Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/gKin5_oczuQ_AkHHyfEuz9qjFTc.roa
File: gKin5_oczuQ_AkHHyfEuz9qjFTc.roa (raw, json)
Hash identifier: 2dPqZZpC5wFLZYeumAbnLMLjLIVLDQp/PNW7ceXBgmM=
Subject key identifier: 80:A8:A7:E7:FA:1C:CE:E4:3F:02:41:C7:C9:F1:2E:CF:DA:A3:15:37
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 01984FE8B3E965C480F97A1944B872516995
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/gKin5_oczuQ_AkHHyfEuz9qjFTc.roa
Signing time: Mon 28 Jul 2025 07:21:47 +0000
ROA not before: Mon 28 Jul 2025 07:21:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62303
IP address blocks: 2a0d:4d00:81::/48 maxlen: 48
2a0d:4d00:82::/48 maxlen: 48
2a0d:4d00:83::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:e8:b3:e9:65:c4:80:f9:7a:19:44:b8:72:51:69:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Jul 28 07:21:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80a8a7e7fa1ccee43f0241c7c9f12ecfdaa31537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ab:64:45:06:15:00:6d:2d:48:f9:bd:e8:1a:
31:50:4b:1d:df:93:80:37:f0:90:c5:29:f7:33:11:
9d:f9:0b:b0:67:2f:52:26:25:90:a6:36:a7:59:f1:
ad:68:eb:d4:92:93:eb:44:83:96:39:06:fe:67:cb:
06:aa:a5:e6:b5:4f:c3:b7:da:f8:39:df:5d:1a:87:
65:b8:cc:f2:b3:c6:0d:b8:56:94:d3:bd:13:ae:fa:
7d:14:29:60:81:6e:ee:ad:03:7c:1d:29:eb:cc:cb:
c4:2a:c4:6c:90:a8:d1:c7:c5:48:3d:a2:38:38:80:
d3:c9:d5:a1:2c:f0:cb:0d:a5:65:ab:01:d1:11:87:
ed:f2:52:42:90:ea:2e:b0:d8:f2:67:36:d9:59:e5:
5c:9f:f8:cc:be:db:28:8b:68:e7:bc:b1:e7:96:f9:
db:65:27:26:f2:05:ec:2b:c0:ed:9d:9e:29:17:63:
89:f5:0f:21:5a:cc:0d:2a:25:63:35:f0:be:c6:c6:
73:99:1a:a7:e5:7a:dd:8f:6b:ce:2f:61:ad:1e:b1:
7d:e6:51:81:24:c6:57:24:5c:be:2f:8f:72:c5:0d:
fa:c7:54:61:9b:2f:04:15:e5:cb:a0:cb:8e:b7:55:
bc:5b:ce:ef:a0:83:14:ee:10:3f:17:c6:29:40:6d:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A8:A7:E7:FA:1C:CE:E4:3F:02:41:C7:C9:F1:2E:CF:DA:A3:15:37
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/gKin5_oczuQ_AkHHyfEuz9qjFTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:4d00:81::-2a0d:4d00:83:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:50:07:93:f8:c7:87:be:00:57:87:8b:a4:9e:98:4c:25:cd:
47:e3:8d:72:2c:8f:8f:5a:0a:18:b8:e0:a1:a9:c7:d2:c4:ed:
49:0a:b2:44:42:5d:97:bf:4a:90:69:f6:85:0f:e7:39:d0:f1:
c6:ee:94:f6:ed:12:d4:17:6f:56:4d:56:41:55:e4:14:67:ed:
e4:a3:2f:c4:16:b9:3a:fb:14:75:df:d5:35:f4:de:ba:54:10:
81:bc:01:09:a5:a5:24:e1:4d:7b:c1:b9:db:68:42:4d:c7:ef:
d7:c7:5c:17:74:d3:7c:57:8e:ef:df:cd:1e:8f:bc:92:64:52:
65:39:b2:b7:93:b2:5c:b2:d8:29:ef:41:4e:01:b4:8d:c9:47:
34:59:24:a7:96:e0:e0:a9:b4:25:61:99:52:e5:68:b7:e0:a1:
ae:4a:38:14:39:3d:07:31:89:9e:4a:17:c9:b9:83:ac:0e:f8:
35:60:00:be:86:56:c7:29:97:5e:be:82:68:1b:82:60:56:c0:
7c:98:e3:7d:71:30:4a:56:00:33:09:65:fe:82:64:11:94:6b:
32:4c:d0:ed:18:f7:cc:45:44:3d:dc:64:9b:11:16:0e:ef:64:
b1:95:77:25:9f:fe:88:22:1c:93:61:49:80:d8:3c:36:c2:b4:
42:3c:cb:32
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZhP6LPpZcSA+XoZRLhyUWmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODYwYTliMzY1ODVmYjhhYTA1MWZjMzdmY2M2YTA3NzM5
OTBjYmYwHhcNMjUwNzI4MDcyMTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGE4YTdlN2ZhMWNjZWU0M2YwMjQxYzdjOWYxMmVjZmRhYTMxNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqtkRQYVAG0tSPm96BoxUEsd35OA
N/CQxSn3MxGd+QuwZy9SJiWQpjanWfGtaOvUkpPrRIOWOQb+Z8sGqqXmtU/Dt9r4
Od9dGodluMzys8YNuFaU070Trvp9FClggW7urQN8HSnrzMvEKsRskKjRx8VIPaI4
OIDTydWhLPDLDaVlqwHREYft8lJCkOousNjyZzbZWeVcn/jMvtsoi2jnvLHnlvnb
ZScm8gXsK8DtnZ4pF2OJ9Q8hWswNKiVjNfC+xsZzmRqn5Xrdj2vOL2GtHrF95lGB
JMZXJFy+L49yxQ36x1Rhmy8EFeXLoMuOt1W8W87voIMU7hA/F8YpQG0jXQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFICop+f6HM7kPwJBx8nxLs/aoxU3MB8GA1UdIwQY
MBaAFNOGCps2WF+4qgUfw3/MagdzmQy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRZS216WllYN2lxQlJfRGY4eHFCM09aREw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wM2M0MzAtZmIwNC00MGVhLTg1ZDEt
YzkyYzYxNjVkZTE4LzEvZ0tpbjVfb2N6dVFfQWtISHlmRXV6OXFqRlRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wM2M0MzAtZmIwNC00MGVhLTg1ZDEtYzkyYzYxNjVkZTE4
LzEvMDRZS216WllYN2lxQlJfRGY4eHFCM09aREw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDU0A
AIEDBwIqDU0AAIAwDQYJKoZIhvcNAQELBQADggEBAGlQB5P4x4e+AFeHi6SemEwl
zUfjjXIsj49aChi44KGpx9LE7UkKskRCXZe/SpBp9oUP5znQ8cbulPbtEtQXb1ZN
VkFV5BRn7eSjL8QWuTr7FHXf1TX03rpUEIG8AQmlpSThTXvBudtoQk3H79fHXBd0
03xXju/fzR6PvJJkUmU5sreTslyy2CnvQU4BtI3JRzRZJKeW4OCptCVhmVLlaLfg
oa5KOBQ5PQcxiZ5KF8m5g6wO+DVgAL6GVscpl16+gmgbgmBWwHyY431xMEpWADMJ
Zf6CZBGUazJM0O0Y98xFRD3cZJsRFg7vZLGVdyWf/ogiHJNhSYDYPDbCtEI8yzI=
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:00 2025 by rpki-client