Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/GQRzcbGzWvSj3FBVjoQIeOqNNGk.roa
File: GQRzcbGzWvSj3FBVjoQIeOqNNGk.roa (raw, json)
Hash identifier: 9iREodFCIhImvgis0W2BigBjZMAhENAEnDzq98vhkcw=
Subject key identifier: 19:04:73:71:B1:B3:5A:F4:A3:DC:50:55:8E:84:08:78:EA:8D:34:69
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 0199C7ECF08E3D9D1D73F113EB71D67228A4
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/GQRzcbGzWvSj3FBVjoQIeOqNNGk.roa
Signing time: Thu 09 Oct 2025 07:43:38 +0000
ROA not before: Thu 09 Oct 2025 07:43:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41291
IP address blocks: 37.157.56.0/23 maxlen: 23
62.244.78.0/24 maxlen: 24
62.244.79.0/24 maxlen: 24
62.244.108.0/23 maxlen: 23
62.244.110.0/24 maxlen: 24
62.244.116.0/24 maxlen: 24
62.244.118.0/24 maxlen: 24
62.244.124.0/22 maxlen: 24
93.190.208.0/21 maxlen: 24
185.102.176.0/23 maxlen: 23
185.102.176.0/24 maxlen: 24
185.102.177.0/24 maxlen: 24
185.102.178.0/23 maxlen: 23
185.102.178.0/24 maxlen: 24
185.102.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:ec:f0:8e:3d:9d:1d:73:f1:13:eb:71:d6:72:28:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Oct 9 07:43:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19047371b1b35af4a3dc50558e840878ea8d3469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:89:c0:b1:7f:1f:d5:5d:b6:89:d3:ae:0a:
a1:7d:1b:2f:4a:24:b3:72:38:1f:6d:e6:b3:d5:21:
1c:4d:03:f1:0b:b8:c4:0a:c9:a1:5e:69:ad:57:d5:
87:02:96:ff:58:bc:56:ea:40:1f:13:6d:f9:f2:90:
33:2a:66:a9:ea:5a:b2:97:54:46:64:24:29:9c:d9:
67:0d:56:5e:71:27:46:95:da:b7:f3:36:bd:09:95:
e3:6b:21:81:e3:ce:56:ed:ac:b9:05:35:98:5e:27:
05:8b:35:48:de:59:40:87:74:28:a1:ad:03:8b:96:
48:15:65:90:d3:71:20:64:63:f1:1c:df:ca:4f:49:
62:8a:65:e7:02:49:73:10:7a:9b:85:2f:1b:ca:17:
ad:71:70:e3:f9:a4:94:03:ec:61:c8:98:7d:3b:1e:
ec:da:56:0c:77:10:3f:bd:74:97:a6:ba:e5:d3:f3:
00:be:b0:ff:c0:2d:3e:52:5c:07:eb:b7:89:bb:0c:
f4:73:99:aa:20:19:ec:5d:53:d9:0e:94:5a:ec:33:
9b:73:b5:e9:b2:c4:b0:52:d7:b9:fb:1a:b9:63:df:
69:0f:18:e2:b2:f9:19:e6:c3:30:6e:e2:ba:c2:9c:
7d:8c:a4:5b:36:3b:7a:a8:bc:45:df:ac:c2:53:ff:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:73:71:B1:B3:5A:F4:A3:DC:50:55:8E:84:08:78:EA:8D:34:69
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/GQRzcbGzWvSj3FBVjoQIeOqNNGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.56.0/23
62.244.78.0/23
62.244.108.0-62.244.110.255
62.244.116.0/24
62.244.118.0/24
62.244.124.0/22
93.190.208.0/21
185.102.176.0/22
Signature Algorithm: sha256WithRSAEncryption
26:5d:02:6e:17:5a:74:04:7f:c8:97:7b:2c:5a:1e:10:84:a8:
9b:2d:04:78:60:1e:94:69:f4:9c:d2:b9:a9:22:b2:1f:bd:a7:
d7:ed:11:32:08:db:e0:75:91:36:57:c6:d3:14:1b:dd:6a:3a:
c4:e7:73:f3:46:c8:ff:fe:38:1e:4a:f3:93:04:55:14:66:bb:
58:40:a5:d1:8a:80:67:10:c2:90:d3:7f:54:b4:24:94:e0:29:
50:46:90:b4:76:22:c5:e9:32:e5:5b:f4:d9:96:8a:17:8d:5d:
34:0a:df:62:8d:48:b9:fc:77:64:42:9a:ba:28:44:62:35:19:
51:b0:ff:20:09:46:92:91:28:47:79:f3:d6:77:1e:c5:36:8f:
b0:b0:ff:66:d2:99:30:3d:e6:66:90:37:c7:cd:00:ed:b4:eb:
e1:60:a9:5e:26:c8:e2:06:45:85:f6:f8:d2:79:e4:ff:1c:29:
1c:16:a8:95:23:cf:78:34:a6:66:07:58:85:40:99:7c:04:ba:
8d:94:8f:d7:be:d3:35:45:12:27:43:95:01:53:c8:b1:d1:f9:
19:c0:ff:f7:c9:31:84:a4:d6:73:ef:b9:cf:33:fc:d0:86:c1:
48:be:66:79:f4:31:96:55:c6:c6:41:96:c4:25:cf:81:1d:88:
69:3d:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:48 2025 by rpki-client