Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gOur9f5G5_TsmAlnK3ja7lGjuYI.roa
File: gOur9f5G5_TsmAlnK3ja7lGjuYI.roa (raw, json)
Hash identifier: VbaOkcXfs2hbyLhB93vkkjUKgWJ53FBk2752UP4mSQo=
Subject key identifier: 80:EB:AB:F5:FE:46:E7:F4:EC:98:09:67:2B:78:DA:EE:51:A3:B9:82
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0199994F6C39E81C16D8798C98E8D70C66F0
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gOur9f5G5_TsmAlnK3ja7lGjuYI.roa
Signing time: Tue 30 Sep 2025 06:29:03 +0000
ROA not before: Tue 30 Sep 2025 06:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 109.72.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:4f:6c:39:e8:1c:16:d8:79:8c:98:e8:d7:0c:66:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Sep 30 06:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80ebabf5fe46e7f4ec9809672b78daee51a3b982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:74:48:8c:b8:7d:40:34:86:fa:99:e8:76:
00:ac:16:ce:f0:01:a6:26:96:48:1f:68:cb:30:a8:
e3:cc:aa:a7:6f:9b:2c:51:b9:7d:54:60:96:dc:ba:
1d:96:41:e5:df:7d:ea:76:6b:76:a0:b8:1b:75:6a:
55:5e:b7:1e:68:05:5a:92:8e:6e:10:f3:58:ca:35:
6d:98:0a:02:68:98:6d:90:f9:1b:4e:d8:2d:4c:1f:
68:98:9c:9e:70:57:bc:55:92:fc:16:73:fd:c4:9e:
78:60:29:49:f6:3f:c3:93:36:ca:c2:40:72:60:04:
05:31:7d:23:d9:60:22:e0:4b:a0:da:9a:78:9c:35:
4a:bb:a1:29:29:5d:af:d6:c4:db:f1:a6:b5:fc:30:
5b:6f:69:8a:18:3a:f3:1f:2d:67:5f:04:a6:8b:f5:
56:ad:3b:81:9f:45:15:b8:da:f8:a9:f8:ed:d7:47:
a6:62:4c:43:02:87:56:05:6d:6b:9a:2d:02:4e:9c:
39:06:00:9b:e8:ee:dc:c4:46:23:6d:2c:3e:00:49:
21:ec:8d:85:0c:c3:76:fa:b9:49:de:ac:4f:1f:bf:
d8:c4:40:3e:16:7f:73:b5:c2:cb:c0:62:84:8c:83:
f8:86:b9:23:30:47:ad:9e:ba:84:e4:68:28:38:de:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:AB:F5:FE:46:E7:F4:EC:98:09:67:2B:78:DA:EE:51:A3:B9:82
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gOur9f5G5_TsmAlnK3ja7lGjuYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0/24
Signature Algorithm: sha256WithRSAEncryption
05:dc:b9:11:2c:41:3c:78:cd:e7:2b:28:ab:f4:e1:0e:00:13:
5b:2a:66:5e:3f:a1:a6:4d:51:0c:1c:fa:f7:d3:33:3c:d5:48:
26:92:7d:81:ac:ef:a6:4e:af:d8:af:08:57:cf:c7:6d:c8:f8:
d2:f6:4a:ba:7b:06:b2:2c:6e:93:f9:d0:64:86:b4:71:6a:49:
45:15:c8:76:8f:1f:61:41:43:da:df:6f:91:9d:64:ad:25:04:
a3:62:d0:19:09:41:f1:5d:7a:47:cf:ff:6d:eb:73:72:8b:df:
e0:f2:a9:f6:d7:a8:c3:3b:c2:21:38:d4:f2:be:c7:e1:02:c8:
c6:ca:8c:a0:c1:67:7c:0c:f1:19:8f:40:9d:68:f0:00:44:bd:
60:8a:4e:84:12:f2:91:e9:11:db:23:0c:71:e1:ee:84:ea:1f:
8c:ef:f3:8c:98:6f:82:dd:17:79:e1:86:55:1f:c2:ea:ec:21:
c5:9a:25:22:ba:fd:38:d8:e7:5f:8d:1a:20:c8:04:2b:4e:ff:
c7:b4:09:1f:a9:f3:c1:6e:3a:f6:79:58:6a:71:ec:21:81:de:
42:ba:40:5c:f0:d8:f1:4c:09:61:ff:be:2a:e2:a0:a6:a3:9e:
0d:df:74:ac:89:a8:45:eb:8c:3d:6c:c8:f0:85:ac:cd:3c:36:
22:26:6c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:35:02 2025 by rpki-client