Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/ghQRN3I8FjlD4NpnyEOklT3hCIw.roa
File: ghQRN3I8FjlD4NpnyEOklT3hCIw.roa (raw, json)
Hash identifier: UyOp432oeYiOlT3x/JAjiMeBle5MG3ww6SXT5zAseKQ=
Subject key identifier: 82:14:11:37:72:3C:16:39:43:E0:DA:67:C8:43:A4:95:3D:E1:08:8C
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 0199CFC76FE055F4245A0925DE634E078B31
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/ghQRN3I8FjlD4NpnyEOklT3hCIw.roa
Signing time: Fri 10 Oct 2025 20:19:38 +0000
ROA not before: Fri 10 Oct 2025 20:19:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 45.12.60.0/24 maxlen: 24
86.54.28.0/24 maxlen: 24
86.54.29.0/24 maxlen: 24
2a01:e940::/48 maxlen: 48
2a01:e944::/48 maxlen: 48
2a01:e946::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:c7:6f:e0:55:f4:24:5a:09:25:de:63:4e:07:8b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Oct 10 20:19:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82141137723c163943e0da67c843a4953de1088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:7c:ca:ea:10:1c:68:66:fa:24:18:27:06:
01:de:86:82:5f:f4:2c:a2:3c:1f:2b:63:61:68:6d:
0d:76:57:70:3b:5c:3e:4c:a8:dc:d4:c3:bf:26:f1:
2f:98:46:aa:08:f9:01:05:28:64:59:76:7f:fe:e6:
48:0e:48:5a:fe:3e:28:5a:85:49:c6:c0:e5:99:d9:
f2:20:b9:63:64:70:47:8d:01:27:77:0d:96:37:82:
3f:8c:45:97:2c:7d:21:5b:c1:27:58:93:2d:fd:32:
8b:1d:74:97:3b:bc:5e:f6:44:62:54:2b:63:24:fb:
07:92:1d:23:ff:67:f7:fb:0e:5c:12:f2:3d:c7:96:
d1:cf:54:6b:83:7f:26:a7:fd:2c:33:46:a5:5f:82:
2a:ae:4d:ce:12:23:52:c8:31:17:89:dc:e4:8c:e9:
69:42:18:b6:9c:45:70:c5:bf:4c:26:7b:45:06:1c:
7a:11:f4:88:57:a9:bc:af:f2:e2:14:3a:2f:de:67:
07:06:36:20:83:69:0a:6e:68:ea:ce:a7:86:e3:fe:
f9:e1:94:74:a6:df:e8:54:2b:83:b1:f5:21:06:cf:
5e:e6:4e:38:41:13:cb:d4:89:69:eb:a4:dd:6d:75:
23:b7:2b:0d:5f:b5:cc:43:f0:8b:66:e4:2a:1e:e4:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:14:11:37:72:3C:16:39:43:E0:DA:67:C8:43:A4:95:3D:E1:08:8C
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/ghQRN3I8FjlD4NpnyEOklT3hCIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.60.0/24
86.54.28.0/23
IPv6:
2a01:e940::/48
2a01:e944::/48
2a01:e946::/48
Signature Algorithm: sha256WithRSAEncryption
92:3d:c1:38:06:f1:4f:16:1f:34:c3:9d:de:e1:40:12:e6:f8:
3b:dd:da:8b:5c:8e:7d:2b:92:2f:5c:9c:8a:9b:18:4a:38:ae:
69:4b:3d:24:ed:ce:65:25:b9:47:7c:0c:fc:ad:fc:4f:25:a3:
55:9d:bb:2a:51:e9:aa:8b:c2:63:bd:87:41:89:41:3a:a9:17:
87:90:cd:9a:5e:29:24:54:43:54:22:6b:f1:91:07:7e:1b:28:
af:da:ca:66:a6:a5:66:9b:62:86:27:18:2b:17:7e:7f:46:d6:
d9:fc:c5:b7:e8:56:a1:3b:6b:20:98:ef:19:c4:8d:f7:be:7c:
54:5a:e3:55:52:df:ef:fa:60:6d:17:42:de:fc:32:ec:39:c2:
42:d1:07:a7:0e:24:09:a5:0a:91:36:aa:42:93:13:50:b4:31:
cc:a3:91:96:07:8d:99:9a:3d:da:bd:d2:b7:90:48:c0:ef:69:
01:79:c3:a9:66:ea:da:a0:d1:9b:30:7e:25:7a:72:f1:1d:58:
74:70:28:1a:54:8a:d2:91:be:96:c1:65:81:2c:77:95:2b:bc:
3d:e3:6e:45:4e:95:b1:26:fb:a9:3e:96:bd:4b:b0:af:cf:39:
34:58:c0:4d:1d:32:fe:ec:32:eb:ff:c6:18:02:fd:e1:de:ed:
76:62:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:41 2025 by rpki-client