Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/G9SmysWbMuSxx-EDG3Cs-f8IXqY.roa
File: G9SmysWbMuSxx-EDG3Cs-f8IXqY.roa (raw, json)
Hash identifier: asZN9tI3ws8BcQXeW3lamrTpn0W8Ef30eRexdJjOvPw=
Subject key identifier: 1B:D4:A6:CA:C5:9B:32:E4:B1:C7:E1:03:1B:70:AC:F9:FF:08:5E:A6
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 0197B6083E077F65A394E5512AA17ABCA916
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/G9SmysWbMuSxx-EDG3Cs-f8IXqY.roa
Signing time: Sat 28 Jun 2025 10:14:42 +0000
ROA not before: Sat 28 Jun 2025 10:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 5.181.16.0/24 maxlen: 24
88.214.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:08:3e:07:7f:65:a3:94:e5:51:2a:a1:7a:bc:a9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Jun 28 10:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bd4a6cac59b32e4b1c7e1031b70acf9ff085ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:4b:47:df:4e:83:d2:4d:50:e4:d4:f8:7a:
ab:6a:3c:d8:7b:80:e2:c0:b8:27:79:d6:85:8c:e5:
91:12:b9:7a:74:fb:6f:4c:a6:df:ab:93:f5:ce:5a:
40:16:ff:0a:96:fe:17:82:35:bb:34:1f:13:f2:ad:
3f:00:a5:87:cd:2e:ae:8f:49:f6:de:20:cb:a0:08:
81:ff:0f:e0:88:82:6e:6c:19:73:91:94:e8:62:d5:
65:f1:4c:d1:07:38:4c:2c:81:d6:4d:3a:c8:81:64:
6f:61:01:78:01:ad:61:4a:f9:33:fa:9c:7c:06:a5:
05:40:46:ab:32:31:05:23:f9:c5:b4:f2:cf:18:b3:
90:07:f3:71:f6:6e:c0:3d:14:70:5b:81:cf:64:5f:
44:70:b4:71:2d:a3:16:3c:a6:fa:3f:5f:dc:97:2d:
ef:26:28:7a:72:76:08:be:6c:14:28:6e:ad:2d:4c:
72:94:40:70:e2:90:b7:bd:0d:ea:57:77:38:e9:8d:
6f:43:1f:7a:56:8e:b4:78:df:43:4a:2a:20:4a:45:
83:06:4f:82:5b:98:79:1b:ca:20:7c:49:eb:33:c2:
75:6c:77:8e:30:20:29:e1:4e:b1:42:8d:e9:08:3a:
86:1d:2c:d7:9b:83:4e:db:ea:90:ae:0c:11:5f:73:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:A6:CA:C5:9B:32:E4:B1:C7:E1:03:1B:70:AC:F9:FF:08:5E:A6
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/G9SmysWbMuSxx-EDG3Cs-f8IXqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.16.0/24
88.214.41.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ee:cd:51:19:f8:1a:1d:c2:ba:a0:e0:f8:ca:c7:1f:0c:99:
da:e1:6a:58:d6:fa:e9:96:c3:a3:85:87:6c:37:f0:b7:69:5d:
a6:ac:05:1a:be:bb:03:1d:23:8b:1b:c8:69:ea:75:05:86:20:
bc:61:cb:a1:0a:95:80:3e:db:24:c8:a7:a8:64:82:17:b1:62:
25:b4:7f:f5:ed:d2:ca:ee:68:de:0f:94:ac:06:3a:74:b8:e9:
10:40:91:f6:12:3e:8d:61:2a:7c:4a:6c:b5:67:f6:d6:3d:14:
f5:8b:3c:a2:51:99:1b:47:67:df:bc:e3:f1:ad:8d:a4:1c:87:
84:c7:4e:57:75:66:f4:37:f9:18:f5:89:00:00:68:92:3e:1c:
e6:5e:53:6c:6b:d6:e3:b2:2a:3b:2d:86:d7:97:fd:38:62:2b:
11:4d:c7:40:f8:c3:76:b1:f4:45:d8:b1:75:ba:1e:fe:17:3d:
3c:65:86:42:1a:e9:2f:84:47:cc:0c:fb:92:8c:26:71:df:ab:
53:32:9a:d5:2f:d4:11:f1:30:18:b6:37:ea:9f:ec:44:09:8f:
01:53:90:77:22:d9:87:7a:3f:f9:1b:47:cc:94:93:6b:11:c1:
ef:1b:3d:ac:60:45:3f:e6:83:41:1b:99:11:58:2b:8d:46:fc:
72:30:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:28:16 2025 by rpki-client