Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/g2JKZAWrQ9PgQcHwyGvJzsNe0xU.roa
File: g2JKZAWrQ9PgQcHwyGvJzsNe0xU.roa (raw, json)
Hash identifier: llEQjqrBPaKPzDBBAEYIMH6n/Pi/c4BrlP8wYuBkdKU=
Subject key identifier: 83:62:4A:64:05:AB:43:D3:E0:41:C1:F0:C8:6B:C9:CE:C3:5E:D3:15
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 019913764CEF50709A79F79CF1423FB364A9
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/g2JKZAWrQ9PgQcHwyGvJzsNe0xU.roa
Signing time: Thu 04 Sep 2025 06:42:24 +0000
ROA not before: Thu 04 Sep 2025 06:42:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200514
IP address blocks: 45.87.221.0/24 maxlen: 24
185.192.125.0/24 maxlen: 24
185.192.126.0/24 maxlen: 24
185.192.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:13:76:4c:ef:50:70:9a:79:f7:9c:f1:42:3f:b3:64:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Sep 4 06:42:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83624a6405ab43d3e041c1f0c86bc9cec35ed315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:fa:a7:6e:5d:54:47:b7:7f:5e:37:80:b7:
69:19:18:e7:d5:aa:0e:b3:78:37:bf:aa:13:02:d7:
11:a5:3a:fb:fb:51:c5:a8:c9:27:55:7a:fc:8a:e5:
17:74:3f:0e:7d:c0:52:d5:bc:9a:4e:20:4c:cc:6e:
78:09:bb:8a:4e:11:32:d7:08:ae:e5:41:e3:2a:ac:
61:7f:df:01:b7:28:d6:5e:74:c9:b0:52:78:58:d4:
3c:23:8a:e7:5f:15:fb:26:6b:36:09:64:da:d2:cb:
dd:6f:61:1f:08:5c:4a:88:01:c4:69:17:df:4c:70:
8c:79:a4:48:e0:5d:ba:16:8c:6a:2b:6d:6e:64:c4:
21:42:83:db:2a:66:8e:e7:06:31:9d:e3:c7:3f:44:
ab:03:02:d9:2f:59:ff:ee:94:07:a8:53:8b:e1:5a:
af:6a:12:e6:77:57:77:47:9d:c5:84:c9:42:44:5a:
bd:18:42:a3:64:3f:b7:3a:36:9e:4a:b6:06:98:6a:
70:e8:fd:14:99:94:df:e0:03:00:94:dd:e9:51:5d:
4d:90:88:60:25:09:ab:23:cd:f0:d8:29:77:15:5a:
eb:1f:c4:57:3c:3a:00:81:a9:08:ad:0c:02:c7:b6:
60:5e:95:13:4c:ca:9b:64:6e:b7:99:95:85:2c:09:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:62:4A:64:05:AB:43:D3:E0:41:C1:F0:C8:6B:C9:CE:C3:5E:D3:15
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/g2JKZAWrQ9PgQcHwyGvJzsNe0xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.221.0/24
185.192.125.0-185.192.127.255
Signature Algorithm: sha256WithRSAEncryption
88:c6:42:0a:a8:f6:5c:69:f9:f0:46:26:92:3e:59:33:92:20:
51:93:a7:5b:66:45:d2:10:17:0c:5e:63:74:56:9f:36:0a:85:
c0:76:05:50:15:71:2b:6e:38:3f:eb:12:46:b7:27:51:4e:40:
a2:58:61:ab:6e:31:52:e9:82:a9:2c:8c:d6:30:7f:2e:c8:c7:
0c:bf:2c:17:5c:48:53:d4:e0:30:8b:55:29:63:89:23:27:85:
70:7c:80:1e:e3:d4:bf:d4:4c:1b:f7:f3:84:6b:a3:3a:94:88:
23:3c:17:90:18:90:75:37:82:ce:99:76:ce:7a:6a:d8:3d:04:
02:98:e1:65:42:9b:de:e5:de:07:e8:61:7e:e8:30:a1:80:ba:
7d:21:8d:78:a9:2a:b7:1c:ef:b0:78:78:0a:2c:1f:66:63:4b:
32:30:b9:3c:23:2a:8b:ac:86:0b:2e:8a:60:63:17:22:86:1b:
63:ff:4f:2a:68:8c:f7:f3:1d:47:76:1f:bc:b7:40:ff:51:59:
e4:e6:14:85:57:b7:64:6b:f8:99:a4:b9:ae:d4:9f:09:2f:89:
ad:4c:78:2b:da:cb:75:1e:0a:38:55:74:c6:26:6a:a8:c1:b3:
9c:94:81:ab:4c:da:81:cc:71:ed:35:80:cb:e1:54:02:06:60:
e9:0e:b0:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:49 2025 by rpki-client