Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/GSeuRvhLbixNM8LBpN0Oycbi21U.roa
File: GSeuRvhLbixNM8LBpN0Oycbi21U.roa (raw, json)
Hash identifier: Xg1Y2nnPczMMXFoAKahDMkbAg9eKQUVHEkSsTfs33Q0=
Subject key identifier: 19:27:AE:46:F8:4B:6E:2C:4D:33:C2:C1:A4:DD:0E:C9:C6:E2:DB:55
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019995D2C77F5D2405FCCF73175378EBA7C7
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/GSeuRvhLbixNM8LBpN0Oycbi21U.roa
Signing time: Mon 29 Sep 2025 14:14:02 +0000
ROA not before: Mon 29 Sep 2025 14:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214286
IP address blocks: 5.181.220.0/24 maxlen: 24
5.181.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:d2:c7:7f:5d:24:05:fc:cf:73:17:53:78:eb:a7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Sep 29 14:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1927ae46f84b6e2c4d33c2c1a4dd0ec9c6e2db55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:c7:89:f1:5c:77:24:8c:d6:47:d4:f8:98:
35:21:a2:46:d7:ec:1d:b0:9d:48:e7:3c:ca:9c:df:
4e:b1:e9:9e:11:96:17:96:62:c3:bf:7a:5a:b3:f2:
ed:f8:4e:44:43:9d:6f:ab:09:70:57:bf:a3:c2:81:
50:f8:a8:14:d6:95:5c:7e:0c:cd:f2:cd:36:cf:ff:
c6:d0:5c:00:97:17:1e:ef:28:0b:9c:2d:18:94:ae:
b7:46:86:89:b8:c7:0a:b9:56:21:bb:3e:da:84:d6:
00:b3:e7:f0:40:61:b9:1c:70:64:32:d8:ee:6e:b8:
90:1e:f6:fc:a8:0c:0f:08:8d:16:8e:e4:b1:75:ff:
fd:4c:49:ea:71:f3:a0:ae:7c:f0:33:a4:52:6d:29:
6d:19:3d:ea:66:28:0b:3a:f6:dd:6a:c7:d8:3d:10:
7b:80:1d:eb:29:14:a1:21:e9:4c:93:b6:ad:ac:33:
f3:79:ef:1d:5e:15:7d:d1:b1:09:24:82:4d:d0:ac:
95:dd:5f:3f:cd:d5:f5:ca:37:ea:17:f4:d8:93:91:
e0:cb:10:ef:94:94:9b:4a:61:55:99:71:04:4b:9e:
7e:5f:30:3a:ba:72:f8:c1:94:2f:3e:b1:25:60:06:
5f:2c:a2:b7:ff:ab:05:33:8d:ed:4a:fe:23:91:8c:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:27:AE:46:F8:4B:6E:2C:4D:33:C2:C1:A4:DD:0E:C9:C6:E2:DB:55
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/GSeuRvhLbixNM8LBpN0Oycbi21U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.220.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:05:37:75:32:f0:4e:f7:c5:9c:07:34:51:d1:16:76:10:8c:
a5:b1:a8:a7:09:84:0e:a9:81:62:91:64:b3:99:17:21:cb:5b:
c8:5e:37:3d:f8:83:17:66:aa:b6:c6:3a:27:02:3a:51:b4:c9:
07:ae:28:64:d5:33:62:f4:1e:b6:e5:31:8a:31:d6:c5:9d:89:
0d:c6:28:53:6e:2a:1a:aa:d0:58:b8:bc:ab:ac:67:e8:c9:33:
28:7d:cc:ed:54:cc:ad:1a:b7:0d:81:8b:e3:5b:08:f6:e3:50:
b0:42:7b:a5:ea:97:7d:d9:22:1f:c6:bb:14:36:17:ce:45:70:
85:79:ce:1c:a1:e3:9a:48:92:f6:82:8c:3c:db:07:da:15:32:
d6:91:45:37:4f:86:37:a0:46:d3:ab:66:ad:91:05:28:1a:d1:
e4:93:a8:a9:97:db:c2:4f:73:9b:a4:b1:c3:58:54:a1:93:00:
df:97:48:9a:3a:b3:e1:4d:88:c4:25:86:d0:96:61:59:ce:77:
09:5f:09:8f:b3:6b:11:7c:78:6e:63:b3:33:23:3a:a7:b2:ff:
1b:1c:9d:a9:a3:f1:18:72:63:af:3b:d5:ca:d5:0c:7b:52:8f:
29:02:03:cf:71:a2:a6:10:fb:6f:64:d7:c2:9d:78:5d:fb:e0:
9b:57:25:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:35:33 2025 by rpki-client