
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Ge-sdc_RhsJevkQCq5DXSj7W5SM.roa
File: Ge-sdc_RhsJevkQCq5DXSj7W5SM.roa (raw, json)
Hash identifier: cppMW1hN3HemsqcEnmgRLycbL6rv3c6Bv6GxyK4Dr7I=
Subject key identifier: 19:EF:AC:75:CF:D1:86:C2:5E:BE:44:02:AB:90:D7:4A:3E:D6:E5:23
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01999F37B445545C891FD01B0FAD9E4B29F8
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Ge-sdc_RhsJevkQCq5DXSj7W5SM.roa
Signing time: Wed 01 Oct 2025 10:00:51 +0000
ROA not before: Wed 01 Oct 2025 10:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204487
IP address blocks: 95.164.13.0/24 maxlen: 24
95.164.52.0/24 maxlen: 24
95.164.94.0/24 maxlen: 24
95.164.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:37:b4:45:54:5c:89:1f:d0:1b:0f:ad:9e:4b:29:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Oct 1 10:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19efac75cfd186c25ebe4402ab90d74a3ed6e523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:73:a9:b8:bf:67:a4:f7:4a:ca:b5:ec:72:
83:fd:13:f8:a3:8d:97:36:b1:a4:68:a1:f2:99:c4:
90:72:0c:1d:54:68:26:3b:48:04:a0:d5:45:27:4d:
98:53:09:68:fb:d7:f7:f4:ee:80:81:4c:80:0e:ac:
3c:c5:f1:a9:3d:1a:a7:e8:f7:05:9c:7a:7d:44:a8:
de:5d:3a:62:dc:c6:72:72:d8:83:ce:f1:10:94:c9:
36:55:01:a3:f2:ad:79:84:f8:c2:a6:5a:8b:09:72:
4e:ae:ed:d2:aa:28:1d:af:8a:b2:f9:12:09:05:86:
e6:b4:49:ff:47:44:3f:d6:fc:06:ea:b1:15:ae:2c:
bb:2d:00:34:36:55:98:df:86:9a:e5:47:b9:f3:7b:
32:9f:12:c0:a4:7b:4e:64:1d:0a:d0:1a:7a:91:97:
96:91:61:eb:9f:08:09:e4:7c:5e:1e:35:cf:5c:c2:
69:e4:c9:cd:af:82:16:33:10:99:d9:2d:4f:0c:de:
a4:ea:83:e8:3c:bc:b6:09:43:ae:5f:7f:c8:39:73:
be:06:5e:f9:ef:a5:06:bc:16:57:da:80:be:eb:b6:
c9:0b:28:3c:89:05:eb:af:3c:b4:44:29:2d:90:52:
09:fa:8e:d9:2d:e7:64:f3:a1:6a:0b:47:72:67:f4:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:AC:75:CF:D1:86:C2:5E:BE:44:02:AB:90:D7:4A:3E:D6:E5:23
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Ge-sdc_RhsJevkQCq5DXSj7W5SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.13.0/24
95.164.52.0/24
95.164.94.0/24
95.164.122.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e6:9a:65:bf:03:39:76:c5:4c:ca:e1:20:87:f9:e0:9a:3f:
e5:f9:2a:82:51:bc:01:19:65:82:9f:ca:d2:a9:be:f7:63:24:
2c:fe:9d:67:a4:07:95:12:28:34:59:a9:08:65:43:4e:10:1d:
80:19:18:2e:61:b3:f0:30:74:b8:7c:25:59:04:3a:cc:30:7a:
e3:e5:ba:96:b3:f0:b9:b4:8c:98:cc:3f:cb:0b:11:d6:10:de:
4f:84:03:9f:42:fb:83:c2:d0:71:5d:8e:a9:4c:09:f3:dd:09:
6e:07:69:5d:51:48:22:e7:1f:af:7b:4f:df:24:d6:6d:a2:b4:
44:5d:af:30:1f:0b:1e:02:db:fb:61:6c:d6:b4:4b:08:ef:59:
a8:f4:9a:72:73:51:fd:58:0d:17:72:fb:51:8b:19:24:f2:08:
a3:35:71:e1:d0:75:92:40:ce:6e:25:c8:71:0b:92:f3:a2:1c:
49:ff:82:2d:27:07:11:9b:6d:c2:9a:4f:9d:64:06:ba:f8:6e:
1a:2e:60:11:55:0c:0b:bb:12:2d:65:a9:4e:73:3d:25:d5:0a:
22:7c:9d:8c:99:46:6a:88:36:c2:4a:da:05:b7:c3:c3:95:0e:
25:aa:e1:c1:3e:0a:f1:2a:f1:c7:33:05:7a:cb:fd:f9:7e:a8:
34:85:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:14 2025 by rpki-client