Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_G1M2GnurO0WPI9BghyW16XqK3o.roa
File: _G1M2GnurO0WPI9BghyW16XqK3o.roa (raw, json)
Hash identifier: tDYLZTA6tt9viY+UdFFk7wMMKzEt71fr9A15S5X+a5A=
Subject key identifier: FC:6D:4C:D8:69:EE:AC:ED:16:3C:8F:41:82:1C:96:D7:A5:EA:2B:7A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198C64B17FCE409DE1B8AD243023A9ECB9F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_G1M2GnurO0WPI9BghyW16XqK3o.roa
Signing time: Wed 20 Aug 2025 07:04:26 +0000
ROA not before: Wed 20 Aug 2025 07:04:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 178.253.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:4b:17:fc:e4:09:de:1b:8a:d2:43:02:3a:9e:cb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 20 07:04:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc6d4cd869eeaced163c8f41821c96d7a5ea2b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:2d:4f:a5:25:1a:27:79:49:c1:69:38:9b:
dc:c2:0b:fd:fb:a5:41:1d:df:9c:4b:75:2f:25:7c:
6a:29:42:8a:5a:a7:a2:e8:9d:d2:ee:b8:04:65:e6:
7d:24:2c:1d:d6:d2:2f:84:39:ba:cd:b2:56:39:4c:
48:68:1d:ef:b5:c9:14:3e:0f:4e:63:10:7f:a1:07:
bd:a0:41:bd:e6:e8:15:05:cb:5d:37:dd:f3:28:92:
ac:4f:9a:a5:f2:9f:34:68:6a:6e:cb:e9:5d:4d:07:
73:44:11:8a:6c:e7:47:c9:06:38:df:9f:1e:16:05:
fb:47:97:06:7d:f3:fb:cc:f6:b3:cd:d7:ea:e8:32:
16:2d:55:63:e6:86:4d:3b:78:e0:d6:c6:52:7d:fc:
65:ab:5b:30:2a:d2:b9:88:6c:19:d6:4c:9f:50:f4:
a1:c5:5f:26:81:b7:4b:05:94:7a:8b:8e:25:b5:75:
f5:8c:08:ab:ab:0a:67:de:6e:46:42:48:68:fe:cf:
4a:b8:52:13:5b:c0:f3:ab:da:9b:cd:02:2b:9b:0f:
14:57:5e:01:65:2c:4a:0c:59:22:7c:1c:0b:09:24:
bd:37:0d:72:31:e6:cb:5f:54:55:28:c3:b0:bf:9c:
46:69:e0:a6:28:45:a0:32:f7:f3:54:4b:3f:fc:72:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:4C:D8:69:EE:AC:ED:16:3C:8F:41:82:1C:96:D7:A5:EA:2B:7A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_G1M2GnurO0WPI9BghyW16XqK3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.224.0/24
Signature Algorithm: sha256WithRSAEncryption
72:90:c3:4f:91:05:eb:fb:1d:7c:7b:23:05:79:d5:66:fe:7a:
68:ea:49:7a:11:57:eb:1b:62:6f:5c:2a:d1:1f:86:8f:5f:f4:
94:8c:e4:04:37:31:ed:1a:c1:ae:6c:39:92:d0:88:62:e6:f3:
c9:bf:9a:55:9e:d1:25:e7:91:3a:dd:81:db:4b:7a:b5:05:31:
4c:9d:29:2b:67:6a:0c:ef:2d:f0:18:9a:b5:2e:30:b4:03:39:
ff:bb:75:cf:72:c4:3a:01:9a:23:eb:8b:1b:8d:b3:91:21:bf:
1e:73:b6:ed:0b:b4:3f:6d:51:cb:6c:51:91:fa:4e:04:45:39:
97:33:ee:e4:92:0c:eb:dc:e5:b4:f7:6b:d9:c2:45:e6:14:48:
70:58:be:83:bf:56:3d:10:66:bb:5c:43:fc:c7:d9:55:c4:5b:
04:f0:78:f2:c6:56:ce:91:5e:4b:f4:3d:bb:b9:4f:de:5a:b4:
35:50:aa:80:8a:ff:f1:3e:b5:fd:8d:9b:8e:d0:c0:7a:9a:7e:
1c:9d:39:ed:2c:d9:c6:a3:99:1b:d0:d4:df:6a:58:33:5b:4f:
6a:da:b9:b0:e0:39:6d:75:12:6e:31:c1:ad:64:e2:43:9d:84:
11:e8:92:6b:86:a2:76:b0:ea:87:af:d0:9b:1f:f9:8c:d5:60:
ae:5a:24:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:29:01 2025 by rpki-client