ=
Subject key identifier: 18:24:52:BC:EB:1E:22:0B:21:94:D7:FE:54:86:55:63:F2:E7:75:C5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019A263ADD8C4438B0BC38D2535C32EDC873
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GCRSvOseIgshlNf-VIZVY_LndcU.roa
Signing time: Mon 27 Oct 2025 15:13:03 +0000
ROA not before: Mon 27 Oct 2025 15:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 274208
IP address blocks: 89.190.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:3a:dd:8c:44:38:b0:bc:38:d2:53:5c:32:ed:c8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 27 15:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=182452bceb1e220b2194d7fe54865563f2e775c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:5e:35:70:66:91:d5:ee:bd:e5:4d:e8:bf:
14:ba:5a:38:44:20:bf:e9:1b:2e:74:05:e6:90:2c:
c9:8c:3d:4e:12:cd:d5:00:83:36:45:a3:9a:13:22:
6b:51:65:be:a0:17:f8:70:f4:f9:84:58:49:af:28:
8d:48:94:b0:d8:79:af:61:2a:ce:17:b7:f8:12:43:
40:34:35:f9:37:fb:6f:be:00:79:b2:20:05:51:08:
fa:d6:f0:44:c2:27:19:e5:55:2c:5b:f6:df:11:8a:
83:59:47:9d:a9:77:a8:23:c1:3c:c5:f7:c2:62:04:
74:c0:e5:0e:fc:35:df:59:00:47:2f:0a:ca:d3:59:
6d:54:fb:66:50:83:fb:de:28:3e:73:f7:e3:ce:7a:
94:9e:86:12:d0:67:73:fa:e7:ca:8b:d5:37:19:a9:
9b:94:a9:21:65:83:df:96:7c:3b:8b:1e:53:43:c9:
33:a6:57:2e:0a:3d:66:a0:44:cd:30:ab:b1:10:2b:
59:44:8a:29:43:27:2f:0f:0c:f1:f9:1a:c7:34:3b:
99:e2:39:4d:9a:9d:c7:46:60:99:de:91:5e:82:cc:
1d:2f:24:34:b6:78:1d:2a:36:ee:aa:b1:b2:3f:75:
43:11:7f:50:db:95:75:63:0c:71:8f:56:48:7e:a2:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:24:52:BC:EB:1E:22:0B:21:94:D7:FE:54:86:55:63:F2:E7:75:C5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GCRSvOseIgshlNf-VIZVY_LndcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.152.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:13:9d:d0:96:2f:e9:89:5d:94:b7:59:4d:77:90:7a:a0:bb:
af:41:5e:d4:15:d8:dc:ec:de:d8:b8:6e:4d:57:7f:0e:d1:b7:
c7:e9:da:67:a1:f9:69:7c:25:d0:c8:13:d2:ef:30:e3:cf:36:
c2:c3:2b:d9:f7:02:4a:39:e0:48:50:f9:00:d2:53:3c:a5:3f:
e9:cb:64:f9:a0:f0:31:38:b8:1f:72:c6:04:b0:4c:7c:7a:5c:
08:76:31:8f:70:a7:15:49:19:7a:7e:4c:43:b5:4e:2d:be:93:
31:85:3c:f3:95:2b:42:2e:d6:18:2b:fc:1e:97:e9:be:d3:63:
70:bf:c3:8b:b8:0a:8e:6c:c8:32:9d:d8:33:5c:d9:ca:84:3d:
de:b7:0b:c8:e3:d9:59:c0:4a:91:98:a7:6a:71:95:8c:f7:49:
07:25:1b:9a:31:0e:34:80:d2:c2:11:84:5a:bc:83:e5:10:95:
dc:40:c7:d0:97:9e:e5:8b:8b:93:05:f8:09:b7:4d:4c:82:00:
b9:a0:bf:ab:c8:5b:40:85:50:84:6c:2a:28:5e:b0:a8:f2:79:
c4:5e:c5:93:48:e4:ad:35:31:86:b6:ab:7d:1a:36:46:59:79:
0d:43:86:3b:56:8d:c5:04:f1:ab:46:78:26:dc:a4:92:7e:e5:
39:ca:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:34:07 2025 by rpki-client