Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/gpSFuAfs-49fboUul0as1hNOe7s.roa
File: gpSFuAfs-49fboUul0as1hNOe7s.roa (raw, json)
Hash identifier: a1c1k2V4AvypPkcspZ9MdLob1wApcJ4k2MzGZWzvoow=
Subject key identifier: 82:94:85:B8:07:EC:FB:8F:5F:6E:85:2E:97:46:AC:D6:13:4E:7B:BB
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 0199CD887C7547613A1616CC3DB5130291DD
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/gpSFuAfs-49fboUul0as1hNOe7s.roa
Signing time: Fri 10 Oct 2025 09:51:38 +0000
ROA not before: Fri 10 Oct 2025 09:51:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47376
IP address blocks: 91.192.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:88:7c:75:47:61:3a:16:16:cc:3d:b5:13:02:91:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Oct 10 09:51:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=829485b807ecfb8f5f6e852e9746acd6134e7bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:0a:3e:95:64:67:c9:5f:ed:09:58:97:63:
36:b0:34:03:ec:d1:9e:ad:a7:fe:7f:03:8e:ee:47:
1a:77:af:8a:03:06:e6:b5:f1:5b:d9:ef:b4:1c:e5:
cc:25:88:d6:d2:50:80:97:71:f8:54:89:74:7a:21:
2e:8d:ac:55:3f:07:29:a8:f2:8b:5a:d1:47:4a:55:
a6:0d:c3:5d:b8:10:1f:39:3b:42:3f:a6:c4:56:06:
76:1a:59:9c:1b:da:ac:9c:46:84:57:0b:a0:84:6b:
20:30:b7:83:4d:4f:69:d2:39:0b:e0:72:5c:3c:c3:
e5:9c:4b:d8:75:5b:05:45:08:50:f6:33:94:26:87:
ed:d8:9e:1d:be:b5:6e:5d:fa:6a:b2:cf:95:22:ad:
37:0a:28:f5:f5:5c:28:ef:f3:53:16:9f:86:7e:d4:
10:26:63:ea:dd:9b:73:6e:2b:13:88:7a:18:18:0b:
8b:29:91:2c:f3:07:66:03:a4:1f:52:a5:9f:f5:96:
30:84:fc:71:97:20:b7:84:d2:99:eb:85:e0:e4:00:
a4:d2:e0:d5:df:74:7d:00:c9:28:a9:c7:21:ee:72:
cd:18:db:72:6a:bf:db:ce:e3:da:42:cf:e4:ba:c2:
a2:26:48:c3:72:ba:01:58:9e:94:72:4e:b1:41:45:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:94:85:B8:07:EC:FB:8F:5F:6E:85:2E:97:46:AC:D6:13:4E:7B:BB
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/gpSFuAfs-49fboUul0as1hNOe7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.160.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:56:18:c3:f1:52:29:4d:ef:04:ff:6d:35:1f:61:d9:9f:7f:
75:92:a6:7a:fe:dd:47:f2:af:9b:28:f0:4c:df:2d:a1:cf:1b:
45:16:cd:ad:5d:33:78:6c:64:d1:51:03:d9:9e:de:b1:e8:95:
0f:8d:52:a6:62:de:5c:e9:de:20:67:61:a6:c6:86:e6:7a:30:
ce:64:69:4b:98:41:73:26:13:86:4b:92:a9:bd:cb:13:f2:a4:
5a:6f:36:39:ac:c9:a6:45:6d:c1:15:f5:ea:38:16:93:af:ec:
79:1c:cb:53:aa:ee:e7:bd:39:02:8c:0f:6e:30:b9:f1:eb:a3:
d5:6e:71:39:bf:45:ac:6b:77:ed:42:57:0a:f7:ad:ff:e1:a3:
4e:17:8f:34:3f:ec:e8:f7:da:a1:3b:a0:c8:dd:aa:72:11:b7:
5d:0b:4b:4d:81:df:39:b4:f2:cc:f7:5e:22:0a:b1:1b:02:4f:
c6:5d:6a:ad:54:1d:90:ca:72:19:35:63:83:89:68:23:1e:c7:
f6:63:3e:ec:f9:a7:9a:ea:ac:41:cc:ee:88:9a:92:9f:50:b8:
9c:2a:a0:32:cc:91:57:21:32:ee:05:42:e8:03:6c:f4:2c:5d:
cc:50:8a:04:b1:6c:ce:fb:69:23:8b:1f:ba:e4:35:50:7b:40:
8d:b8:7e:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnNiHx1R2E6FhbMPbUTApHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjhiZjlmMzA1NTI3NTIxNTA4Njk3ZTJlYWEzYmUxYzdh
MTg0NTQwHhcNMjUxMDEwMDk1MTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Mjk0ODViODA3ZWNmYjhmNWY2ZTg1MmU5NzQ2YWNkNjEzNGU3YmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyYKPpVkZ8lf7QlYl2M2sDQD7NGe
raf+fwOO7kcad6+KAwbmtfFb2e+0HOXMJYjW0lCAl3H4VIl0eiEujaxVPwcpqPKL
WtFHSlWmDcNduBAfOTtCP6bEVgZ2GlmcG9qsnEaEVwughGsgMLeDTU9p0jkL4HJc
PMPlnEvYdVsFRQhQ9jOUJoft2J4dvrVuXfpqss+VIq03Cij19Vwo7/NTFp+GftQQ
JmPq3ZtzbisTiHoYGAuLKZEs8wdmA6QfUqWf9ZYwhPxxlyC3hNKZ64Xg5ACk0uDV
33R9AMkoqcch7nLNGNtyar/bzuPaQs/kusKiJkjDcroBWJ6Uck6xQUUNNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIKUhbgH7PuPX26FLpdGrNYTTnu7MB8GA1UdIwQY
MBaAFJT4v58wVSdSFQhpfi6qO+HHoYRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDkt
YTdiODU0NjBmMzY2LzEvZ3BTRnVBZnMtNDlmYm9VdWwwYXMxaE5PZTdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDktYTdiODU0NjBmMzY2
LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8CgMA0G
CSqGSIb3DQEBCwUAA4IBAQAuVhjD8VIpTe8E/201H2HZn391kqZ6/t1H8q+bKPBM
3y2hzxtFFs2tXTN4bGTRUQPZnt6x6JUPjVKmYt5c6d4gZ2GmxobmejDOZGlLmEFz
JhOGS5KpvcsT8qRabzY5rMmmRW3BFfXqOBaTr+x5HMtTqu7nvTkCjA9uMLnx66PV
bnE5v0Wsa3ftQlcK963/4aNOF480P+zo99qhO6DI3apyEbddC0tNgd85tPLM914i
CrEbAk/GXWqtVB2QynIZNWODiWgjHsf2Yz7s+aea6qxBzO6ImpKfULicKqAyzJFX
ITLuBULoA2z0LF3MUIoEsWzO+2kjix+65DVQe0CNuH4F
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:36 2025 by rpki-client