Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/gIxZrWlHl0oRXmPccq0bAMsTD7c.roa
File: gIxZrWlHl0oRXmPccq0bAMsTD7c.roa (raw, json)
Hash identifier: icJylGKFEOgR2y+9aMtSkzbhz2/KK1SV2PGADtfOVCk=
Subject key identifier: 80:8C:59:AD:69:47:97:4A:11:5E:63:DC:72:AD:1B:00:CB:13:0F:B7
Certificate issuer: /CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Certificate serial: 0198BDEF4C936731D369523E117BB0636299
Authority key identifier: CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/gIxZrWlHl0oRXmPccq0bAMsTD7c.roa
Signing time: Mon 18 Aug 2025 16:07:13 +0000
ROA not before: Mon 18 Aug 2025 16:07:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213557
IP address blocks: 185.125.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:ef:4c:93:67:31:d3:69:52:3e:11:7b:b0:63:62:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Validity
Not Before: Aug 18 16:07:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=808c59ad6947974a115e63dc72ad1b00cb130fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:f8:de:07:69:33:4f:37:a3:0b:36:aa:18:
58:92:38:88:6a:38:bc:af:5e:29:63:18:81:fb:e6:
8b:70:a9:09:0b:44:a8:10:64:44:e0:b8:8c:e2:3c:
94:e7:95:51:4d:85:a6:94:eb:36:cc:36:90:ed:7e:
20:a9:1c:7a:ee:cc:92:03:77:bb:16:a8:39:04:41:
01:d5:f1:1a:83:5e:0e:fb:87:f9:13:25:39:cf:4a:
de:e5:1a:ef:26:1a:b2:81:a9:9a:37:ab:a9:aa:68:
01:16:6c:b6:71:c2:f6:4d:11:be:48:67:06:6a:d8:
d1:58:2b:e5:a0:95:9e:37:66:ed:69:e8:c7:b2:a5:
97:14:ae:bb:e4:74:77:47:e5:5b:2e:d2:c4:d0:fd:
1a:a2:a8:1e:a9:18:6c:22:84:1b:6b:07:60:03:51:
d8:2c:ff:36:a1:cc:97:a5:5a:15:d8:31:7c:e1:6b:
f1:d9:f6:95:a9:3f:93:4d:d9:5e:2f:57:3e:4f:49:
89:9e:fa:06:c3:c4:93:fa:45:1d:f9:71:10:56:90:
d8:31:c1:28:11:f2:8d:2b:f6:c1:81:fb:18:3a:2f:
10:ee:e1:d8:49:a7:db:13:07:f1:f7:de:d2:3a:f0:
f9:f3:36:49:6d:f3:86:e5:a0:3d:47:f8:31:36:f9:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8C:59:AD:69:47:97:4A:11:5E:63:DC:72:AD:1B:00:CB:13:0F:B7
X509v3 Authority Key Identifier:
keyid:CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/gIxZrWlHl0oRXmPccq0bAMsTD7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:74:55:86:2b:19:3e:b4:91:18:69:58:da:71:10:1b:7a:16:
36:0b:57:d6:b6:dc:77:7a:49:90:2f:b4:79:4a:c1:a3:42:17:
91:49:7d:4f:fc:c7:44:20:4e:3c:20:57:6b:c5:f7:a7:0c:62:
d3:9c:1d:ef:2e:16:e4:65:58:ce:cb:eb:18:93:3b:35:dd:33:
36:65:d2:e0:08:e9:fa:33:ca:e9:84:f5:af:ef:f5:8b:ba:37:
6a:28:f4:1b:6e:63:ea:cf:d8:d9:c8:4b:a2:8b:ad:b2:91:54:
2e:55:51:94:08:0f:67:f1:b4:48:ab:a9:47:8b:f7:5c:2c:ef:
4a:91:ce:f1:92:e8:ae:4f:a9:ba:36:15:91:a3:46:00:16:47:
72:63:d2:6c:90:f9:34:5d:fc:4c:5d:8c:d5:49:48:8a:42:e5:
27:c4:8c:e8:8a:4b:ff:a0:e7:c9:05:bb:9d:ec:9a:25:7c:03:
c5:1a:4a:83:04:91:41:3a:e0:58:74:59:af:7c:f5:6a:db:48:
fa:09:21:fa:d5:7b:4e:ed:a0:c5:df:74:ae:15:d5:82:9f:7d:
d5:b1:4a:56:65:d6:3d:8e:39:0b:c6:43:8f:cb:8e:26:52:9d:
7a:65:e6:59:f1:d6:11:b9:04:e9:6b:57:72:1a:ae:24:12:13:
92:b3:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:24 2025 by rpki-client