Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/gfJqz6llA6HPBbhUclOoBOQtzwA.roa
File: gfJqz6llA6HPBbhUclOoBOQtzwA.roa (raw, json)
Hash identifier: RevaPA0FwqLm6G8w6EGXV/kc0l56ywZoZvqxJEm3YF4=
Subject key identifier: 81:F2:6A:CF:A9:65:03:A1:CF:05:B8:54:72:53:A8:04:E4:2D:CF:00
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 01994DA6E0DE703FEC4765F868950D92BDCC
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/gfJqz6llA6HPBbhUclOoBOQtzwA.roa
Signing time: Mon 15 Sep 2025 13:53:26 +0000
ROA not before: Mon 15 Sep 2025 13:53:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43317
IP address blocks: 94.242.0.0/23 maxlen: 23
2a00:1838::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:a6:e0:de:70:3f:ec:47:65:f8:68:95:0d:92:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Sep 15 13:53:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81f26acfa96503a1cf05b8547253a804e42dcf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4c:b9:0c:cb:8a:48:66:b1:f9:e3:45:8b:ec:
61:aa:4f:00:df:48:cf:ad:09:14:f3:16:9b:b1:61:
8e:0f:3a:a7:1f:5e:b3:b1:1b:df:0b:0e:08:94:f7:
58:a7:d7:80:bf:78:42:ae:6a:ac:c3:b1:84:9f:6b:
fb:6c:6c:a8:2e:a2:37:64:7b:68:40:27:7f:ac:a8:
2e:e5:27:8d:f5:f6:5e:b6:a7:b0:a7:01:b2:51:12:
a4:bb:d0:5a:7f:6f:cb:ff:5b:1d:ec:d5:f6:96:2b:
77:1e:2b:b7:57:a2:0f:36:48:1e:4d:22:ac:71:14:
43:b5:47:38:ad:47:10:f7:52:56:5b:bc:ff:d8:03:
c1:72:dd:1c:e4:2e:37:4f:ea:4e:52:15:f1:a6:37:
8a:ba:b4:35:db:4b:8b:72:a7:c3:45:d4:f8:a2:2f:
56:41:35:ec:f5:54:cb:6c:c1:52:5d:5b:b8:9d:56:
08:9a:d0:11:9c:64:cf:7f:8b:e1:cd:ab:68:07:10:
70:bf:b6:f8:47:4d:19:22:b8:f7:19:0e:83:b7:8d:
86:22:17:32:4f:43:95:9b:fa:42:b1:25:7d:54:6e:
88:79:3b:ee:c5:4f:0e:a1:6c:b5:0b:80:d1:de:04:
95:6c:ee:84:72:ae:16:ef:9a:f2:01:10:ba:57:49:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:6A:CF:A9:65:03:A1:CF:05:B8:54:72:53:A8:04:E4:2D:CF:00
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/gfJqz6llA6HPBbhUclOoBOQtzwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.242.0.0/23
IPv6:
2a00:1838::/32
Signature Algorithm: sha256WithRSAEncryption
55:25:96:ec:47:4b:b5:a7:a5:5d:25:ff:02:14:9f:9a:c5:ee:
0c:e5:68:31:b9:0d:24:55:d8:79:8e:15:4c:13:72:6d:16:db:
f7:07:54:da:e9:67:d6:68:a1:4c:4f:18:b5:9c:5c:e8:5b:25:
f1:59:42:b4:df:a2:2c:75:a6:60:ad:df:ac:e6:b6:4a:c7:a0:
13:b3:b0:e3:5a:8b:cf:66:bc:67:ef:54:27:aa:dd:35:0c:dd:
ef:18:69:62:9b:88:0d:83:ec:be:17:ff:bf:b3:0b:e7:f1:a9:
08:ef:6c:cf:d7:b9:8f:63:38:b2:a6:f1:f1:09:3c:01:dc:12:
bb:24:d3:ea:75:6e:52:58:e8:6a:30:3b:7e:bb:0a:38:ed:2b:
a7:66:b3:c7:d7:bb:97:e1:eb:e2:d2:90:3b:74:a4:01:c6:fc:
5b:6a:34:fe:3e:a1:1e:7d:8f:60:31:67:03:81:72:5b:69:06:
66:d1:7b:2b:a5:84:a1:c6:0b:54:f4:6c:21:29:f4:c6:d9:53:
4d:2d:1a:04:d0:c8:8d:d5:b4:88:29:58:03:05:82:d8:f1:23:
7e:a6:7f:e9:8a:3b:5d:f4:af:4c:47:67:95:57:3d:60:34:92:
b4:fc:2f:f6:27:7d:f4:18:ce:c8:d3:ea:c8:b6:f2:3e:ff:da:
78:d4:06:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:14 2025 by rpki-client