Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GcmMri9gRdk6kfGs3DUPyxzpeJ0.roa
File: GcmMri9gRdk6kfGs3DUPyxzpeJ0.roa (raw, json)
Hash identifier: YkCfjU0I5kyk9pw3nIWZslVcKCiU7v2d7dJUT+K3nhM=
Subject key identifier: 19:C9:8C:AE:2F:60:45:D9:3A:91:F1:AC:DC:35:0F:CB:1C:E9:78:9D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0198CDF77A6B751EAD6CFD44699943DCDDD5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GcmMri9gRdk6kfGs3DUPyxzpeJ0.roa
Signing time: Thu 21 Aug 2025 18:50:04 +0000
ROA not before: Thu 21 Aug 2025 18:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6718
IP address blocks: 80.96.42.0/24 maxlen: 24
80.97.49.0/24 maxlen: 24
85.120.222.0/23 maxlen: 24
85.120.228.0/24 maxlen: 24
85.120.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:f7:7a:6b:75:1e:ad:6c:fd:44:69:99:43:dc:dd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 21 18:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19c98cae2f6045d93a91f1acdc350fcb1ce9789d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:11:9d:e8:d2:71:13:43:49:da:28:b9:20:
bf:6e:68:0f:85:4e:38:29:c5:2e:19:a0:4c:e4:e9:
7c:f0:39:f1:61:3c:fb:50:b3:c4:41:84:f8:fc:30:
b3:c2:b3:66:f9:33:90:01:df:bb:e5:90:27:94:b0:
39:ed:26:62:c3:0a:9a:d0:11:e0:ef:8e:fb:85:95:
66:44:cd:92:01:ac:e8:57:06:62:55:6a:5c:ba:c4:
bd:6b:44:33:27:0f:34:1f:ae:fa:66:7a:a3:2a:2e:
2a:1e:56:69:ff:58:a9:dd:5e:6e:7c:c4:e7:4b:60:
6b:98:50:c3:05:4f:64:a3:e1:9f:af:89:fe:69:01:
da:56:9d:c2:c3:f8:88:eb:ce:3a:b6:aa:36:f0:ea:
a2:f6:ef:e3:88:56:43:d2:96:88:c6:41:bb:3b:eb:
d6:bc:d8:ec:b6:f4:0e:48:67:68:0d:76:bd:44:a3:
68:56:58:82:bc:fe:f9:0e:b8:f5:7d:ac:8b:71:1a:
89:63:c3:d7:d9:0a:09:1d:47:33:9f:00:1a:6a:8b:
bd:69:bd:56:42:d3:c1:32:34:3c:a5:3b:1d:41:cf:
68:bc:90:f5:ea:51:77:4d:06:9d:03:4c:0a:0a:8f:
76:60:54:3f:08:fd:01:c4:75:e4:02:0e:7c:02:5a:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C9:8C:AE:2F:60:45:D9:3A:91:F1:AC:DC:35:0F:CB:1C:E9:78:9D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GcmMri9gRdk6kfGs3DUPyxzpeJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.42.0/24
80.97.49.0/24
85.120.222.0/23
85.120.228.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:df:a5:1d:3e:1e:b3:3f:d8:df:1a:a1:95:50:9f:ab:66:7b:
da:d6:7e:e0:87:f5:b3:ad:d9:b7:b6:5f:4e:ae:c9:fb:7f:b5:
9d:d8:b1:74:a2:e5:63:84:20:7c:4b:87:3b:1f:fb:b1:cc:37:
8c:82:70:fc:c7:6d:0c:fc:98:49:5a:4b:0c:e0:40:f4:cc:75:
f6:5f:0b:06:04:07:be:97:6b:6e:f8:12:a9:df:d3:8f:7d:b9:
f2:9d:84:07:5f:93:c8:4d:4f:fd:80:77:d4:44:13:84:9c:9c:
cd:b3:c0:44:ce:b2:dd:25:3f:3b:4c:74:6b:e2:60:41:a8:16:
1e:45:ed:15:fc:42:e4:59:49:12:a7:c1:61:fb:de:7a:8c:a3:
49:40:0b:50:d9:e1:f7:44:7e:7f:59:64:23:1c:64:77:b7:9f:
e7:e7:f6:79:36:39:df:8c:10:cd:f6:81:09:3c:26:77:bd:4f:
fe:e4:c9:0a:38:a8:86:da:41:32:9f:86:41:7a:54:62:ad:dd:
8b:c4:93:65:c9:67:7f:36:4a:b7:ae:72:8d:38:51:a0:5f:83:
d6:f2:f9:af:f1:bf:38:4d:48:5b:f0:f4:20:f4:7c:a1:1a:d2:
55:b7:f1:7c:4f:8a:4f:ef:3d:44:18:23:04:a8:a8:6f:ec:c2:
00:a9:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:19 2025 by rpki-client