Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/b13GBI_ErPPSKTlVvKejavSpfj0.roa
File: b13GBI_ErPPSKTlVvKejavSpfj0.roa (raw, json)
Hash identifier: u2uVD2JvI4OweXpyP69Cm6Idhj79Q0buUgqOXky2Kp0=
Subject key identifier: 6F:5D:C6:04:8F:C4:AC:F3:D2:29:39:55:BC:A7:A3:6A:F4:A9:7E:3D
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 0199E2FE91FCB25630015C04501704CF54B0
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/b13GBI_ErPPSKTlVvKejavSpfj0.roa
Signing time: Tue 14 Oct 2025 13:52:38 +0000
ROA not before: Tue 14 Oct 2025 13:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50880
IP address blocks: 78.110.0.0/20 maxlen: 20
78.110.0.0/24 maxlen: 24
78.110.1.0/24 maxlen: 24
78.110.2.0/24 maxlen: 24
78.110.3.0/24 maxlen: 24
78.110.4.0/24 maxlen: 24
78.110.5.0/24 maxlen: 24
78.110.6.0/24 maxlen: 24
78.110.7.0/24 maxlen: 24
78.110.8.0/24 maxlen: 24
78.110.9.0/24 maxlen: 24
78.110.10.0/24 maxlen: 24
78.110.11.0/24 maxlen: 24
78.110.12.0/24 maxlen: 24
78.110.13.0/24 maxlen: 24
78.110.14.0/24 maxlen: 24
78.110.15.0/24 maxlen: 24
185.69.208.0/24 maxlen: 24
185.69.209.0/24 maxlen: 24
185.69.210.0/24 maxlen: 24
185.69.211.0/24 maxlen: 24
2a04:9940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:fe:91:fc:b2:56:30:01:5c:04:50:17:04:cf:54:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Oct 14 13:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f5dc6048fc4acf3d2293955bca7a36af4a97e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:cf:4e:a4:55:63:92:5d:35:8b:b3:19:02:
29:21:76:82:8e:1b:a7:68:39:2c:dc:e9:41:cb:8a:
2e:92:00:55:91:7b:34:3e:99:4b:a0:74:29:13:9c:
d9:e1:d7:4c:de:e8:86:fe:a2:ff:f4:23:f5:a2:12:
6f:e4:ba:61:33:60:92:3f:cc:d9:6f:11:c1:0b:3d:
49:4f:39:f3:cc:9e:d0:f1:81:78:73:98:da:4b:fe:
80:25:ea:00:70:27:9b:e0:03:ba:aa:88:0c:46:47:
e4:ea:90:bb:fa:52:5f:09:9d:f3:cf:a6:f9:98:ed:
55:31:ce:f6:3c:26:51:40:9d:57:8d:3a:05:dd:63:
4d:92:1d:49:49:52:5f:2e:0c:1e:9d:2f:aa:3b:ae:
60:1d:3b:b0:e6:5b:3d:3b:7d:37:1b:97:a1:75:fc:
d1:f0:91:f7:77:3c:b3:ad:84:32:bd:55:36:20:7c:
c4:9c:49:db:9d:46:09:40:98:7c:1c:bc:08:70:bb:
5f:d9:56:98:60:4f:c9:14:29:d4:80:71:93:87:96:
8f:c9:72:66:cd:b1:55:a3:23:c5:bb:ca:13:47:0b:
29:00:cb:94:bb:aa:4d:f3:57:5f:c7:7c:3c:99:77:
ef:2d:63:56:48:5e:06:c0:3a:9f:1a:df:c5:5a:00:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:C6:04:8F:C4:AC:F3:D2:29:39:55:BC:A7:A3:6A:F4:A9:7E:3D
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/b13GBI_ErPPSKTlVvKejavSpfj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.0.0/20
185.69.208.0/22
IPv6:
2a04:9940::/29
Signature Algorithm: sha256WithRSAEncryption
7f:73:aa:a7:8f:d1:cd:23:f8:24:f4:36:2e:da:ad:91:19:c8:
be:bf:7b:0a:18:96:b6:00:47:6c:8a:b1:29:a4:d3:7d:af:bf:
cc:df:63:1c:92:f0:60:c0:74:9e:03:85:06:ab:ee:8a:4e:81:
a9:f1:4e:40:01:8b:e6:af:8a:e1:10:b2:1e:f9:34:9a:d2:e0:
af:c6:45:59:13:7c:54:5f:c7:07:c4:5c:97:dd:23:20:7e:46:
96:49:7d:7f:90:98:48:3c:ed:02:56:29:6c:f7:49:6c:be:bc:
64:be:f1:c2:11:dc:33:7e:dd:18:b8:6e:10:96:b0:d1:72:f4:
ac:76:ce:e2:9a:d9:63:f7:0a:ac:c6:e4:e2:2b:92:dd:49:c5:
b3:b7:08:ea:f1:ad:93:f5:6b:41:53:60:8f:64:e2:81:43:3a:
a6:35:04:0c:1d:2a:33:c2:83:d5:ab:c3:6b:e1:7d:30:e9:64:
64:7a:a5:f1:45:eb:ed:8a:dc:7f:a3:2e:9f:f6:e4:3d:ea:76:
7e:05:02:07:ca:57:9f:5d:ea:de:2f:59:48:52:d2:cd:66:7c:
b4:7b:dd:26:9b:21:7a:d2:1e:63:44:1e:df:91:fd:69:bf:47:
33:51:2e:ec:e3:aa:84:ea:fb:e4:06:79:cf:a1:33:63:a7:49:
88:25:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:40:56 2025 by rpki-client