Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/GyYIBRSp5zszM0sn8Cw7PizSGMQ.roa
File: GyYIBRSp5zszM0sn8Cw7PizSGMQ.roa (raw, json)
Hash identifier: 3igY0zQ0WL7LlL5J0bdfiTr3fish/KcTeQyIyR5FJDc=
Subject key identifier: 1B:26:08:05:14:A9:E7:3B:33:33:4B:27:F0:2C:3B:3E:2C:D2:18:C4
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019A3FE1F08C93E24A9589A1CA6648FB85CC
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/GyYIBRSp5zszM0sn8Cw7PizSGMQ.roa
Signing time: Sat 01 Nov 2025 14:46:03 +0000
ROA not before: Sat 01 Nov 2025 14:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 95.155.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:e1:f0:8c:93:e2:4a:95:89:a1:ca:66:48:fb:85:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Nov 1 14:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b26080514a9e73b33334b27f02c3b3e2cd218c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:33:c6:a4:3a:29:0e:ec:12:9b:d2:a7:be:
2b:77:cb:f0:e4:aa:89:b0:dd:ea:6e:a5:54:c2:cc:
fc:c0:f2:7e:22:e8:eb:c5:af:25:2e:33:ed:00:96:
5f:2d:60:ea:63:de:6c:af:2d:b0:1a:94:11:a4:2e:
93:e8:f8:ac:ed:98:69:ae:35:c0:27:cf:a8:a7:85:
0f:1a:74:18:2f:78:19:b7:83:d9:78:f2:e3:71:d3:
f5:37:a6:9f:47:d5:96:74:50:13:11:7f:4b:d3:8f:
43:97:01:e0:bc:dc:32:58:87:3c:3c:d1:79:41:f7:
8d:bf:3f:e4:57:72:ed:b8:e3:1e:8d:43:90:56:3e:
e4:da:bb:a4:31:02:dc:06:99:cd:39:5c:32:94:41:
ed:de:be:55:20:bf:92:c2:72:e4:26:d1:4d:c4:34:
fa:53:b7:7d:d7:e9:a7:b7:20:bb:71:b0:1a:58:20:
e8:e5:21:4c:25:68:51:33:50:87:3c:53:aa:68:cd:
cc:c1:7e:cf:9e:d5:56:2c:2f:45:48:eb:44:a4:50:
87:01:c9:b7:3d:39:a1:e8:72:ae:49:e1:88:1e:f4:
c0:42:69:f8:03:10:5e:c7:8f:19:9f:2d:b7:b0:d7:
21:1a:22:00:b9:6a:4f:7e:76:d6:7e:2f:3f:1f:a8:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:26:08:05:14:A9:E7:3B:33:33:4B:27:F0:2C:3B:3E:2C:D2:18:C4
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/GyYIBRSp5zszM0sn8Cw7PizSGMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.157.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2e:e4:b8:b2:8f:e4:bf:c2:e2:2f:8c:c5:58:e4:fa:58:b4:
d9:16:df:74:f6:f4:e6:8e:2d:92:f4:32:da:de:8c:1a:2d:b9:
ab:df:ab:e9:88:09:93:90:b6:7b:9f:dc:6c:a1:4b:18:98:15:
44:ca:3d:eb:6e:83:05:c3:2f:93:9b:57:8c:3c:64:93:23:73:
a6:f6:1b:d5:47:bd:94:3d:b9:47:7b:0a:b2:4e:09:c3:1c:e5:
55:df:b0:77:65:73:28:6d:2f:79:69:70:77:1c:f5:23:be:34:
47:85:1b:fc:cc:81:14:da:f1:00:40:22:d0:5e:71:22:1d:5d:
0e:7f:8e:7c:a2:5b:87:5f:df:c9:ae:59:d3:64:93:07:62:a5:
e2:42:1f:5d:67:ea:01:8a:0a:eb:8c:86:ee:ab:55:82:d7:fa:
94:25:0e:6a:69:7e:bb:1a:88:71:aa:68:6f:5c:24:48:3f:06:
f3:0e:ff:ca:06:ef:7f:12:77:c5:bc:f7:ca:13:43:58:33:ec:
96:fc:b1:cc:b9:97:07:0b:21:44:70:06:c9:7e:6b:6b:fd:17:
4c:03:d4:af:b1:c0:dd:e2:cd:51:2a:cd:fc:91:b6:57:4e:45:
18:d3:8c:d9:18:05:71:5e:58:54:87:20:d6:ef:8d:91:c2:83:
ce:12:96:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:37:45 2025 by rpki-client