Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GLz_jAGCPdG5UU3UUN6J_7W5w6w.roa
File: GLz_jAGCPdG5UU3UUN6J_7W5w6w.roa (raw, json)
Hash identifier: kNCJPI+BZZ4q7//ev13VKFh03Ki1gZ9nxuRAvhOSnr0=
Subject key identifier: 18:BC:FF:8C:01:82:3D:D1:B9:51:4D:D4:50:DE:89:FF:B5:B9:C3:AC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01996245C5F7B6C6AD5C6C9E06F6F2D65ABB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GLz_jAGCPdG5UU3UUN6J_7W5w6w.roa
Signing time: Fri 19 Sep 2025 13:59:23 +0000
ROA not before: Fri 19 Sep 2025 13:59:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29226
IP address blocks: 2a0c:7880::/32 maxlen: 32
2a0e:15c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:45:c5:f7:b6:c6:ad:5c:6c:9e:06:f6:f2:d6:5a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 19 13:59:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18bcff8c01823dd1b9514dd450de89ffb5b9c3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:c3:06:39:57:6b:e2:4a:b1:8e:a4:11:0c:
24:38:1e:04:8e:57:82:2f:8d:67:21:63:5f:31:43:
a5:2c:99:37:51:53:cf:cb:ab:38:a4:0b:58:8b:b2:
b3:4a:a6:62:54:5e:ed:06:e4:d1:26:ab:78:88:39:
d8:cb:a4:78:e0:80:a4:07:80:22:a6:82:85:e1:88:
f8:e3:38:1a:44:f1:61:3c:b0:93:45:18:78:e1:9d:
b8:53:ee:b4:70:4a:b7:84:b8:50:97:cc:2b:9d:6c:
51:18:76:c5:ae:c0:7d:4b:85:ec:09:0e:3f:6b:b2:
4f:80:73:62:b5:ac:fa:12:37:2e:ff:93:d2:8e:5c:
4d:8a:c5:08:16:fd:af:5b:aa:65:ac:4e:8b:33:a3:
5a:61:01:0a:b6:b8:10:60:5f:1b:9d:da:bf:18:35:
f3:eb:f2:8b:40:04:fa:61:f7:43:58:1a:b7:4c:15:
1b:fc:ff:38:cf:98:77:7a:a1:27:56:24:f3:87:43:
16:44:13:47:7f:d7:1b:96:b5:05:bd:33:ac:93:83:
52:d0:38:77:f8:19:bc:a4:f5:b8:ce:4e:4e:2a:6d:
61:6e:c3:e5:d0:9a:54:58:b5:14:50:5a:7e:19:c4:
f1:20:15:c7:4b:bb:53:12:3f:79:a4:53:5e:01:20:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:FF:8C:01:82:3D:D1:B9:51:4D:D4:50:DE:89:FF:B5:B9:C3:AC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GLz_jAGCPdG5UU3UUN6J_7W5w6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7880::/32
2a0e:15c1::/32
Signature Algorithm: sha256WithRSAEncryption
4b:43:30:f6:d6:3d:0c:74:0a:2b:51:ee:de:c3:fc:57:48:f1:
6c:9a:a2:74:36:26:cf:02:6e:75:9b:5f:f6:4f:88:e0:51:fb:
48:c7:46:75:a3:4f:a0:f8:bd:75:bc:04:7e:21:aa:7b:a3:ea:
4e:b3:fa:d6:70:e7:bc:90:7d:b4:f2:12:6e:2a:44:cd:4f:45:
d7:c2:d9:53:e9:3b:fe:7c:53:94:a4:da:1f:d6:9e:e3:e3:68:
9a:06:1a:c4:2b:45:12:23:5a:e3:66:5a:80:58:71:19:e2:4e:
96:b9:e6:0b:66:07:ed:39:1d:43:c3:06:a4:da:69:86:73:47:
36:08:63:90:3b:03:83:b6:55:4d:84:67:5d:8a:72:e6:bd:a0:
ff:4f:fd:27:00:30:ba:00:09:75:8e:bf:cd:ac:aa:0b:6e:ac:
fd:24:76:3a:7a:5c:2d:78:9e:8c:35:8f:7d:34:22:b0:b0:ea:
37:57:84:6d:ae:b6:f0:eb:69:15:da:f5:01:5d:4f:ad:59:6c:
77:ea:8a:9e:36:c9:2a:4d:de:84:e9:cb:62:32:e8:19:ef:bb:
8d:fe:1f:37:47:a0:0d:b2:10:c9:96:14:65:64:84:29:0b:b6:
cd:80:29:85:d3:9a:36:7f:bc:78:ae:c4:dd:67:50:2b:e8:03:
e0:78:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:56 2025 by rpki-client