Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/goiFRwOZl4s-9eBS6-ty9Aa39xg.roa
File: goiFRwOZl4s-9eBS6-ty9Aa39xg.roa (raw, json)
Hash identifier: v1XADcYkOBOq2ag0EAvzsyypI+irjQ9kDOaWYQtUUzg=
Subject key identifier: 82:88:85:47:03:99:97:8B:3E:F5:E0:52:EB:EB:72:F4:06:B7:F7:18
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0199A9D9BB4A230B327FD8B8DE8768CE992E
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/goiFRwOZl4s-9eBS6-ty9Aa39xg.roa
Signing time: Fri 03 Oct 2025 11:34:02 +0000
ROA not before: Fri 03 Oct 2025 11:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14114
IP address blocks: 155.56.0.0/17 maxlen: 17
155.56.192.0/18 maxlen: 18
155.56.210.0/24 maxlen: 24
155.56.227.0/24 maxlen: 24
155.56.228.0/23 maxlen: 23
155.56.248.0/24 maxlen: 24
194.39.131.0/24 maxlen: 24
194.39.133.0/24 maxlen: 24
194.45.236.0/24 maxlen: 24
194.55.88.0/24 maxlen: 24
194.55.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:d9:bb:4a:23:0b:32:7f:d8:b8:de:87:68:ce:99:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Oct 3 11:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=828885470399978b3ef5e052ebeb72f406b7f718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bd:6e:90:c2:2f:05:87:27:ac:b6:ff:d9:55:
8b:0a:0f:63:98:7b:26:6c:b6:b8:8c:b8:26:34:5a:
a4:cf:73:93:eb:01:8b:81:8a:5e:e4:1b:4d:85:ff:
92:fc:ce:40:82:81:83:4b:5b:4a:1e:a1:a4:dc:22:
f9:bf:d4:b0:76:5b:93:81:08:01:bd:93:88:d4:f6:
19:81:c3:36:c4:05:2c:ea:65:d4:75:c3:0d:35:ac:
37:a5:fd:67:a6:d7:4b:25:d2:2d:13:6d:98:3f:7b:
ea:b9:3e:b2:4d:75:b3:ca:c5:9d:5e:c6:f5:69:9b:
e4:15:9a:91:4d:86:3e:ff:b2:c4:6b:d4:1d:c4:c1:
93:ec:58:41:68:bc:9f:14:ef:d3:a4:35:56:72:1c:
84:a7:cf:85:c9:46:ed:f5:81:9b:6c:56:9f:f7:d5:
bb:55:f8:5b:5a:48:9c:d2:4b:f9:6e:9c:3e:ac:d7:
fa:a7:8c:d3:0d:9b:37:f9:fa:5e:ca:a4:32:cc:6c:
18:1b:91:e0:8e:ea:37:48:1f:79:b0:b5:2a:df:e7:
bb:96:1d:11:60:8d:56:d1:93:1f:10:ab:52:7d:cc:
8e:35:2f:86:df:35:91:40:a0:b1:7e:60:fe:fa:0c:
95:99:0f:bd:6e:bc:49:be:47:d7:00:d1:1e:e5:ce:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:88:85:47:03:99:97:8B:3E:F5:E0:52:EB:EB:72:F4:06:B7:F7:18
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/goiFRwOZl4s-9eBS6-ty9Aa39xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.56.0.0/17
155.56.192.0/18
194.39.131.0/24
194.39.133.0/24
194.45.236.0/24
194.55.88.0/24
194.55.90.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5d:5f:65:9c:d0:01:2a:d7:45:5e:13:0d:42:54:35:cf:ef:
ab:9e:ee:1a:f5:ca:98:b7:3c:7a:ea:96:67:8b:c6:40:41:0f:
cf:a0:6d:48:db:41:10:29:fe:8b:ef:f2:3c:8b:3f:9c:89:3c:
a4:d5:78:48:fb:ca:e2:a2:05:fa:a2:e0:85:ca:90:f7:34:1d:
f3:10:b9:de:26:f6:3f:75:a2:af:a4:d4:87:d8:04:e1:1b:13:
2a:2e:2a:99:fb:30:cc:44:8c:fb:44:91:54:3e:e7:ae:47:88:
32:80:9f:bf:e5:e5:13:c0:77:53:c1:09:30:71:0a:bc:db:c9:
34:49:d6:91:cd:12:1d:c8:30:6e:51:1a:fc:be:e0:d2:7f:dd:
f3:e5:17:b7:58:f1:08:54:d8:ce:18:e2:4a:0d:6a:1d:a3:cb:
20:b5:e6:7f:77:f5:84:0d:87:e7:ac:bd:a7:59:cc:0b:4a:bc:
93:53:9e:54:f5:06:67:ec:94:e8:8d:7c:ec:17:db:35:c3:1e:
17:77:49:ec:ce:38:97:b4:8f:fc:00:7c:20:4b:7f:c1:dc:8b:
b5:c5:1e:e0:de:0a:4a:24:5c:d7:b8:37:ae:d7:82:e0:e9:7e:
65:14:32:d6:a2:d3:57:a1:11:f9:ae:48:b0:90:10:2f:7d:f2:
f9:15:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:28 2025 by rpki-client