Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/G5KEY8PdolTgfVn5492nGIzQ_a0.roa
File: G5KEY8PdolTgfVn5492nGIzQ_a0.roa (raw, json)
Hash identifier: 76KL/k0StmhsymXof8zQcgzmSlTCz8pQoee6lM9qOu4=
Subject key identifier: 1B:92:84:63:C3:DD:A2:54:E0:7D:59:F9:E3:DD:A7:18:8C:D0:FD:AD
Certificate issuer: /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial: 01978C88C87EAD40E0F75CE192ABA4D4F2A3
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/G5KEY8PdolTgfVn5492nGIzQ_a0.roa
Signing time: Fri 20 Jun 2025 08:51:03 +0000
ROA not before: Fri 20 Jun 2025 08:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56365
IP address blocks: 176.123.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:88:c8:7e:ad:40:e0:f7:5c:e1:92:ab:a4:d4:f2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Validity
Not Before: Jun 20 08:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b928463c3dda254e07d59f9e3dda7188cd0fdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:97:af:2b:59:d4:0b:c2:13:46:99:50:41:
eb:d4:da:68:32:ae:7e:85:88:9f:de:09:3c:d0:ba:
60:fa:56:36:da:23:c4:04:95:7b:ae:05:54:2d:57:
e8:75:ce:c1:2f:33:45:6b:a8:d8:34:d4:12:b3:be:
51:c6:11:aa:c7:1f:76:8c:6f:12:64:ad:52:bc:d1:
3a:a9:af:77:3d:4a:50:43:6a:0e:7e:33:3c:d1:26:
2e:c9:c1:07:9a:e4:00:82:ce:56:e6:d7:40:e6:dc:
64:71:a4:f7:d5:ba:38:a1:50:1f:1c:ae:8f:13:1e:
5b:e0:df:60:03:63:b5:dc:c0:f3:6d:23:18:40:f1:
db:ca:79:49:29:16:2d:16:04:b6:a2:2a:1d:a5:3b:
6c:a9:86:7e:f8:12:db:6f:ac:e4:23:73:02:73:83:
8c:08:6f:a4:78:da:36:f5:26:19:70:5b:a2:32:8a:
77:25:39:94:99:37:74:dc:e2:ea:3a:5d:d3:2e:4f:
40:87:79:94:9c:42:a2:fc:62:f3:f1:ba:65:03:aa:
33:89:fe:14:35:f2:8c:88:81:79:e0:de:87:08:42:
f4:9a:8a:57:30:54:af:ba:50:34:3d:6e:ba:9b:66:
de:ee:04:6e:51:5e:b6:4c:99:77:19:b1:f9:b4:19:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:92:84:63:C3:DD:A2:54:E0:7D:59:F9:E3:DD:A7:18:8C:D0:FD:AD
X509v3 Authority Key Identifier:
keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/G5KEY8PdolTgfVn5492nGIzQ_a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.59.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:74:64:fe:a9:78:af:b2:07:49:37:de:de:79:57:b8:1a:ea:
84:2a:e3:0d:dd:43:df:42:58:6d:2b:5e:a6:4b:3f:e0:92:4f:
42:76:be:29:2d:81:2d:df:31:a2:99:8a:36:0c:8e:1a:2c:c0:
3f:60:da:b5:c8:9c:7b:c9:7b:74:a6:c4:b0:85:0d:64:e4:ac:
ee:07:eb:eb:91:84:61:56:a1:13:dc:5f:94:98:1e:c7:cd:21:
01:2f:10:64:a7:18:00:ca:d4:ab:69:e4:7a:73:c7:07:e4:25:
d5:5e:33:dc:e7:95:85:0e:31:6a:5a:c5:51:19:b6:2d:8e:e8:
1f:94:a7:57:78:c3:b8:d8:7e:35:e4:1e:f7:9d:bf:50:48:d4:
6e:94:0b:f7:e3:8d:53:5e:c5:3b:98:a7:b8:10:86:97:9a:09:
26:56:2d:c6:96:bc:2a:95:20:fd:86:59:03:8b:25:ff:5c:c6:
0d:4b:2e:82:10:e1:11:e9:64:fc:69:2f:7d:68:a0:32:e4:ae:
06:8f:9b:88:f7:d5:98:f8:68:0a:46:08:ef:a1:3e:9d:c3:35:
ba:0d:bd:e5:51:1e:e1:39:f6:17:7b:b0:58:f2:0e:fc:26:0e:
b2:c7:87:c1:00:91:92:23:d2:ee:07:38:e7:b4:96:06:d4:e4:
e0:40:51:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeMiMh+rUDg91zhkquk1PKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4M2EyY2NlOTA4M2U4YzE1YTFkMzI1Y2Y0ODc2NzU1OWY5
MmI2MjMwHhcNMjUwNjIwMDg1MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjkyODQ2M2MzZGRhMjU0ZTA3ZDU5ZjllM2RkYTcxODhjZDBmZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01WXrytZ1AvCE0aZUEHr1NpoMq5+
hYif3gk80Lpg+lY22iPEBJV7rgVULVfodc7BLzNFa6jYNNQSs75RxhGqxx92jG8S
ZK1SvNE6qa93PUpQQ2oOfjM80SYuycEHmuQAgs5W5tdA5txkcaT31bo4oVAfHK6P
Ex5b4N9gA2O13MDzbSMYQPHbynlJKRYtFgS2oiodpTtsqYZ++BLbb6zkI3MCc4OM
CG+keNo29SYZcFuiMop3JTmUmTd03OLqOl3TLk9Ah3mUnEKi/GLz8bplA6ozif4U
NfKMiIF54N6HCEL0mopXMFSvulA0PW66m2be7gRuUV62TJl3GbH5tBkZgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuShGPD3aJU4H1Z+ePdpxiM0P2tMB8GA1UdIwQY
MBaAFOg6LM6Qg+jBWh0yXPSHZ1WfkrYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkRvc3pwQ0Q2TUZhSFRKYzlJZG5WWi1TdGlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lYjQyMmItYzc5ZS00ZmJlLWFlOGYt
MzU2M2Y5NTQzNDg3LzEvRzVLRVk4UGRvbFRnZlZuNTQ5Mm5HSXpRX2EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lYjQyMmItYzc5ZS00ZmJlLWFlOGYtMzU2M2Y5NTQzNDg3
LzEvNkRvc3pwQ0Q2TUZhSFRKYzlJZG5WWi1TdGlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHs7MA0G
CSqGSIb3DQEBCwUAA4IBAQC4dGT+qXivsgdJN97eeVe4GuqEKuMN3UPfQlhtK16m
Sz/gkk9Cdr4pLYEt3zGimYo2DI4aLMA/YNq1yJx7yXt0psSwhQ1k5KzuB+vrkYRh
VqET3F+UmB7HzSEBLxBkpxgAytSraeR6c8cH5CXVXjPc55WFDjFqWsVRGbYtjugf
lKdXeMO42H415B73nb9QSNRulAv3441TXsU7mKe4EIaXmgkmVi3GlrwqlSD9hlkD
iyX/XMYNSy6CEOER6WT8aS99aKAy5K4Gj5uI99WY+GgKRgjvoT6dwzW6Db3lUR7h
OfYXe7BY8g78Jg6yx4fBAJGSI9LuBzjntJYG1OTgQFGZ
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:53:02 2025 by rpki-client