Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/GMnz3z9nrgbgP0ppZKUjHaDtXyE.roa
File: GMnz3z9nrgbgP0ppZKUjHaDtXyE.roa (raw, json)
Hash identifier: LxAEvoJTMfyFREvhgYObD8aUTHjiu1gGB5tCs2IQyFI=
Subject key identifier: 18:C9:F3:DF:3F:67:AE:06:E0:3F:4A:69:64:A5:23:1D:A0:ED:5F:21
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0198C66ACC35272F37DE924289E3201E1B2E
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/GMnz3z9nrgbgP0ppZKUjHaDtXyE.roa
Signing time: Wed 20 Aug 2025 07:39:04 +0000
ROA not before: Wed 20 Aug 2025 07:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 77.90.135.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:6a:cc:35:27:2f:37:de:92:42:89:e3:20:1e:1b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 20 07:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18c9f3df3f67ae06e03f4a6964a5231da0ed5f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:c9:46:0b:b5:74:b8:f0:d2:6f:75:7b:b3:
7a:19:ae:05:a9:b9:34:f2:49:24:77:de:dc:d9:de:
cc:b0:7a:f8:d3:38:4c:00:b0:6f:5c:9c:68:eb:33:
d1:35:ba:6e:e1:5a:5e:0b:88:dd:89:0d:2c:03:17:
20:d0:93:70:d3:de:1c:69:fb:32:f7:d1:24:dc:c1:
26:ef:95:79:bb:f9:b6:01:ac:51:5d:b8:e9:4b:cc:
12:bf:01:c7:5a:8a:85:6c:26:4a:11:53:d6:11:0c:
08:95:2c:01:b7:ac:25:0a:ae:0a:7e:1b:2d:0c:37:
73:a9:93:44:63:a8:26:b5:fc:2e:f8:82:55:12:90:
ad:eb:29:fa:94:0b:cf:f1:2f:49:9e:e9:fc:3d:a4:
b0:35:a2:cb:7f:0b:4a:f9:fe:59:93:e5:73:aa:87:
83:41:d8:c8:0e:d8:b1:2c:0c:ee:13:5a:ce:44:9e:
9b:f9:e5:be:0d:41:ca:34:bd:3b:68:e5:da:a2:fb:
5e:c5:9a:13:c5:a3:2b:c2:c3:4d:95:78:fd:ed:35:
21:19:f7:8e:c3:f2:fa:31:79:47:1a:ff:df:50:45:
fc:6a:c2:4c:fe:61:be:2f:73:09:9a:4e:4f:db:b0:
fd:37:89:fd:7e:73:5a:ab:bb:98:82:50:c8:c4:60:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C9:F3:DF:3F:67:AE:06:E0:3F:4A:69:64:A5:23:1D:A0:ED:5F:21
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/GMnz3z9nrgbgP0ppZKUjHaDtXyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.135.0/24
77.90.153.0/24
185.230.13.0/24
185.230.15.0/24
213.209.129.0/24
213.209.143.0/24
213.209.150.0/24
213.209.156.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:6a:47:65:74:8d:f1:a7:23:a9:cf:5a:1f:be:ea:fb:77:6a:
93:a9:88:e4:f4:de:84:70:3c:b3:00:a8:2f:76:43:ec:13:b7:
47:a3:9b:43:0f:cf:33:f4:c0:73:9e:9e:3f:0f:31:59:8c:7d:
f1:4e:e0:f9:bf:d9:ee:38:95:7f:df:56:c1:ef:1b:76:91:3c:
ff:8f:14:c6:3c:ec:29:e0:db:9f:1c:09:74:7f:24:36:67:34:
35:26:c3:51:87:c2:32:8b:cc:52:38:e6:70:5d:c9:3d:86:87:
05:d2:45:97:5d:00:30:2e:08:19:b7:d8:99:63:8c:45:53:68:
5a:f5:a3:de:68:3d:af:3d:d2:fb:36:6b:66:16:46:18:00:f2:
1f:e6:1f:a4:39:15:1b:a2:28:6f:34:d9:54:ca:0f:ef:db:b0:
3d:f3:4d:69:41:99:a0:ef:03:63:89:58:a3:7f:e8:34:ec:47:
d4:bd:4e:ff:fe:b9:0d:45:1d:51:c2:c9:30:44:c9:1c:74:8b:
1e:a6:8c:69:66:61:f6:ae:9e:85:76:23:fb:03:ad:43:bc:f0:
66:7e:0d:10:4c:8b:c9:6e:31:1a:2e:c8:e6:80:52:2c:e0:6a:
ad:35:38:e0:62:8d:dc:17:9d:54:c3:e9:a0:50:37:3a:26:fe:
e0:8f:21:01
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZjGasw1Jy833pJCieMgHhsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwODIwMDczOTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGM5ZjNkZjNmNjdhZTA2ZTAzZjRhNjk2NGE1MjMxZGEwZWQ1ZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzubJRgu1dLjw0m91e7N6Ga4Fqbk0
8kkkd97c2d7MsHr40zhMALBvXJxo6zPRNbpu4VpeC4jdiQ0sAxcg0JNw094cafsy
99Ek3MEm75V5u/m2AaxRXbjpS8wSvwHHWoqFbCZKEVPWEQwIlSwBt6wlCq4Kfhst
DDdzqZNEY6gmtfwu+IJVEpCt6yn6lAvP8S9Jnun8PaSwNaLLfwtK+f5Zk+VzqoeD
QdjIDtixLAzuE1rORJ6b+eW+DUHKNL07aOXaovtexZoTxaMrwsNNlXj97TUhGfeO
w/L6MXlHGv/fUEX8asJM/mG+L3MJmk5P27D9N4n9fnNaq7uYglDIxGDDrwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFBjJ898/Z64G4D9KaWSlIx2g7V8hMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvR01uejN6OW5yZ2JnUDBwcFpLVWpIYUR0WHlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQATVqHAwQA
TVqZAwQAueYNAwQAueYPAwQA1dGBAwQA1dGPAwQA1dGWAwQB1dGcMA0GCSqGSIb3
DQEBCwUAA4IBAQAsakdldI3xpyOpz1ofvur7d2qTqYjk9N6EcDyzAKgvdkPsE7dH
o5tDD88z9MBznp4/DzFZjH3xTuD5v9nuOJV/31bB7xt2kTz/jxTGPOwp4NufHAl0
fyQ2ZzQ1JsNRh8Iyi8xSOOZwXck9hocF0kWXXQAwLggZt9iZY4xFU2ha9aPeaD2v
PdL7NmtmFkYYAPIf5h+kORUboihvNNlUyg/v27A9801pQZmg7wNjiVijf+g07EfU
vU7//rkNRR1RwskwRMkcdIsepoxpZmH2rp6FdiP7A61DvPBmfg0QTIvJbjEaLsjm
gFIs4GqtNTjgYo3cF51Uw+mgUDc6Jv7gjyEB
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:18 2025 by rpki-client