Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Gp_vvyW3g_wPOsfnf_o4ZegcZ-g.roa
File: Gp_vvyW3g_wPOsfnf_o4ZegcZ-g.roa (raw, json)
Hash identifier: j30AnVUmSQzV3/2AX0XZMXs9mpdmLkgxp+nkztMwoYQ=
Subject key identifier: 1A:9F:EF:BF:25:B7:83:FC:0F:3A:C7:E7:7F:FA:38:65:E8:1C:67:E8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0198662D13D35CD97B5F5E4B4581016AE636
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Gp_vvyW3g_wPOsfnf_o4ZegcZ-g.roa
Signing time: Fri 01 Aug 2025 15:08:06 +0000
ROA not before: Fri 01 Aug 2025 15:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 2a0e:d600::/32 maxlen: 32
2a0e:d604:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:2d:13:d3:5c:d9:7b:5f:5e:4b:45:81:01:6a:e6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 1 15:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a9fefbf25b783fc0f3ac7e77ffa3865e81c67e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:cb:f4:d1:75:5d:7c:d3:ad:a3:ba:46:41:
36:bf:28:04:b8:e9:64:6d:15:df:06:23:92:84:23:
b3:17:f7:d0:f7:be:c6:9d:18:a4:b6:69:f0:c7:f4:
07:d7:93:9c:76:2e:c2:f2:c2:9f:39:e7:e0:74:b9:
5b:a4:7e:dd:3f:da:05:6b:e1:69:0b:86:ac:ca:f8:
69:cd:53:0e:8c:4c:04:09:5d:88:60:5c:5d:7a:08:
91:b4:2b:6e:35:10:68:5c:bd:e1:51:3f:81:3c:28:
e5:b1:0d:81:b5:0e:17:f5:94:59:52:30:b3:73:73:
fd:cb:07:3c:be:3d:a7:0e:98:fa:62:0e:c0:b3:d2:
18:d4:20:7e:1c:83:e5:1b:84:3d:2e:8a:6b:b3:09:
c5:6e:f2:e2:2d:3f:80:7c:66:d5:66:9b:a6:51:b2:
bd:a4:04:e3:72:4d:f6:11:e8:2b:e5:8d:55:24:e8:
92:17:1c:17:91:22:6f:62:d0:0e:27:80:e0:53:a4:
30:15:65:de:e3:39:19:08:2d:5c:d7:fc:5a:99:65:
9b:0f:d6:12:62:33:af:e7:47:77:dc:30:13:d2:cc:
f3:7b:fd:8b:e0:db:4f:87:2c:a1:5f:26:fb:e4:25:
2f:ac:3d:68:9f:a6:40:bd:e6:03:61:42:90:dd:da:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9F:EF:BF:25:B7:83:FC:0F:3A:C7:E7:7F:FA:38:65:E8:1C:67:E8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Gp_vvyW3g_wPOsfnf_o4ZegcZ-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d600::/32
2a0e:d604:1::/48
Signature Algorithm: sha256WithRSAEncryption
47:f7:18:0f:fe:12:72:22:24:d0:f3:e1:7d:a0:df:4e:01:a8:
54:dc:a0:5f:8f:4f:7d:cc:95:23:fd:82:3a:b0:7b:76:dc:fa:
80:73:05:a6:41:44:82:9c:0e:16:a5:91:7b:da:99:6d:06:74:
45:8a:c0:87:e6:5b:2c:81:1a:e4:41:5d:d5:d9:b9:2a:6e:ea:
58:a1:21:33:87:e4:8d:d9:aa:b1:f5:7c:ca:c3:34:91:7a:2d:
ad:bb:4f:82:e5:4b:98:18:24:20:d0:92:16:f6:51:c8:19:a7:
60:25:c5:1a:89:28:8b:88:d8:2c:b3:f4:8c:75:e7:e4:55:b5:
51:9d:cd:e9:27:4f:95:fc:fe:34:7c:c6:54:98:2f:55:c3:3d:
da:ce:a1:cc:89:b7:c3:1e:0d:6b:bb:d7:f3:03:f6:db:f7:b1:
44:1a:41:34:02:73:62:8c:27:c9:f8:c4:66:85:5f:ea:82:22:
b9:36:b9:10:32:85:f2:30:21:48:31:0f:2b:53:17:9b:52:ba:
a7:ed:c6:78:8f:29:79:8b:d8:45:28:a3:07:55:69:55:15:61:
10:3e:76:3c:d6:df:90:8d:f6:0c:70:9d:59:f1:72:af:b0:21:
1d:63:a3:44:f9:30:2a:34:d4:b3:78:66:af:1e:c0:f3:ff:a3:
a9:82:63:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:54 2025 by rpki-client