Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/gFpuSozNjbiDb1AJzS_liDy9bug.roa
File: gFpuSozNjbiDb1AJzS_liDy9bug.roa (raw, json)
Hash identifier: 6uO133mrJEMpg3Zx3fcNRh5poXGtfnp1W9l14JzLY2c=
Subject key identifier: 80:5A:6E:4A:8C:CD:8D:B8:83:6F:50:09:CD:2F:E5:88:3C:BD:6E:E8
Certificate issuer: /CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Certificate serial: 019970EE83F3EE8DD8EDCFA7F373CA71E334
Authority key identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/gFpuSozNjbiDb1AJzS_liDy9bug.roa
Signing time: Mon 22 Sep 2025 10:18:23 +0000
ROA not before: Mon 22 Sep 2025 10:18:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50627
IP address blocks: 5.42.144.0/22 maxlen: 24
178.20.32.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:ee:83:f3:ee:8d:d8:ed:cf:a7:f3:73:ca:71:e3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Validity
Not Before: Sep 22 10:18:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=805a6e4a8ccd8db8836f5009cd2fe5883cbd6ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:48:e6:4d:0d:2f:7a:55:af:ad:cb:0e:c9:
bc:85:82:aa:24:49:37:b1:db:c3:8a:cf:9c:a0:47:
c1:fd:db:51:18:63:b0:07:8c:f7:bf:58:22:1b:84:
eb:d7:b5:e8:ca:21:5a:48:6e:50:d1:0e:25:01:be:
1c:fa:39:be:7f:26:bb:2a:92:c8:1d:90:b7:1e:82:
e9:31:df:78:00:ed:9b:90:92:1d:b6:e6:cf:7c:eb:
a7:88:bb:57:ad:36:0c:76:a9:74:e3:ca:2a:ef:18:
ef:0b:85:a8:58:f9:48:a2:bf:a8:9a:f7:c1:71:a1:
55:ff:1e:2e:67:1d:c3:59:42:97:fd:85:99:bc:81:
1c:94:e9:be:85:a7:1e:b6:08:1c:17:60:b3:0c:37:
c4:48:91:7c:90:28:94:49:1d:d6:1d:ed:f5:0e:5d:
32:f4:62:ff:57:f1:06:b0:c8:22:49:7d:49:ff:f7:
3f:61:7b:03:14:3a:f7:f8:56:96:f2:88:b7:ac:2e:
f2:15:43:4c:f8:46:d1:ae:a4:93:99:25:f3:1e:9c:
4a:07:94:33:db:ce:aa:3b:9a:9a:5f:c5:0b:62:f5:
b4:4b:d9:18:e1:db:39:51:13:b0:df:44:5a:9e:3e:
14:d4:80:fa:81:ff:8f:a1:10:d0:15:93:b0:29:e4:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5A:6E:4A:8C:CD:8D:B8:83:6F:50:09:CD:2F:E5:88:3C:BD:6E:E8
X509v3 Authority Key Identifier:
keyid:84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/gFpuSozNjbiDb1AJzS_liDy9bug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.144.0/22
178.20.32.0/21
Signature Algorithm: sha256WithRSAEncryption
35:a6:e5:8f:fd:eb:cd:d6:d6:df:43:19:ca:5c:84:73:b7:57:
c6:e6:5a:2f:4b:db:3e:20:bc:a0:e8:55:4b:03:06:12:04:ac:
81:b7:af:c2:f9:84:37:0c:56:30:f5:ff:cf:50:a9:8a:86:27:
84:f0:da:92:fb:19:d1:d9:9c:61:ee:46:0a:b6:cf:4e:70:df:
e2:49:42:c5:96:63:6c:cf:81:b9:0c:6c:5d:2b:60:fc:76:a0:
a3:9b:de:d0:4a:af:38:1b:fe:87:d1:1b:e9:c3:b1:8d:37:2d:
a0:61:ba:2c:39:8e:07:8a:9a:c1:37:61:b5:ef:8b:bf:e1:55:
4f:dd:94:c9:71:c4:9f:73:46:8d:b9:83:03:29:b8:f0:2b:be:
93:df:75:88:6f:81:44:ce:49:14:af:07:9c:00:df:24:93:52:
9b:9f:7c:8f:58:48:3c:81:d3:84:86:e2:41:a8:3d:d3:b7:9e:
9a:34:2d:4b:e0:c1:f3:d4:29:49:47:0a:11:55:c1:72:7b:d3:
6d:0b:e5:1f:07:a2:64:aa:87:5a:13:3c:f5:d3:6e:49:6e:88:
fd:37:04:f7:4e:96:c5:ae:fe:4e:05:67:8e:24:8b:31:f8:3b:
00:8a:b0:81:94:68:1b:0e:01:07:93:b8:b5:e2:34:13:f4:76:
c0:8d:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:21:12 2025 by rpki-client