Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/dkGowCxyAk57tMP-82kGQeDdynY.roa
File: dkGowCxyAk57tMP-82kGQeDdynY.roa (raw, json)
Hash identifier: Vdu4x0hDwdG5RaDwCyJZJseIjrU0RN3jHw1tXALp/yQ=
Subject key identifier: 76:41:A8:C0:2C:72:02:4E:7B:B4:C3:FE:F3:69:06:41:E0:DD:CA:76
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 01985A43C1080D96F8C1E08FA21A9D7DFB42
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/dkGowCxyAk57tMP-82kGQeDdynY.roa
Signing time: Wed 30 Jul 2025 07:37:26 +0000
ROA not before: Wed 30 Jul 2025 07:37:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205906
IP address blocks: 78.109.225.0/24 maxlen: 24
78.109.226.0/24 maxlen: 24
78.109.227.0/24 maxlen: 24
78.109.228.0/24 maxlen: 24
78.109.229.0/24 maxlen: 24
78.109.230.0/24 maxlen: 24
78.109.231.0/24 maxlen: 24
78.109.232.0/24 maxlen: 24
78.109.239.0/24 maxlen: 24
185.52.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:43:c1:08:0d:96:f8:c1:e0:8f:a2:1a:9d:7d:fb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jul 30 07:37:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7641a8c02c72024e7bb4c3fef3690641e0ddca76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:17:e2:f4:43:e5:9c:50:0c:98:ca:5e:0f:
4c:e6:88:52:7f:2d:74:f3:34:db:b4:89:86:32:46:
2f:3d:06:aa:48:f1:cf:86:ca:aa:f0:97:15:2a:96:
63:0e:44:24:b6:85:25:26:e1:ad:78:d9:e8:ea:eb:
92:c8:e2:16:d4:7d:f6:aa:ff:2e:49:a1:da:4c:9b:
aa:26:15:af:65:8d:28:29:d2:4f:71:f5:8a:0a:71:
be:2b:ef:3a:4b:69:5f:e9:e7:53:75:f6:a8:e1:e0:
30:92:c8:1e:cf:72:7c:68:12:2b:bf:73:71:ed:54:
19:69:87:0d:77:55:71:96:fa:11:b4:37:8a:46:07:
a9:94:12:0c:f4:ee:ce:70:8d:b3:41:29:4d:45:70:
0d:c1:ca:13:e2:51:6c:94:75:25:01:cb:72:7f:2f:
af:23:6a:35:28:2c:77:8d:0d:4a:8a:0b:14:32:95:
d4:25:77:4c:8b:02:89:b8:36:76:23:2f:c3:e1:b3:
7c:74:8d:2e:f8:27:cb:b6:07:6b:b8:15:7b:2e:d9:
e5:57:d5:71:1c:c1:83:48:4e:2a:91:3b:b6:24:c1:
5d:d7:d2:aa:60:bd:02:a0:61:23:3c:f4:b3:94:4f:
51:a0:ed:11:b2:e4:a0:2a:9c:34:c0:43:75:d4:90:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:A8:C0:2C:72:02:4E:7B:B4:C3:FE:F3:69:06:41:E0:DD:CA:76
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/dkGowCxyAk57tMP-82kGQeDdynY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.225.0-78.109.232.255
78.109.239.0/24
185.52.103.0/24
Signature Algorithm: sha256WithRSAEncryption
27:04:8c:8a:f7:d7:f5:07:bd:59:b3:55:cd:a8:6a:36:e7:fa:
75:3a:56:d1:67:dd:36:3e:ab:55:92:31:6a:06:57:1e:07:c0:
f6:5d:6a:68:21:be:59:2a:e1:c3:52:a4:4a:b3:72:12:92:34:
c9:04:5d:18:db:bd:67:09:14:64:11:f3:14:7e:0e:50:08:46:
5e:4f:94:f3:cc:2d:56:be:59:b3:f7:e0:4c:cd:a8:79:33:c1:
f0:d0:d4:b6:a6:42:ec:ce:7f:b1:51:99:20:4d:2e:79:74:21:
03:8c:2d:dd:4c:7e:ef:0f:06:b5:85:8e:de:23:f5:e4:13:ac:
9c:fa:6f:2a:ab:32:40:f4:fb:e8:11:e8:dc:77:a0:8d:fa:6e:
d6:da:22:75:a1:dc:2a:63:de:f7:b8:21:f6:91:fb:2a:cc:e3:
1e:c8:5b:b6:a4:7f:67:dc:34:68:74:e5:6e:21:3c:4c:0e:30:
f3:d5:f6:67:2d:ee:39:18:c6:a9:35:1e:f9:e0:dc:f9:f5:2a:
57:3a:f7:1d:54:ba:6b:21:d3:69:29:9c:1f:0e:72:ae:cf:b0:
ad:ba:e8:71:f1:a4:c3:72:96:bb:53:bf:4d:cf:3e:be:98:4d:
7e:2d:9e:8b:d6:81:ff:05:bd:d8:39:90:d2:50:8a:19:4e:31:
67:7f:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:57:44 2025 by rpki-client