Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/GEK4ZpqBhk_Uf2-g6CPQDmtCUt0.roa
File: GEK4ZpqBhk_Uf2-g6CPQDmtCUt0.roa (raw, json)
Hash identifier: YmXLiGi1pP0XJ9TfEfzlqfyfGLBGlCS0068r1YP0kds=
Subject key identifier: 18:42:B8:66:9A:81:86:4F:D4:7F:6F:A0:E8:23:D0:0E:6B:42:52:DD
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 0199E71E7D1F56AC79DD4BA1E743E706F94D
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/GEK4ZpqBhk_Uf2-g6CPQDmtCUt0.roa
Signing time: Wed 15 Oct 2025 09:05:58 +0000
ROA not before: Wed 15 Oct 2025 09:05:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200178
IP address blocks: 188.72.20.0/24 maxlen: 24
188.72.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:1e:7d:1f:56:ac:79:dd:4b:a1:e7:43:e7:06:f9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Oct 15 09:05:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1842b8669a81864fd47f6fa0e823d00e6b4252dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:4f:a1:de:fd:39:11:43:6d:fa:7d:9a:51:
b9:3c:b9:3a:52:de:29:43:5c:67:43:79:59:0a:99:
88:74:17:da:50:e0:c9:ff:8a:8b:8c:94:1c:92:33:
7f:05:0c:38:fb:73:e0:5f:05:de:9e:9e:8b:ef:06:
b3:eb:a9:46:a2:01:37:19:0d:bf:06:8c:58:ff:58:
80:1a:16:d3:5c:aa:89:2c:01:a9:f9:f9:12:b9:32:
77:83:e6:a6:a3:42:7d:54:44:3f:30:6e:87:dc:00:
a8:8b:b1:ab:1c:39:0b:b2:70:e9:22:f4:54:e7:2b:
9f:ab:6c:1c:74:4c:ad:88:47:ef:b2:0d:9b:b8:06:
9c:84:64:6c:83:19:03:a4:68:cf:bb:28:6a:57:35:
77:60:cd:5a:fa:8a:56:71:f7:42:38:df:b9:26:20:
97:37:73:b1:f7:6a:8c:bc:71:11:a3:88:e6:fc:12:
72:5f:c0:f0:df:b5:6a:e1:38:c8:be:3f:21:bd:d5:
52:3c:45:f3:e8:48:1e:63:06:e4:02:e6:5d:b2:cf:
41:44:25:e5:f1:7a:d6:dc:e8:5d:09:4f:4b:a8:da:
23:50:fd:de:2f:b7:e5:52:75:d5:3c:13:62:28:a9:
18:8c:2d:7f:be:40:f4:51:bb:dc:16:41:5c:71:8a:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:42:B8:66:9A:81:86:4F:D4:7F:6F:A0:E8:23:D0:0E:6B:42:52:DD
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/GEK4ZpqBhk_Uf2-g6CPQDmtCUt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.20.0/24
188.72.35.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:fa:e5:1c:ba:1a:07:ab:a4:77:c2:71:86:ce:0d:e7:3a:dd:
84:ad:00:ea:dc:5f:68:fb:8f:fb:53:7f:f2:72:e2:5c:f4:1b:
c3:5f:8f:e9:25:ce:f9:28:6a:56:ae:f7:10:80:30:64:9c:4f:
fb:24:88:96:12:e1:64:60:e2:c9:91:93:0f:e7:12:04:32:ca:
45:33:a1:58:24:16:36:16:cd:3d:a9:87:9c:a1:32:45:76:c0:
dc:56:f3:e3:e6:d6:42:03:f3:e2:85:5b:7b:72:94:a4:2c:e7:
fd:de:a0:ad:34:9a:49:69:23:29:c6:16:6c:f1:b6:59:d0:b4:
da:20:8a:56:08:03:4a:59:5a:e8:55:86:48:00:0d:54:c1:ed:
25:09:16:f2:ba:40:b4:63:fc:23:32:a5:eb:b8:4e:db:4a:ba:
ea:f5:6f:e2:29:1f:95:13:3a:55:93:0f:1c:48:c2:0c:47:5d:
98:a4:da:48:cb:22:1e:3b:d8:7e:38:21:51:39:9e:77:ae:38:
c4:1a:ec:b1:25:6b:49:b2:6d:5b:e5:a0:f3:6b:19:af:fc:68:
54:85:09:fe:a4:9f:4f:d8:8a:82:5f:c6:28:85:08:bc:22:b6:
2b:d4:a4:c9:fc:69:2b:63:7b:79:1d:40:2c:52:0e:af:75:4e:
3f:1f:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:15 2025 by rpki-client