Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GnnIp68OyjkomRJSmGk0KhAnbNk.roa
File: GnnIp68OyjkomRJSmGk0KhAnbNk.roa (raw, json)
Hash identifier: YLCyFMimd93AKb2EizTplZaIodZra55JojG5jk0ITHY=
Subject key identifier: 1A:79:C8:A7:AF:0E:CA:39:28:99:12:52:98:69:34:2A:10:27:6C:D9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199D55D7E8024D1386A048C705E2ED32B1E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GnnIp68OyjkomRJSmGk0KhAnbNk.roa
Signing time: Sat 11 Oct 2025 22:21:38 +0000
ROA not before: Sat 11 Oct 2025 22:21:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397630
IP address blocks: 194.231.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d5:5d:7e:80:24:d1:38:6a:04:8c:70:5e:2e:d3:2b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 11 22:21:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a79c8a7af0eca39289912529869342a10276cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:a9:a0:81:02:81:39:67:48:95:96:21:a2:
b3:62:02:a5:2f:97:7a:98:58:42:f8:d8:81:06:63:
b9:9f:5b:ae:e3:85:34:de:4b:92:3b:f9:3e:b4:3b:
fd:57:71:35:f8:ac:6e:14:64:1f:de:0e:2b:74:56:
dc:b3:90:f5:ca:e9:9d:e1:9f:a6:e4:02:e2:15:71:
e9:55:65:b3:b6:dc:86:5c:f8:41:14:46:cc:a1:0c:
fc:be:6a:9d:7f:5e:d1:d5:fc:50:50:86:a6:fe:76:
16:d3:85:5b:35:a8:60:00:06:05:d5:b6:0b:4e:d6:
45:a4:85:23:7f:70:57:3c:8a:2d:96:52:91:1d:52:
4b:5e:a4:a6:28:5c:e4:fa:e1:a9:e3:eb:30:26:04:
9e:1f:38:96:4b:a0:66:76:73:35:85:48:28:a7:dc:
3b:ce:df:7d:cc:0b:9a:b3:68:f5:4f:aa:62:a8:4a:
c2:bd:12:86:ef:bc:d5:43:9e:26:3f:5d:1a:35:67:
0d:9d:48:58:18:05:10:89:3a:3b:30:d4:0e:31:f0:
bf:25:5f:d6:38:ba:95:f6:fa:14:40:34:37:34:5f:
38:6d:52:5d:be:32:b7:5f:cd:5c:df:44:60:24:5a:
be:11:27:08:e9:9a:fc:e8:55:b2:1b:dd:e9:8a:8f:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:79:C8:A7:AF:0E:CA:39:28:99:12:52:98:69:34:2A:10:27:6C:D9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GnnIp68OyjkomRJSmGk0KhAnbNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.155.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:7f:38:e0:4c:3c:e2:e6:55:e4:43:57:a2:79:05:c4:0e:46:
07:88:51:ee:43:9e:29:d2:fd:cc:b2:09:76:85:bd:7a:23:d1:
b8:66:2a:fd:77:bc:43:2e:53:19:43:74:3b:35:67:b4:89:bb:
10:09:be:5d:a6:16:a0:46:a6:83:01:54:79:67:9c:ca:75:4a:
86:cd:4f:6f:45:5f:08:9b:38:65:cc:57:9a:9c:70:45:72:10:
6f:04:43:43:29:e5:5b:a2:03:27:84:f2:c1:9f:64:9f:27:01:
b2:e5:46:db:fa:7f:9e:5d:88:91:44:2b:a7:ab:f2:59:25:72:
f4:d2:05:d0:8a:1e:ac:be:9f:85:33:78:d9:fe:c4:41:a7:e6:
4b:d5:27:07:74:cb:26:aa:dc:7b:44:94:67:3a:8b:a8:7e:16:
e9:a4:37:7a:86:06:4d:7e:11:41:41:ed:0b:e1:86:19:b4:07:
dd:c6:f0:d5:78:03:81:fc:ae:56:8f:b7:b9:56:99:f6:7b:4e:
eb:3e:03:fa:8c:13:a5:62:e7:83:bc:00:df:50:ac:b1:dd:5e:
45:c9:9c:4b:ed:1b:4f:c4:b9:3d:d0:11:ac:cb:6a:3f:e4:d8:
7f:6e:f5:a8:7e:15:24:ce:87:26:af:07:d5:21:10:6b:03:d8:
0a:4d:50:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:54 2025 by rpki-client