Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ggUHuIPOPPE-89UdjLxjcIyVmr8.roa
File: ggUHuIPOPPE-89UdjLxjcIyVmr8.roa (raw, json)
Hash identifier: l16B+QGa89xf55rT0g5lF4JoYmICgpxoLlxmUHh6Waw=
Subject key identifier: 82:05:07:B8:83:CE:3C:F1:3E:F3:D5:1D:8C:BC:63:70:8C:95:9A:BF
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0198A2A42B87FD33DB419DEB8F58FEFABF29
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ggUHuIPOPPE-89UdjLxjcIyVmr8.roa
Signing time: Wed 13 Aug 2025 08:55:24 +0000
ROA not before: Wed 13 Aug 2025 08:55:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49804
IP address blocks: 94.131.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:a4:2b:87:fd:33:db:41:9d:eb:8f:58:fe:fa:bf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Aug 13 08:55:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=820507b883ce3cf13ef3d51d8cbc63708c959abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:5a:b9:1a:45:1d:c6:32:8c:6a:d5:21:dd:
be:74:53:dc:4d:f1:4d:c0:e2:a5:01:7f:07:0d:0b:
4e:e9:f1:d5:db:b7:0c:50:8b:c5:c8:99:80:79:63:
e4:ff:8a:da:fb:02:a1:b8:b8:36:54:60:70:23:47:
2a:de:ee:0c:a5:e2:1b:a7:b4:49:72:23:d8:e7:82:
0d:6e:39:68:02:29:c4:4c:cf:c8:f4:de:f6:78:b6:
df:5c:0a:de:81:7e:98:cf:30:3d:60:23:e8:88:ed:
9a:45:bc:8d:e5:96:e0:03:8b:87:ca:9e:34:89:3c:
14:47:7a:9f:bc:20:45:d6:99:20:4d:d2:bf:74:e2:
1b:c6:21:76:49:ea:1c:c3:ee:2d:bb:31:98:98:bb:
8f:fe:ca:75:bc:da:7a:89:3e:17:d2:2e:b4:0c:50:
76:f9:48:f2:81:8b:e8:b0:a5:34:c1:9a:56:bb:2c:
72:15:e6:8a:45:e2:27:5d:fa:41:44:1d:22:20:b9:
a8:92:d8:92:a0:e2:d5:a5:b2:e0:7a:1c:a3:f3:03:
2a:33:68:0a:58:58:b5:ca:a1:d9:7d:a7:45:43:e0:
55:5a:ce:6c:b6:71:69:69:96:bc:5a:b5:e7:03:dc:
97:49:a5:a7:11:fa:84:fc:f7:42:b6:b6:2b:ee:c0:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:07:B8:83:CE:3C:F1:3E:F3:D5:1D:8C:BC:63:70:8C:95:9A:BF
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ggUHuIPOPPE-89UdjLxjcIyVmr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.223.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1e:c0:6e:61:40:f7:5f:c4:03:69:40:be:0e:d6:04:43:dd:
ee:6b:ab:66:81:1d:ef:7b:4f:d9:9b:34:93:3a:49:ff:21:ef:
0e:3d:5b:7d:03:3b:13:cc:89:36:a1:1b:2f:fd:c0:5a:1b:a0:
b6:1e:5e:8c:5e:4e:91:5b:4d:e4:93:e4:67:ba:70:8f:c4:f7:
48:3a:34:47:02:a1:59:c9:c6:e1:d9:71:e0:7b:1b:44:59:4d:
b2:b5:b2:73:98:1c:98:8d:0d:ac:d4:82:c2:ce:b1:8d:78:52:
69:0d:3a:72:84:06:92:fe:14:63:05:19:39:9e:ec:b6:6b:18:
d9:1f:c4:43:85:33:eb:78:56:b4:fd:48:07:be:ec:2c:5f:51:
ad:1d:aa:2f:2b:24:f3:30:78:59:51:0b:89:d6:7c:7d:b6:01:
93:cb:03:34:4c:80:66:d6:ab:32:50:31:a1:b0:c0:bd:3f:1e:
65:9d:ac:4e:26:a8:a4:d4:8b:ed:8c:f5:95:e5:98:e0:2a:a5:
e1:fd:2b:ed:0a:b5:8e:6b:39:a3:56:b2:c5:03:11:63:21:17:
16:d6:d2:4c:ef:2e:2b:d2:f6:fe:9f:52:4e:83:b9:f9:fb:e5:
5d:22:a1:f5:27:4f:97:3c:84:f7:7b:87:db:1a:73:24:23:46:
fb:d8:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:48 2025 by rpki-client