Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1Gw_aH-mIHpOSB1DcUOmHd2Nw3Y.roa
File: 1Gw_aH-mIHpOSB1DcUOmHd2Nw3Y.roa (raw, json)
Hash identifier: bd5gP3xNJAlG/MoLZTpnW6ZBksR773fMq4F7wlYX+ZI=
Subject key identifier: D4:6C:3F:68:7F:A6:20:7A:4E:48:1D:43:71:43:A6:1D:DD:8D:C3:76
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198A2F77E6BC6CB055A670FC1CE2AF45FBA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1Gw_aH-mIHpOSB1DcUOmHd2Nw3Y.roa
Signing time: Wed 13 Aug 2025 10:26:25 +0000
ROA not before: Wed 13 Aug 2025 10:26:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213622
IP address blocks: 185.121.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:f7:7e:6b:c6:cb:05:5a:67:0f:c1:ce:2a:f4:5f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 13 10:26:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d46c3f687fa6207a4e481d437143a61ddd8dc376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:de:6e:a7:c5:86:e4:ee:82:13:76:47:04:
6e:81:8f:ec:85:3f:c7:ac:65:10:73:bf:55:44:d4:
81:11:b9:15:9e:fb:de:94:1a:25:4f:8a:d2:d5:ee:
72:32:63:e3:82:c4:d9:aa:0f:0c:33:18:35:d8:bc:
fc:d1:d2:38:56:ce:c0:bc:ed:65:b3:c6:50:9a:3c:
b0:90:db:82:20:73:b2:b3:cc:c0:85:e3:8e:8a:7c:
65:b8:eb:be:d3:29:8b:d7:bc:ef:bc:d8:f5:01:99:
ef:54:45:38:d1:34:4f:0d:d6:22:9c:80:f7:f7:98:
ca:59:04:ef:91:da:4c:37:77:ac:46:10:89:76:05:
45:c8:d8:f8:56:2c:bd:73:f6:60:e2:56:3b:2d:56:
56:aa:0d:27:ae:28:33:f2:c6:f0:02:8b:e9:bb:89:
98:5f:bd:79:90:be:6d:10:11:21:3d:ab:0a:38:3c:
ca:bf:3f:5e:7f:f6:0f:62:6f:c3:47:1c:50:a9:41:
f3:1f:7b:e3:f4:3b:55:82:9b:bc:11:da:3f:a5:87:
04:25:2f:39:ea:7e:31:d4:7b:c4:d7:8d:8c:d0:23:
7a:01:15:e4:60:d4:bd:48:e9:be:3f:4b:ba:81:72:
dc:ad:ed:36:8d:9f:7c:f6:74:ea:12:da:c5:d9:d3:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6C:3F:68:7F:A6:20:7A:4E:48:1D:43:71:43:A6:1D:DD:8D:C3:76
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1Gw_aH-mIHpOSB1DcUOmHd2Nw3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:09:96:f4:1c:ec:5d:83:07:7d:eb:21:8c:37:f5:d1:23:90:
69:84:a4:ea:73:e9:6d:0a:1a:59:b1:0e:f2:bf:83:09:8d:4e:
39:56:ec:64:23:04:8c:69:a4:69:8e:02:95:bd:18:a2:fd:ce:
c3:ed:c3:52:0c:61:5e:9b:84:a2:cb:de:f8:b9:df:4e:a2:2e:
b4:14:75:4d:e1:03:39:2a:be:c3:45:82:75:a6:67:bd:cf:0f:
cb:b2:5d:ec:3f:3d:4b:66:c8:25:35:2e:0a:23:4c:8e:ce:c9:
f2:e6:e3:fa:5c:ee:d1:4a:30:2e:39:5f:c2:7e:6d:49:c0:6f:
47:ec:58:05:45:bb:ed:04:68:bc:ba:72:ab:82:97:ab:ff:f8:
a9:d3:61:cb:50:fd:dd:1d:f7:97:aa:9f:2a:03:00:d1:d9:09:
bd:53:58:13:83:d0:25:7e:2a:d8:59:fe:b4:ad:57:47:03:d9:
93:cb:ae:c0:a6:f3:47:00:27:1c:72:a3:61:8a:b1:6d:81:36:
60:b3:27:59:b4:d9:bc:cb:eb:2e:7b:54:17:25:04:66:88:79:
f6:27:8e:7b:34:83:b3:36:9e:64:a6:64:69:f7:4c:48:79:e5:
dd:8e:82:77:a2:d7:b9:0a:0e:db:28:97:87:a7:87:bb:36:26:
e3:71:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:55:30 2025 by rpki-client