Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GpI8sBN2cOTkQMCM5SVt7DCGwz8.roa
File: GpI8sBN2cOTkQMCM5SVt7DCGwz8.roa (raw, json)
Hash identifier: M6iRIbOJbcjXee9iHjYD+5pjqpXiFOKHjtiqjQhxinw=
Subject key identifier: 1A:92:3C:B0:13:76:70:E4:E4:40:C0:8C:E5:25:6D:EC:30:86:C3:3F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198801696BF1C05A3908A0B465BD8BC626A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GpI8sBN2cOTkQMCM5SVt7DCGwz8.roa
Signing time: Wed 06 Aug 2025 15:53:40 +0000
ROA not before: Wed 06 Aug 2025 15:53:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212683
IP address blocks: 194.105.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:16:96:bf:1c:05:a3:90:8a:0b:46:5b:d8:bc:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 6 15:53:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a923cb0137670e4e440c08ce5256dec3086c33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:64:be:5c:8f:ce:fd:de:1e:91:a2:7d:0d:
8e:59:68:75:7c:2d:e5:74:63:67:9d:00:d4:77:6b:
96:6e:b5:a1:52:48:08:00:bf:9e:f0:f7:f9:74:01:
a0:eb:d9:d1:18:dd:69:7b:79:0b:5f:4c:bb:35:03:
d8:48:fa:54:4f:9a:2a:b3:7e:d0:69:76:28:03:9a:
1c:ad:0c:04:e0:7d:71:4b:b0:29:2b:ae:b3:6d:7b:
7c:17:32:ab:64:af:04:f8:70:5b:19:15:38:1c:b9:
2a:3c:1f:0f:f2:f5:d7:4c:c2:db:d9:09:c4:5d:60:
b2:50:32:f2:85:b9:f4:f2:1e:15:90:9f:4b:03:92:
a7:0e:63:17:32:1a:e6:21:b9:c4:84:5c:00:98:c7:
f2:8f:c2:9b:6f:53:d1:0d:c6:fa:b2:19:f5:c1:d8:
b7:b9:ab:f8:41:5a:a3:84:ac:c2:3d:dc:bc:55:09:
39:4a:6e:ad:4a:8c:8f:8f:1a:47:ed:9f:0b:cf:5d:
07:c6:98:b6:ff:84:8f:b3:b3:f9:b7:cf:8f:00:a7:
93:c9:ef:1a:e4:03:f9:4a:bd:98:b8:4e:e6:e3:b3:
0b:fe:0f:ef:d3:08:e5:2c:85:ee:54:f5:4d:3b:51:
54:b5:ed:12:70:fe:48:c1:6b:62:43:be:63:62:e6:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:92:3C:B0:13:76:70:E4:E4:40:C0:8C:E5:25:6D:EC:30:86:C3:3F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GpI8sBN2cOTkQMCM5SVt7DCGwz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.76.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:9d:f7:a1:61:af:1e:ef:03:21:23:86:8a:4d:23:9c:27:f2:
63:76:44:1e:82:e1:81:5a:b2:0b:42:05:26:8a:9d:9d:82:74:
33:e9:f4:90:1a:75:73:21:a8:ee:60:6e:eb:8c:87:c3:24:fe:
23:1d:78:84:42:31:b3:63:6c:23:c5:4f:98:15:1f:99:db:b0:
c6:fb:5f:1b:07:82:a1:2e:d7:a6:32:6a:11:31:28:57:65:ce:
c9:5c:c6:bc:e0:6d:6a:3e:90:ff:d6:a2:e6:0e:e3:1f:f6:e6:
8b:be:a6:b3:26:cb:47:81:6f:cd:c1:72:25:d5:11:d1:ed:69:
d5:60:08:a2:bc:bc:3d:8e:1b:7a:86:79:0b:9b:01:f7:0e:f7:
01:63:c7:22:4c:94:66:e6:f1:01:f2:a4:73:f4:6e:78:72:e4:
7c:f1:dd:49:fe:c1:ba:73:bd:6b:a0:bf:67:8d:2f:17:c0:11:
e9:ae:c9:0a:57:be:cd:26:95:07:a1:f7:29:95:e7:41:d3:c1:
8e:a0:57:81:65:40:52:93:6e:38:cc:68:95:4b:41:fb:30:26:
46:11:d4:9b:58:a4:cd:af:4b:d0:f1:5e:c9:48:e9:0b:36:cb:
c2:3d:17:b7:e3:c1:8b:68:f4:cf:04:12:94:5f:7a:8f:b8:c0:
1d:79:63:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:46 2025 by rpki-client