Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GcHauJjVsoXqo6pNdhEyEakwMWE.roa
File: GcHauJjVsoXqo6pNdhEyEakwMWE.roa (raw, json)
Hash identifier: ja74ETS8sOtSUfqUrTLpztlh1e0hAbrNCszmFvio+UU=
Subject key identifier: 19:C1:DA:B8:98:D5:B2:85:EA:A3:AA:4D:76:11:32:11:A9:30:31:61
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01992E5B658A5660CF88AA72420BDF42E017
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GcHauJjVsoXqo6pNdhEyEakwMWE.roa
Signing time: Tue 09 Sep 2025 12:02:45 +0000
ROA not before: Tue 09 Sep 2025 12:02:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204872
IP address blocks: 195.216.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:5b:65:8a:56:60:cf:88:aa:72:42:0b:df:42:e0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 9 12:02:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19c1dab898d5b285eaa3aa4d76113211a9303161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:3f:d6:e0:08:b4:d8:90:0e:17:0f:77:75:
8f:56:d4:4e:97:1f:2d:cf:ff:80:ae:c9:e2:7b:6e:
32:34:86:69:4c:f8:d4:d4:86:64:be:a0:1b:33:9f:
58:67:01:d2:6a:94:45:19:69:53:cd:25:ed:62:e1:
2e:0c:cc:71:1c:c2:9c:c1:80:06:e3:92:c3:1a:d0:
1a:aa:02:b1:a7:2a:1e:fb:27:c7:fd:98:3b:88:01:
72:b4:ed:5a:4f:7e:8e:d3:e0:a1:c3:af:de:82:ea:
02:20:87:f0:bb:03:85:7f:3a:cd:8b:07:0c:03:a3:
25:b7:eb:db:08:68:1e:4f:44:6c:e3:e2:e3:4f:5a:
cf:6f:91:4b:6a:22:f3:09:19:a7:f3:5d:16:21:6c:
9f:7c:0b:32:01:71:7f:11:bf:43:7c:2d:24:eb:69:
61:10:ea:55:48:af:1d:b9:b5:8c:70:f5:6d:e0:ea:
37:57:d8:82:81:2d:15:ba:ae:b9:65:6a:0a:8c:d6:
ee:37:2f:3e:11:7f:d8:ed:d6:cc:cb:17:a6:b4:f3:
31:a7:69:8e:73:a7:13:27:68:af:77:27:4a:ad:bf:
d5:63:f9:04:9c:4f:d4:ec:55:82:7e:d9:c4:27:e7:
a3:ae:87:02:9b:85:88:ff:3d:80:6e:9a:01:5f:f2:
51:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C1:DA:B8:98:D5:B2:85:EA:A3:AA:4D:76:11:32:11:A9:30:31:61
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GcHauJjVsoXqo6pNdhEyEakwMWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.156.0/22
Signature Algorithm: sha256WithRSAEncryption
38:45:e3:12:07:cc:ac:53:44:c8:b9:2f:a4:49:03:ad:85:6b:
d3:e0:67:bc:78:f8:56:dc:51:d9:7b:3e:5c:7f:9e:b3:3b:28:
2b:fa:c5:8b:bf:34:4d:22:99:ff:2d:b8:3e:bf:a1:57:93:1c:
11:ba:21:c1:bf:e7:e0:60:40:28:3d:1c:b7:81:ee:49:40:bd:
60:3a:06:31:a0:69:ee:fa:74:c2:f7:db:82:14:9c:fb:3a:56:
0a:e3:e4:47:53:c9:01:8b:4a:da:71:35:b0:99:ce:d1:5d:6f:
ae:e9:76:4b:12:af:87:bc:85:7c:2f:df:06:38:8c:0e:0a:17:
c9:0a:d6:00:de:83:69:2a:a8:dc:c6:87:e4:4a:f9:34:d1:dc:
ce:c2:5b:81:22:67:5d:b8:3e:aa:a9:2a:de:bd:40:1e:ea:d7:
d4:38:65:fc:d5:fe:79:3d:c1:09:d4:da:23:1d:96:90:49:40:
31:4f:c6:b1:21:70:c7:c8:34:71:22:b7:d0:72:93:e4:a5:3f:
3c:b7:16:d7:73:b3:7e:8e:d7:7c:68:7e:d1:86:de:de:8f:54:
b4:e0:8e:e8:49:bc:f4:6b:89:f2:92:61:3c:71:0b:80:0c:44:
c5:05:17:b2:f4:55:08:09:17:56:9b:12:e7:54:b2:c8:f3:92:
9a:36:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:12 2025 by rpki-client