Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/GzcvrMpqq1euwztFZZnkd-LDsP8.roa
File: GzcvrMpqq1euwztFZZnkd-LDsP8.roa (raw, json)
Hash identifier: J7juk3mZEf4YQPyceEWfjAAzjLC7vJR35aiY50KL3s0=
Subject key identifier: 1B:37:2F:AC:CA:6A:AB:57:AE:C3:3B:45:65:99:E4:77:E2:C3:B0:FF
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 0199E4506613D40F24D246320B21069FF4A8
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/GzcvrMpqq1euwztFZZnkd-LDsP8.roa
Signing time: Tue 14 Oct 2025 20:01:38 +0000
ROA not before: Tue 14 Oct 2025 20:01:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42633
IP address blocks: 2a10:4780:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:50:66:13:d4:0f:24:d2:46:32:0b:21:06:9f:f4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: Oct 14 20:01:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b372facca6aab57aec33b456599e477e2c3b0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0e:c8:43:73:31:9b:d5:15:b7:09:3f:f9:c2:
be:2f:74:c2:05:6b:71:c9:9d:1d:70:e6:69:9d:c9:
e1:2e:31:c7:75:39:8f:3e:76:b0:cd:ce:ea:74:ce:
f2:d5:d8:c6:b3:c2:17:f1:f2:01:d2:74:97:ac:56:
cb:67:84:a3:35:c1:d8:cc:ce:af:ed:b9:9f:44:a2:
f0:ab:66:44:0e:b5:8f:7c:5e:d9:ed:95:a9:a2:07:
be:47:d6:13:cd:28:2d:d0:e8:7a:00:42:e2:24:06:
98:b3:ad:e6:ae:8a:2f:28:4f:dc:fd:a7:51:2f:bb:
f0:b9:00:e1:e7:e2:2e:f4:c0:40:b3:80:b0:f6:20:
37:0f:4c:26:82:6f:90:d9:39:5a:3d:59:d3:e6:6b:
01:e4:40:4e:d7:ce:5e:dd:3f:95:e7:1d:f9:71:ac:
e9:e9:23:e6:fc:5c:ea:16:8e:b5:fa:1c:87:c3:c9:
a9:87:05:47:0b:3e:fa:54:e6:cd:20:1a:ce:8e:be:
2d:e9:c5:7a:9c:19:7c:6b:f6:ec:c8:44:04:f2:53:
6e:ed:29:1f:5d:85:a6:71:a4:d5:31:d2:87:59:bb:
ec:e5:bc:fb:5e:97:b4:6d:c0:27:13:7d:ce:36:20:
f1:90:59:f9:8d:e0:c7:3d:ef:dd:51:6b:0e:59:c7:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:37:2F:AC:CA:6A:AB:57:AE:C3:3B:45:65:99:E4:77:E2:C3:B0:FF
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/GzcvrMpqq1euwztFZZnkd-LDsP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4780:4000::/36
Signature Algorithm: sha256WithRSAEncryption
01:58:03:14:f2:a1:5b:fc:6b:0b:c0:4a:22:87:37:e0:05:cd:
70:fb:c8:7a:30:9d:fa:bc:be:e4:5c:35:ea:f3:df:63:28:37:
f5:c2:df:f7:2c:a9:67:a0:8b:88:23:75:7a:2d:38:b7:a4:05:
10:7c:92:c4:2b:fb:78:46:28:da:0a:29:75:33:13:18:8b:5c:
87:ec:67:2d:6e:a5:45:9d:a2:e1:a6:3b:fa:c9:ad:68:82:67:
d0:93:f3:00:52:b5:f3:aa:a8:f1:8e:02:10:d2:23:d0:ac:11:
4d:ad:e0:e3:3b:20:da:06:53:71:e4:38:cf:2f:02:ca:80:4a:
32:02:c2:3e:52:23:40:06:41:ea:2d:ea:27:3f:2d:fa:1f:2d:
54:00:c0:82:16:69:a1:75:bd:eb:f2:60:6f:29:66:e7:28:96:
41:05:89:74:44:c2:eb:23:d0:fc:4a:fa:25:46:ba:23:f9:de:
7c:11:32:55:27:ab:fb:e5:d6:15:c6:d7:af:6e:12:3c:a3:29:
f8:80:22:b0:9e:8a:66:b5:c7:6a:eb:be:ad:97:2e:95:a3:06:
d5:82:24:ff:6b:25:ff:01:ba:8c:95:2a:1f:53:f8:44:da:e0:
43:57:d3:76:b0:68:52:ad:78:fb:5d:f8:8c:e5:0a:8a:81:ea:
b7:01:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:19 2025 by rpki-client