Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GZHZPJmf7RyW5zTVm9SoInBaz7M.roa
File: GZHZPJmf7RyW5zTVm9SoInBaz7M.roa (raw, json)
Hash identifier: pImt30tW7QWNNF1Yl5Fn7uTWW3W5BRuszKZDTcV35V0=
Subject key identifier: 19:91:D9:3C:99:9F:ED:1C:96:E7:34:D5:9B:D4:A8:22:70:5A:CF:B3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0199FBD44FCB7C52CDE1FC174A70CFCD69C6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GZHZPJmf7RyW5zTVm9SoInBaz7M.roa
Signing time: Sun 19 Oct 2025 09:36:59 +0000
ROA not before: Sun 19 Oct 2025 09:36:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 178.219.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:d4:4f:cb:7c:52:cd:e1:fc:17:4a:70:cf:cd:69:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 19 09:36:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1991d93c999fed1c96e734d59bd4a822705acfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:85:93:2f:83:bd:bf:7c:bd:40:91:a3:34:
14:d8:31:b9:ab:d0:b5:88:77:f8:f6:9f:34:34:c5:
92:73:22:3b:55:a1:98:a8:dd:77:64:19:55:12:8b:
ba:f8:ac:70:55:94:0d:73:73:c5:f8:2e:43:c4:04:
7b:71:bc:1a:42:bb:6a:28:82:e6:ee:9d:91:46:4a:
ca:c6:7e:66:f8:e3:56:62:9d:7c:df:80:8a:c8:9c:
02:f4:f7:06:08:62:34:1d:0f:be:62:c2:b1:c7:fa:
79:02:b8:59:d4:5e:e2:24:de:15:d2:6d:7b:0e:b3:
f1:71:1f:e8:a4:98:4b:4d:e2:52:7c:54:8c:be:2f:
df:43:73:e6:ed:79:69:73:ef:87:9b:aa:93:54:71:
a0:ff:40:56:a2:ad:93:91:55:66:e5:ec:fd:b6:9c:
19:98:4b:02:92:15:1f:72:6f:b5:80:0f:f7:54:67:
ef:b0:a9:f0:af:1d:2b:60:f0:73:93:c6:a6:40:79:
4a:d6:7b:6e:a8:63:57:12:a4:dc:0e:4e:7a:04:93:
1e:cd:e6:ef:a2:5b:37:3b:09:76:9a:48:18:0c:07:
ed:82:27:6b:12:8d:a4:22:ff:27:4c:49:28:10:26:
c5:8c:f1:17:4b:2f:fa:f8:dd:9f:bd:d3:3b:fb:dd:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:D9:3C:99:9F:ED:1C:96:E7:34:D5:9B:D4:A8:22:70:5A:CF:B3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GZHZPJmf7RyW5zTVm9SoInBaz7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.6.0/24
Signature Algorithm: sha256WithRSAEncryption
37:62:69:08:a4:f3:1f:54:b1:c9:76:57:2e:71:34:d6:2c:50:
5f:81:e3:8b:d2:5a:17:d5:8d:24:26:96:c5:3f:4a:b1:72:69:
62:35:87:9d:5f:94:52:d2:c2:04:16:97:b4:75:9e:f1:55:26:
ab:fc:06:53:17:fc:4a:15:7e:24:19:a7:2b:8f:6e:3a:6c:a4:
8b:b2:4c:d0:ae:35:1d:6b:c1:34:81:40:bd:5e:32:d3:1e:0a:
6f:1a:88:81:92:d9:37:59:57:76:11:76:4b:ee:58:f1:e6:cb:
08:a4:81:8a:be:9f:e9:15:5a:71:3c:7b:7b:be:83:c0:35:bf:
1f:eb:e5:57:83:b5:9a:ee:9b:7e:ae:0b:b8:2a:c7:87:99:89:
1b:ed:46:47:c7:a0:03:4c:26:a7:6b:25:3e:6f:93:a0:92:cf:
60:88:12:1d:38:a4:44:2a:c5:3a:d2:7d:d0:e9:cb:10:f7:39:
90:07:81:59:7e:de:12:66:c0:38:a4:43:48:13:1d:7d:a6:88:
4a:dc:51:4e:d9:15:e0:62:21:ca:2e:10:d4:cb:c9:4b:53:93:
bb:07:7b:34:16:f8:57:09:4c:de:91:8b:ff:f0:9b:6f:96:10:
42:b0:51:ed:17:3a:8d:c3:f2:0a:21:ff:45:e7:ed:b1:00:9d:
7d:a4:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:14 2025 by rpki-client