Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gllOCfFsTQcemrLHRb-zV9gVmho.roa
File: gllOCfFsTQcemrLHRb-zV9gVmho.roa (raw, json)
Hash identifier: 9RzLnOVgAKNO/hUN6YGP19RfQVnk3/TqoRi+W8u/WJ8=
Subject key identifier: 82:59:4E:09:F1:6C:4D:07:1E:9A:B2:C7:45:BF:B3:57:D8:15:9A:1A
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0199C7CB5ED8FA81BDA1839DCE7F38A28B95
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gllOCfFsTQcemrLHRb-zV9gVmho.roa
Signing time: Thu 09 Oct 2025 07:06:57 +0000
ROA not before: Thu 09 Oct 2025 07:06:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151338
IP address blocks: 2a14:67c1:b600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:cb:5e:d8:fa:81:bd:a1:83:9d:ce:7f:38:a2:8b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Oct 9 07:06:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82594e09f16c4d071e9ab2c745bfb357d8159a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:ad:ca:55:12:fb:8e:74:cc:0e:87:27:fa:
92:8e:8d:5a:07:f0:1e:43:d5:c3:1f:e5:62:36:ba:
05:98:32:f4:ac:a5:80:e1:4d:6e:17:9e:06:4d:20:
e7:95:70:da:0a:27:5e:91:2c:c3:c4:6a:ae:ce:62:
28:8b:39:4a:8e:f0:eb:ed:cd:ad:cd:70:bf:45:af:
3b:1a:89:ab:37:f6:d3:3b:52:c6:ed:67:bb:44:82:
a5:05:df:0f:8d:8b:76:31:48:1d:0d:80:9f:24:66:
98:07:b8:ab:f0:ea:f8:69:96:4a:23:92:c3:fc:6d:
3e:30:0a:2b:2e:c9:f6:95:f0:e0:74:b1:96:ab:81:
48:29:51:5b:ab:49:77:62:3c:d1:30:2b:8e:10:0f:
76:f5:32:4d:26:ba:d8:63:13:38:45:11:50:d3:85:
e6:6e:0a:f4:5b:b6:5d:b0:f7:74:24:80:ad:3b:be:
87:28:35:7c:15:1d:b6:bf:b1:20:c1:ed:8d:1f:31:
88:1e:a5:e0:25:54:9f:8a:0b:35:c5:81:31:52:15:
5e:45:b1:3f:63:d2:9c:27:c4:cb:03:b9:15:76:dc:
78:8f:b4:2e:92:35:89:37:98:a5:f1:47:8f:93:11:
02:f0:23:4f:ff:59:72:83:49:14:65:c2:22:da:73:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:59:4E:09:F1:6C:4D:07:1E:9A:B2:C7:45:BF:B3:57:D8:15:9A:1A
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gllOCfFsTQcemrLHRb-zV9gVmho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:b600::/40
Signature Algorithm: sha256WithRSAEncryption
5a:72:d4:49:ef:5f:ed:06:98:3a:17:c7:8e:ed:d1:b4:75:5a:
38:94:8e:1f:3f:7e:5e:fa:bb:df:26:76:dc:86:66:8f:0c:5c:
e8:dd:36:1b:36:11:29:65:cb:38:e5:03:16:5b:07:c1:8f:3b:
45:bc:71:42:1c:b1:c9:bd:20:91:69:89:02:a4:62:8b:ad:c1:
aa:64:2f:7f:30:ad:43:f4:02:4c:1e:d7:22:2d:0f:df:19:88:
e2:11:2d:28:fa:12:c4:72:7e:9a:f6:c9:ed:66:1d:81:05:d8:
7b:26:15:7f:5f:ac:28:f0:39:13:5b:50:d8:41:91:8e:82:9a:
e5:a0:27:6f:5b:4e:60:6e:e6:6d:cb:95:25:78:27:5a:d6:10:
22:ea:8d:a9:88:f3:6d:50:2b:30:f1:b9:9a:54:09:01:5e:2d:
5e:c0:45:aa:c9:d4:66:5a:bc:a6:32:7e:81:a3:ed:80:18:d5:
e3:9e:49:75:5e:7a:3d:fe:24:3e:c7:3f:10:aa:8b:f1:4b:63:
f0:8d:01:83:a4:5c:cf:03:d5:91:06:a9:77:f8:d8:1f:73:17:
45:9a:86:d5:51:34:f0:d7:a3:47:19:f9:36:9a:44:03:fe:a3:
4f:7f:42:b7:a0:50:e4:6d:7f:ca:80:34:d0:a3:6c:13:a9:9b:
fa:86:bb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:27 2025 by rpki-client