Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/cGP_gRD-iBTmMU6jmRktcee-Lfo.roa
File: cGP_gRD-iBTmMU6jmRktcee-Lfo.roa (raw, json)
Hash identifier: wwltlEMfjaaWf1NiPcGDf2EH6nVadz8p372jM5CZNuE=
Subject key identifier: 70:63:FF:81:10:FE:88:14:E6:31:4E:A3:99:19:2D:71:E7:BE:2D:FA
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0199B42CD3667937E5EBC468D73C51CBCC1F
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/cGP_gRD-iBTmMU6jmRktcee-Lfo.roa
Signing time: Sun 05 Oct 2025 11:41:00 +0000
ROA not before: Sun 05 Oct 2025 11:41:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 194.180.51.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b4:2c:d3:66:79:37:e5:eb:c4:68:d7:3c:51:cb:cc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Oct 5 11:41:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7063ff8110fe8814e6314ea399192d71e7be2dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e9:f5:9d:95:df:ac:db:e6:dd:6e:ab:44:17:
b6:22:32:22:5f:4d:64:70:2d:47:2e:88:c0:22:99:
5b:86:5e:79:d8:28:b7:4e:3e:39:f7:7c:68:dd:d8:
e0:44:c2:f8:21:75:ae:5a:61:0c:69:d5:88:41:3a:
74:ac:19:8c:29:4b:05:f6:fb:fe:41:68:4a:65:74:
15:f9:fd:15:7e:dd:77:f4:8e:22:70:04:8f:d6:61:
7b:29:4e:1c:bc:0b:d4:dd:96:2f:bc:6d:91:9b:23:
4a:24:eb:7b:72:87:11:8b:09:87:23:bb:57:03:d2:
af:07:69:1f:7b:c1:dc:a2:bb:37:7a:fa:da:b7:91:
d3:ee:ff:56:63:10:76:d0:e6:70:87:8e:56:b4:e9:
21:72:98:e2:4c:44:7d:a0:0f:2b:d2:79:9f:09:3e:
65:4f:3e:f0:d5:1f:14:46:72:f5:f3:b6:0c:4e:70:
7c:c4:5c:b3:8c:d7:53:28:2c:2d:31:13:ee:a2:6b:
f2:aa:31:8e:82:e3:56:13:13:88:4f:42:0c:31:4d:
d3:a3:45:1b:9d:c8:e5:fe:32:24:00:73:80:be:92:
aa:b8:7b:82:97:89:33:d2:4a:b7:2f:da:83:c8:50:
27:e4:3f:88:77:ed:6d:1e:99:2c:51:43:1b:c6:de:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:63:FF:81:10:FE:88:14:E6:31:4E:A3:99:19:2D:71:E7:BE:2D:FA
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/cGP_gRD-iBTmMU6jmRktcee-Lfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:46:04:14:95:97:ce:f6:53:37:02:09:09:05:c8:c4:e7:85:
a6:0f:37:f5:62:c9:0c:38:e2:15:14:bd:c2:a4:5f:66:fe:f1:
bf:71:fc:6a:83:4b:54:71:ca:36:8b:33:d6:b6:7b:9b:46:77:
98:09:be:09:c3:68:bf:5d:5f:76:87:cc:5d:66:ba:bd:84:ac:
e3:1f:1e:b8:ad:50:49:19:9f:90:85:23:29:8d:9f:e9:8b:99:
4f:a0:c3:cf:b6:97:7e:56:4d:6c:0f:24:c7:f6:83:b6:ca:98:
9f:44:eb:62:6e:b3:eb:ff:ec:17:c1:58:f5:c3:9a:bf:d6:f4:
5f:f2:b9:30:0d:59:af:d1:35:5b:0c:f4:3c:a9:bb:c9:56:f1:
e7:11:3b:23:44:b1:3f:a6:df:8a:4e:1c:0c:66:8c:38:e7:51:
68:72:a7:87:dc:a9:65:db:ec:5d:d0:54:d2:ae:2b:d8:69:31:
40:d7:58:51:3f:14:be:27:4b:06:1e:f1:86:43:17:31:e8:e6:
f4:b5:fd:42:c4:37:70:40:fd:e2:fa:16:5b:c1:b1:17:5a:05:
10:bf:db:22:d3:fc:5d:69:20:6f:40:05:f6:15:54:cd:7d:cd:
8c:f1:99:e2:07:b5:8a:ae:de:6c:44:3f:24:b4:58:b2:23:f1:
d5:da:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:16:18 2025 by rpki-client