Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Gn-8Q-1J-O_w5CZF7rDgLtpNQDY.roa
File: Gn-8Q-1J-O_w5CZF7rDgLtpNQDY.roa (raw, json)
Hash identifier: rTAeLegcfzk07RSol3wnQwTTsf7kSDTE2GG5JFTZtOE=
Subject key identifier: 1A:7F:BC:43:ED:49:F8:EF:F0:E4:26:45:EE:B0:E0:2E:DA:4D:40:36
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0198652B3D47FF673FC575841F3C8627EB1B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Gn-8Q-1J-O_w5CZF7rDgLtpNQDY.roa
Signing time: Fri 01 Aug 2025 10:26:29 +0000
ROA not before: Fri 01 Aug 2025 10:26:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 270175
IP address blocks: 45.80.83.0/24 maxlen: 24
185.216.128.0/23 maxlen: 23
185.216.128.0/24 maxlen: 24
201.77.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:2b:3d:47:ff:67:3f:c5:75:84:1f:3c:86:27:eb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 1 10:26:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a7fbc43ed49f8eff0e42645eeb0e02eda4d4036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:23:b9:a9:1b:82:83:9c:8c:e0:05:ba:78:
76:a5:ef:c9:67:f6:4b:f0:44:f1:5b:ce:29:f0:e3:
41:e5:e8:41:3f:70:fb:84:83:75:7b:19:c6:10:6d:
51:62:0f:31:2d:73:dd:ae:6f:96:bd:ea:ec:01:5d:
e1:d6:68:2d:5f:34:92:83:ee:b1:b3:e2:84:fc:19:
a9:d6:6d:18:0b:fa:57:8f:8c:2c:72:f0:b7:30:f9:
96:0b:67:ee:d2:23:28:87:cc:32:65:d5:92:ae:3d:
fa:c1:a2:03:e0:1a:94:95:d9:43:4d:7a:8e:fe:6b:
16:0e:e6:fb:1f:41:1a:b9:0a:24:54:1c:db:d5:49:
e4:ef:c1:d0:b0:1c:d5:42:0c:22:74:b9:70:aa:fd:
75:db:d0:fb:8c:39:bc:57:87:51:9e:90:18:ea:87:
81:c5:77:e0:02:96:5f:ed:34:88:ce:91:97:8c:dd:
43:bd:7a:b7:6b:d6:b6:fd:ab:f7:97:c9:5e:31:05:
cd:a3:0c:18:0b:9e:2b:13:17:db:d6:42:c0:04:ee:
d7:7d:4a:0b:5d:17:e6:8e:82:a6:d0:af:ce:45:da:
c1:92:e4:e6:36:a1:11:14:46:2f:3b:6e:6d:2c:fa:
4a:d5:88:fe:09:df:94:e8:61:3c:38:46:3b:dd:73:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:BC:43:ED:49:F8:EF:F0:E4:26:45:EE:B0:E0:2E:DA:4D:40:36
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Gn-8Q-1J-O_w5CZF7rDgLtpNQDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.83.0/24
185.216.128.0/23
201.77.56.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:c2:a8:26:be:cf:5c:55:6d:aa:17:33:40:4f:99:4c:ad:b9:
28:f8:84:29:41:ff:5b:07:e8:83:51:99:72:31:96:1a:07:2d:
e0:8d:4d:f5:e9:f8:e7:c9:53:5d:a1:08:c9:08:a7:31:ee:b7:
9a:64:52:0a:3c:65:c0:49:0b:fa:7e:94:90:f2:b9:43:17:aa:
b0:df:0a:bc:f0:2d:21:de:fe:ba:cd:87:14:8c:da:ab:ed:f9:
66:aa:9f:78:cb:59:22:1b:18:ea:0c:60:fc:ed:33:3c:fb:d7:
4c:5d:cf:32:29:3f:29:b2:b4:8a:7a:6d:bf:25:93:ab:b8:58:
79:87:1d:9d:a5:c5:2a:7d:38:dc:b8:61:88:e1:61:f0:e9:a0:
11:ff:cc:13:ec:fd:d6:7e:96:33:11:8f:c5:63:c5:13:7e:cd:
b4:b5:c0:da:11:98:af:9a:61:a0:a1:0f:60:2c:b4:1f:d7:31:
e7:01:75:ed:90:6c:d9:a4:40:2a:58:64:1a:5d:07:87:03:6d:
92:61:6a:c6:10:d1:ff:df:6c:2b:2f:2d:cd:d9:a0:63:20:58:
04:5f:95:bc:32:e6:ae:ce:91:8a:17:8a:b4:24:b3:b5:58:eb:
b1:c3:35:da:6b:5b:c5:99:b2:c2:3d:da:0c:a2:80:28:1b:8a:
b9:7d:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:58:33 2025 by rpki-client