Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GxbLQSeCdJd8YycvdFGMV1VgsYI.roa
File: GxbLQSeCdJd8YycvdFGMV1VgsYI.roa (raw, json)
Hash identifier: E8xyqv8hFWicWud4wMHkh/azyCJgEkkhO/OQOgaEygg=
Subject key identifier: 1B:16:CB:41:27:82:74:97:7C:63:27:2F:74:51:8C:57:55:60:B1:82
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198563A2A8CFDD9917E10CFC6FE55E7A1EA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GxbLQSeCdJd8YycvdFGMV1VgsYI.roa
Signing time: Tue 29 Jul 2025 12:48:29 +0000
ROA not before: Tue 29 Jul 2025 12:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:3a:2a:8c:fd:d9:91:7e:10:cf:c6:fe:55:e7:a1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 29 12:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b16cb41278274977c63272f74518c575560b182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:9f:ce:8a:51:c2:52:90:ff:c7:2a:8a:df:
a8:6d:5b:ed:50:e9:0b:23:a6:19:96:2e:0d:e9:5e:
05:b4:14:08:6b:6b:df:94:d8:aa:dd:92:87:bd:d5:
81:48:5b:7d:c2:9f:2f:6d:cf:44:0c:12:1f:d0:a7:
35:16:8c:3e:e1:10:d4:c9:14:eb:7c:b1:e2:18:c5:
00:68:ee:4c:7a:7e:40:b8:ca:66:55:02:23:60:b8:
8f:39:a3:2b:e2:e4:9e:60:91:ae:44:a1:d9:d4:58:
fd:ff:db:88:b7:a4:97:d0:91:c1:c3:78:c6:78:a7:
51:f7:66:46:36:3b:78:55:90:80:6c:60:5f:2b:d7:
70:25:d4:2a:b3:3b:ae:20:35:2f:f9:26:2e:7c:9f:
d9:77:2b:0c:10:17:03:f0:46:37:2f:b1:b3:84:03:
16:2f:89:58:9f:d9:1e:91:92:2d:b0:5f:30:8e:9a:
05:f3:82:a6:a5:c7:36:48:e5:dc:e4:54:0c:94:08:
03:8c:72:0a:55:6d:73:9b:7f:16:3c:45:ed:c1:59:
8f:e4:25:76:e7:a4:f4:c2:2e:6b:74:f5:88:8f:d4:
98:ee:a4:91:f0:fd:09:93:e1:3c:9e:d1:f8:fa:5a:
13:35:2d:89:bd:88:40:97:7c:5f:b0:94:f0:09:31:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:CB:41:27:82:74:97:7C:63:27:2F:74:51:8C:57:55:60:B1:82
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GxbLQSeCdJd8YycvdFGMV1VgsYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
94.177.106.0/24
167.17.180.0/24
194.58.47.0/24
202.71.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:17:dc:2d:c2:95:3d:28:ea:0f:e4:81:a4:ec:60:4f:37:a0:
df:2b:ac:9e:3e:d1:bc:cf:a7:6d:84:2f:26:56:62:21:ca:ab:
dc:e9:91:9b:fc:e3:4d:aa:de:22:71:c7:7d:c9:40:05:1a:e4:
92:a4:37:89:78:e9:75:8c:71:02:7f:db:90:2c:b9:af:16:42:
6b:d1:4b:de:e8:df:04:29:33:65:4a:94:0c:cb:11:4b:70:13:
44:9b:b6:8a:81:ea:f5:93:1a:88:b1:57:ba:aa:85:47:ba:78:
98:6a:24:7f:fe:89:9d:47:4e:a1:a4:b3:3e:9a:a5:9d:8b:8f:
82:50:e8:bb:db:e0:f4:10:1a:21:36:fc:02:47:d7:74:09:0d:
8d:86:95:ed:c7:4a:5f:65:85:78:53:5f:91:d5:fe:2d:8b:fb:
3c:9a:e8:51:2b:29:f6:be:6f:80:cd:60:70:f3:9d:b4:e5:ff:
79:a6:ff:2b:8a:a9:7a:03:30:bf:15:cd:d0:70:59:18:97:7f:
6e:e4:99:06:1f:6f:4a:ef:1e:59:c0:0b:34:72:1f:c2:e2:b0:
1f:a4:b5:b2:4b:2e:a0:67:64:ba:21:12:43:60:45:fd:27:96:
b0:82:eb:ab:cb:6e:46:be:26:3d:39:3a:0f:b6:b9:ff:c0:0f:
f5:cd:24:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:07 2025 by rpki-client