Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/g6KZdG6GOmFS1EyUyMBY8rDGjCw.roa
File: g6KZdG6GOmFS1EyUyMBY8rDGjCw.roa (raw, json)
Hash identifier: tD7PjxVbS569hHWyN1mFiCS5hizATSbPnq85D7KgzB0=
Subject key identifier: 83:A2:99:74:6E:86:3A:61:52:D4:4C:94:C8:C0:58:F2:B0:C6:8C:2C
Certificate issuer: /CN=27fca5b7a77d887649f68a45c90d667c76500164
Certificate serial: 0199875A8D8F02E92D90892B69469C8153EC
Authority key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/g6KZdG6GOmFS1EyUyMBY8rDGjCw.roa
Signing time: Fri 26 Sep 2025 18:48:02 +0000
ROA not before: Fri 26 Sep 2025 18:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 402020
IP address blocks: 194.34.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:87:5a:8d:8f:02:e9:2d:90:89:2b:69:46:9c:81:53:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fca5b7a77d887649f68a45c90d667c76500164
Validity
Not Before: Sep 26 18:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83a299746e863a6152d44c94c8c058f2b0c68c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:9f:3d:5a:79:89:69:d3:41:8e:87:f1:3e:
11:34:f9:b5:3a:1a:2d:df:51:04:5d:ac:0c:27:4a:
8b:04:bf:01:66:f3:74:11:22:55:50:fc:e1:92:ad:
ed:4d:a0:65:1a:b9:8e:03:73:17:6d:13:6a:c4:c0:
18:d6:5b:12:74:21:19:1c:e7:31:bd:8e:0e:68:d9:
23:06:6a:0f:4b:06:29:c8:ea:d7:42:67:80:b6:c7:
9c:9d:91:b9:09:14:10:c1:ff:a9:83:d6:44:dd:de:
52:90:10:8f:a8:78:52:18:7f:59:2d:72:d9:69:27:
3b:f8:42:71:a3:98:7b:d9:f3:13:7a:82:ef:30:85:
5b:01:b2:1a:14:b0:c6:31:18:20:df:2a:dd:b1:2f:
a6:af:59:30:6c:67:dd:10:7e:58:75:a9:55:e7:07:
40:64:67:cd:ca:a2:bb:52:b8:12:42:08:51:79:fb:
3d:53:fb:74:0a:36:92:c8:3f:37:f4:91:b6:e7:81:
31:d7:bc:34:f5:74:42:db:be:b5:ef:91:36:18:43:
b5:fe:fc:6d:4d:a8:cc:1d:aa:85:20:b9:c1:66:7c:
80:3c:bb:3d:10:96:d4:c3:b3:84:68:b0:9e:35:26:
e0:b2:a1:aa:c4:f5:22:c3:53:9e:b3:b9:5c:56:6f:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A2:99:74:6E:86:3A:61:52:D4:4C:94:C8:C0:58:F2:B0:C6:8C:2C
X509v3 Authority Key Identifier:
keyid:27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/g6KZdG6GOmFS1EyUyMBY8rDGjCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.167.0/24
Signature Algorithm: sha256WithRSAEncryption
39:71:b7:c3:cb:61:6c:6b:43:7a:01:ba:25:66:57:9e:23:3b:
55:e7:60:31:32:85:36:7d:8d:bc:89:bf:d0:61:e6:5a:4c:82:
35:05:d4:a1:56:32:76:78:5b:3f:87:43:0a:d2:8b:4f:72:e6:
cc:8f:b0:fe:11:d6:5f:c0:49:8d:cc:60:3a:85:2d:65:0f:34:
86:fe:a8:fe:6b:49:95:42:f4:e8:2c:e4:17:28:c5:ed:4e:6e:
2a:7a:13:ec:e9:3b:08:8c:24:69:1e:e7:05:19:6d:d7:c1:65:
aa:df:15:70:82:b4:7a:56:cc:8b:92:c1:45:0a:99:d0:cf:f0:
9f:5c:84:ce:8b:63:4a:e6:40:39:fe:37:cb:5a:5e:dc:f5:8d:
e7:4a:a0:8d:29:7e:c1:bc:c8:68:9d:ab:15:08:e8:9b:d0:e6:
8a:31:00:e0:d8:fe:79:5c:99:67:d9:a1:87:a4:5b:fa:3c:16:
dc:ae:a2:dd:f4:b8:57:a1:79:63:39:a1:18:da:66:64:a9:79:
2b:87:3e:c8:34:82:38:a8:9d:e9:9a:4f:1c:b7:a7:8d:73:fc:
a3:61:df:21:a8:88:dd:ca:eb:d5:48:d3:40:f7:ab:98:ff:f2:
ef:80:41:05:e9:69:40:f4:31:a5:00:10:24:51:8f:04:24:c6:
f8:08:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:53 2025 by rpki-client