Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/gMzs6rirQQRZAjvshqXfjLlaNno.roa
File: gMzs6rirQQRZAjvshqXfjLlaNno.roa (raw, json)
Hash identifier: iunV7Ujyat6852tDhXRhK089VOiQcDUDyu6UKbazRYM=
Subject key identifier: 80:CC:EC:EA:B8:AB:41:04:59:02:3B:EC:86:A5:DF:8C:B9:5A:36:7A
Certificate issuer: /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial: 019779C27A2D524BC3EC8416D2FDE096E210
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/gMzs6rirQQRZAjvshqXfjLlaNno.roa
Signing time: Mon 16 Jun 2025 17:21:17 +0000
ROA not before: Mon 16 Jun 2025 17:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8902
IP address blocks: 31.25.160.0/21 maxlen: 21
80.76.112.0/20 maxlen: 20
185.27.12.0/22 maxlen: 22
194.105.160.0/19 maxlen: 19
2a00:1670::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:c2:7a:2d:52:4b:c3:ec:84:16:d2:fd:e0:96:e2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Validity
Not Before: Jun 16 17:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80cceceab8ab410459023bec86a5df8cb95a367a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:18:4e:d5:31:35:53:09:6a:4c:86:47:84:
19:db:6e:32:5a:d7:eb:40:53:85:1d:a7:89:4d:eb:
0d:6f:c6:aa:49:e4:ed:0e:6a:6b:9d:cc:7f:cc:30:
3b:0c:da:e7:59:61:11:d3:5b:1b:46:28:c5:0a:6a:
f6:33:83:59:29:62:ac:10:85:eb:ba:0b:a8:b1:c3:
9e:27:6f:d1:ce:80:74:ea:af:78:ec:f5:b9:17:39:
c6:85:28:2d:05:40:e3:ad:f2:d5:a5:2d:3b:0a:33:
26:a1:9c:f8:3c:62:64:b3:37:d3:a5:75:93:fd:10:
ef:73:e4:c2:3c:f5:c7:52:02:95:3d:4b:b9:5c:81:
e3:85:be:96:89:07:6b:39:fa:f4:ba:45:cc:42:ce:
02:05:dd:31:dc:3b:1e:46:af:08:01:07:3a:93:c0:
2e:18:81:50:69:86:c3:56:7f:06:34:94:d5:c4:11:
08:e6:9e:de:9e:3e:1c:19:99:9d:d2:90:df:22:6d:
35:f1:f7:ec:0e:ee:fa:5d:92:e5:9b:99:80:44:37:
b5:37:b0:ee:30:31:cc:f0:ab:fd:c2:05:d7:07:b5:
f9:c5:a3:64:64:f7:71:1c:2a:53:16:ce:bb:7b:86:
cd:8e:36:d0:61:11:34:ed:78:14:10:41:e8:50:79:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CC:EC:EA:B8:AB:41:04:59:02:3B:EC:86:A5:DF:8C:B9:5A:36:7A
X509v3 Authority Key Identifier:
keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/gMzs6rirQQRZAjvshqXfjLlaNno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.160.0/21
80.76.112.0/20
185.27.12.0/22
194.105.160.0/19
IPv6:
2a00:1670::/32
Signature Algorithm: sha256WithRSAEncryption
aa:63:89:56:4a:56:1d:c0:8d:07:21:86:88:f7:0c:c2:3e:e3:
49:43:e6:15:4f:dd:fd:47:79:4e:87:4f:53:f3:03:84:41:bb:
73:14:71:30:9c:5c:29:f1:81:68:0d:5a:41:6b:ae:b6:86:42:
04:ab:7f:ca:33:b9:15:4e:36:64:b3:3a:86:6a:61:5b:22:05:
e2:70:22:57:a3:17:6d:64:d1:cd:be:a0:91:9d:1b:fa:ed:44:
5a:a7:1b:8e:09:8a:df:25:a4:86:86:41:4f:28:1d:e9:78:4b:
90:a4:ac:42:aa:45:fe:f7:70:e9:3a:c5:5d:b0:27:99:e3:49:
20:45:b5:21:27:38:b2:17:05:a4:08:bb:5c:30:60:70:64:a2:
06:8e:3c:7a:e7:b5:96:dd:dd:e9:93:05:ca:bc:e3:29:e8:87:
2a:95:73:ac:57:ea:8a:90:05:e9:a4:25:9c:32:b0:d2:83:c3:
ec:b0:ed:70:62:4b:43:9c:a3:73:e0:0c:fe:33:71:e5:c8:63:
63:6d:91:d2:27:64:43:67:3a:74:50:ed:cd:1d:12:7b:b7:d4:
35:49:e8:68:ce:da:25:15:cd:a6:11:bf:37:99:d1:61:06:d1:
87:05:8f:93:53:fd:7a:5c:32:18:2a:9c:04:eb:bf:e7:c4:f8:
1e:30:63:84
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZd5wnotUkvD7IQW0v3gluIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZTYyMjU2NDQ4NDY0OWE1YTY1N2I0NWM5ZDNiYjMwYzc4
OWEzZTQwHhcNMjUwNjE2MTcyMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGNjZWNlYWI4YWI0MTA0NTkwMjNiZWM4NmE1ZGY4Y2I5NWEzNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GsYTtUxNVMJakyGR4QZ224yWtfr
QFOFHaeJTesNb8aqSeTtDmprncx/zDA7DNrnWWER01sbRijFCmr2M4NZKWKsEIXr
uguoscOeJ2/RzoB06q947PW5FznGhSgtBUDjrfLVpS07CjMmoZz4PGJkszfTpXWT
/RDvc+TCPPXHUgKVPUu5XIHjhb6WiQdrOfr0ukXMQs4CBd0x3DseRq8IAQc6k8Au
GIFQaYbDVn8GNJTVxBEI5p7enj4cGZmd0pDfIm018ffsDu76XZLlm5mARDe1N7Du
MDHM8Kv9wgXXB7X5xaNkZPdxHCpTFs67e4bNjjbQYRE07XgUEEHoUHlNowIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFIDM7Oq4q0EEWQI77Ial34y5WjZ6MB8GA1UdIwQY
MBaAFAHmIlZEhGSaWmV7RcnTuzDHiaPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMmYyMDYtMjE5Zi00NTk5LThlMjIt
NzIyNjE0Y2VjYjA5LzEvZ016czZyaXJRUVJaQWp2c2hxWGZqTGxhTm5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jMmYyMDYtMjE5Zi00NTk5LThlMjItNzIyNjE0Y2VjYjA5
LzEvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDHxmgAwQE
UExwAwQCuRsMAwQFwmmgMA0EAgACMAcDBQAqABZwMA0GCSqGSIb3DQEBCwUAA4IB
AQCqY4lWSlYdwI0HIYaI9wzCPuNJQ+YVT939R3lOh09T8wOEQbtzFHEwnFwp8YFo
DVpBa662hkIEq3/KM7kVTjZkszqGamFbIgXicCJXoxdtZNHNvqCRnRv67URapxuO
CYrfJaSGhkFPKB3peEuQpKxCqkX+93DpOsVdsCeZ40kgRbUhJziyFwWkCLtcMGBw
ZKIGjjx657WW3d3pkwXKvOMp6IcqlXOsV+qKkAXppCWcMrDSg8PssO1wYktDnKNz
4Az+M3HlyGNjbZHSJ2RDZzp0UO3NHRJ7t9Q1SehoztolFc2mEb83mdFhBtGHBY+T
U/16XDIYKpwE67/nxPgeMGOE
-----END CERTIFICATE-----
Generated at Thu Jul 3 02:47:56 2025 by rpki-client