Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/GRA3t_KyWFYxg2CQJHBaXlViSP8.roa
File: GRA3t_KyWFYxg2CQJHBaXlViSP8.roa (raw, json)
Hash identifier: N4cHeR4tmiAj9zbtfRvcPi/r/p86jgb0tb1toEi1byE=
Subject key identifier: 19:10:37:B7:F2:B2:58:56:31:83:60:90:24:70:5A:5E:55:62:48:FF
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 01990C8DB028498500F7054A953CA0325427
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/GRA3t_KyWFYxg2CQJHBaXlViSP8.roa
Signing time: Tue 02 Sep 2025 22:30:36 +0000
ROA not before: Tue 02 Sep 2025 22:30:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 185.239.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0c:8d:b0:28:49:85:00:f7:05:4a:95:3c:a0:32:54:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Sep 2 22:30:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=191037b7f2b258563183609024705a5e556248ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:6e:a9:4a:9d:4a:e1:95:e6:4b:f7:5e:77:
f3:c0:84:c9:79:ee:e9:c0:c6:87:fa:c8:0e:8e:24:
21:fc:0c:79:50:07:a8:40:e6:24:df:bd:88:71:27:
37:8d:60:42:9d:12:51:3f:2c:51:8f:0d:30:e1:e4:
a7:be:fc:a3:20:4e:47:d5:f8:f6:ee:e6:d1:65:4c:
5e:4f:5a:12:d1:69:c6:31:67:c4:eb:42:39:56:3b:
70:70:44:ef:cf:1e:cb:6b:ba:e5:c4:ca:85:d3:62:
6c:e6:c4:79:b0:fb:4c:5c:58:b9:67:ef:f3:31:54:
54:a7:8f:8d:3e:53:4b:60:e0:03:7c:5b:72:84:18:
29:46:46:18:4d:69:bb:70:34:3a:b4:18:16:36:bb:
a3:93:be:59:2f:8a:69:eb:93:c4:f1:ba:3a:96:93:
50:ab:23:15:38:0f:21:52:ec:91:bb:ad:8b:fc:6f:
48:72:fc:32:c0:b1:b5:aa:31:f1:72:da:ac:fc:fc:
bf:ca:fc:80:d7:e3:2c:2e:be:b1:47:85:ef:d3:92:
f3:61:0b:5a:56:93:66:f2:e8:d7:9a:18:e9:5c:86:
1c:ef:30:34:fb:a6:56:da:3c:cf:dc:42:ec:e0:a4:
11:1e:36:da:79:b4:f5:9f:f6:75:d7:20:e7:6c:fa:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:10:37:B7:F2:B2:58:56:31:83:60:90:24:70:5A:5E:55:62:48:FF
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/GRA3t_KyWFYxg2CQJHBaXlViSP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.136.0/22
Signature Algorithm: sha256WithRSAEncryption
25:32:c1:40:32:57:6b:39:e1:9a:46:e9:eb:58:ba:84:0b:f6:
59:74:4f:6e:90:18:8a:1c:e6:e5:24:d0:d6:db:6e:52:a9:e0:
0f:f2:70:3b:0a:e5:5c:83:3e:85:f3:1f:89:d3:08:c6:d4:63:
b6:0a:64:8b:84:40:cc:3c:44:bc:1a:45:00:1a:3b:b3:b3:18:
cc:d2:6b:ea:6e:68:60:6a:6e:13:92:a1:bd:f5:c6:e4:55:47:
82:fc:35:22:ec:39:df:29:cc:fa:d6:e1:c4:4b:61:02:d3:ad:
f5:39:76:bc:35:c7:42:ff:75:8f:50:1d:19:a3:9f:55:de:48:
1e:7f:6b:e4:5b:f0:4b:a2:0e:3b:a8:38:11:ff:3a:a6:b1:11:
23:e8:e4:a3:c7:9a:f8:92:c2:63:ea:1f:c6:e3:3d:85:83:06:
bf:5e:c9:f3:a7:65:a5:f2:b8:49:7b:16:b4:24:7f:27:59:e2:
22:51:28:ab:55:96:f2:25:64:0c:c2:25:0d:77:54:20:04:e1:
f3:8c:d6:8a:5e:22:52:cc:35:18:9d:0d:5a:7a:d9:20:25:d3:
31:6a:b4:0b:7d:e5:1d:43:08:ff:98:4e:75:5b:c3:79:ae:e8:
e8:52:b3:33:ce:2f:8b:20:c8:14:a4:5f:d4:9d:a9:0d:81:74:
f5:c3:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:42 2025 by rpki-client