Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/gGRK0X3kC0s3LuHGZCHa-rVo2Wk.roa
File: gGRK0X3kC0s3LuHGZCHa-rVo2Wk.roa (raw, json)
Hash identifier: wmCf2vHKgmQUz9n+Y0vqzCgcNZZVl9oSp5p8NfbJ984=
Subject key identifier: 80:64:4A:D1:7D:E4:0B:4B:37:2E:E1:C6:64:21:DA:FA:B5:68:D9:69
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 01997B428F4665526C99351CF1C0CC02C1D5
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/gGRK0X3kC0s3LuHGZCHa-rVo2Wk.roa
Signing time: Wed 24 Sep 2025 10:26:23 +0000
ROA not before: Wed 24 Sep 2025 10:26:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209942
IP address blocks: 109.104.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:42:8f:46:65:52:6c:99:35:1c:f1:c0:cc:02:c1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Sep 24 10:26:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80644ad17de40b4b372ee1c66421dafab568d969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:40:c6:6d:5a:4c:b1:2f:9d:5a:59:aa:8b:
4e:16:d3:8e:84:c8:ea:38:d0:98:70:c0:ab:2c:f2:
2c:26:a9:38:0c:57:bd:eb:c3:eb:a5:28:62:f0:e1:
15:a1:ce:21:38:ee:d8:23:ff:83:db:86:85:68:fb:
a4:ee:5f:40:3e:b5:49:b7:d3:51:fc:fa:6c:3f:c2:
aa:97:fe:ae:34:02:42:9f:e9:31:eb:fa:85:51:e9:
03:8a:2d:3e:1e:cb:20:46:f7:ce:04:2c:f6:d0:5a:
ea:b9:87:66:37:ee:77:1f:d0:6b:42:0f:e0:90:ae:
37:47:0f:a5:26:3e:4e:1b:3e:7d:d5:f5:a1:3e:4f:
77:85:d9:f3:33:be:16:a7:07:7d:a0:22:2d:27:60:
ad:c3:b9:29:5b:cc:13:ac:00:c1:10:71:34:5a:b3:
be:58:2b:84:36:d4:bd:0d:2e:97:d3:8c:a4:10:7e:
c9:a6:8f:c8:87:ef:fc:9d:b3:49:b1:f2:27:71:cb:
f0:99:3a:23:62:98:05:87:3f:01:47:1e:0c:83:07:
e6:6e:82:67:07:52:9c:17:d2:47:be:3d:cf:4f:14:
f7:d6:04:dc:fa:4d:26:90:c1:16:ea:4a:09:59:2b:
83:bb:ee:e4:22:c9:71:79:61:5b:00:e1:cf:fc:d9:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:4A:D1:7D:E4:0B:4B:37:2E:E1:C6:64:21:DA:FA:B5:68:D9:69
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/gGRK0X3kC0s3LuHGZCHa-rVo2Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:91:4f:b5:23:a1:47:b4:27:44:62:12:21:e4:d0:1c:ef:36:
61:0d:ad:fc:8b:4d:c2:8c:87:b7:6d:af:79:70:71:72:dd:c7:
d2:34:53:7d:17:46:98:a4:5c:ba:71:a8:a8:81:9c:02:a9:69:
d1:d9:2f:1a:ee:7c:57:4d:36:60:44:03:5f:a6:36:bf:f7:e1:
e0:fd:a1:19:ca:83:20:1d:7a:86:88:cb:43:9f:fa:e0:be:51:
86:6e:6d:e0:27:a5:a3:19:cc:6c:a5:76:f9:76:81:c1:83:8d:
85:0d:a1:6d:75:ae:ea:b1:a5:c8:6f:bd:bf:30:30:4b:6d:f2:
07:96:52:ff:6f:72:f2:d2:0f:a6:b1:aa:69:72:9f:37:da:59:
4d:c1:13:b2:ab:4f:49:ba:03:36:3e:4f:05:f7:ab:fd:99:3f:
cc:91:c0:4f:5d:81:18:f7:94:c1:31:86:71:84:73:f4:d0:cb:
03:9d:f2:21:0e:80:80:ec:a6:b5:e9:0e:0d:91:30:aa:cb:94:
c3:1b:45:d5:e7:73:9e:3e:ca:52:30:94:65:e4:d8:2f:5d:c8:
bf:70:79:74:dc:8b:1f:f9:14:1e:b2:fa:b9:ef:a9:3d:41:0b:
1b:c4:0c:0e:c5:92:e1:8f:01:54:59:5a:da:3f:b0:ef:cd:f4:
ab:e3:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:36 2025 by rpki-client