Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/gI-I1l86jY20LK_fWUXs5iwzVfM.roa
File: gI-I1l86jY20LK_fWUXs5iwzVfM.roa (raw, json)
Hash identifier: w36iDGxkmnNT6l2baGx/5n2Yb8t7rkvKKLKoji6xE8M=
Subject key identifier: 80:8F:88:D6:5F:3A:8D:8D:B4:2C:AF:DF:59:45:EC:E6:2C:33:55:F3
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 01999B460AA452F0EB1ABE4B432C10DDC006
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/gI-I1l86jY20LK_fWUXs5iwzVfM.roa
Signing time: Tue 30 Sep 2025 15:38:02 +0000
ROA not before: Tue 30 Sep 2025 15:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 45.154.204.0/24 maxlen: 24
45.154.205.0/24 maxlen: 24
45.154.206.0/24 maxlen: 24
45.154.207.0/24 maxlen: 24
185.246.131.0/24 maxlen: 24
195.137.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:46:0a:a4:52:f0:eb:1a:be:4b:43:2c:10:dd:c0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Sep 30 15:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=808f88d65f3a8d8db42cafdf5945ece62c3355f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:1c:fb:ed:2d:d9:fc:30:cf:c9:44:17:10:
8d:cb:33:bb:62:d2:db:92:2e:b3:a7:2d:5e:f1:f4:
2b:d5:1f:d4:b0:ab:49:a6:6c:83:e9:96:b2:19:a4:
ce:1f:df:8a:43:02:28:19:11:f0:be:7e:15:ec:39:
48:67:88:76:4e:de:2b:dc:12:1b:11:e1:02:5a:31:
8e:5e:b8:e0:bc:ec:57:1a:2d:fe:5d:c6:9e:f7:2f:
89:28:49:cd:da:fc:ea:60:9a:89:88:25:d6:70:bc:
a3:6d:4b:df:45:70:96:c9:0f:6a:ce:82:6f:a1:19:
9e:92:30:8e:a2:0c:ec:76:13:c3:0d:1a:96:33:5f:
8d:46:dd:f0:fc:42:a3:fb:f6:1d:5a:5b:c9:49:27:
e7:10:01:41:70:93:be:5a:1a:d5:98:79:2a:6a:af:
33:d8:a0:23:02:5d:a2:30:88:59:d1:ee:e4:57:e1:
87:75:ed:62:bb:65:46:6d:fe:fd:7f:23:5d:cb:ea:
5b:9b:31:4f:8f:95:88:db:f4:8a:90:5b:0f:5b:a1:
b0:d4:25:97:86:2e:4d:9e:78:cd:ea:92:e7:e3:23:
8f:87:17:50:f2:a7:4a:57:00:9a:3a:06:c3:31:b2:
02:5a:c4:1b:aa:36:51:81:6f:34:91:42:ca:fe:33:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:88:D6:5F:3A:8D:8D:B4:2C:AF:DF:59:45:EC:E6:2C:33:55:F3
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/gI-I1l86jY20LK_fWUXs5iwzVfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.204.0/22
185.246.131.0/24
195.137.220.0/24
Signature Algorithm: sha256WithRSAEncryption
76:20:61:d5:e5:a7:dc:e6:df:9e:8c:3f:c8:cf:ee:99:e7:1a:
7f:ba:7d:21:8a:3c:3d:e6:cf:87:5a:2f:b7:86:ad:4c:d0:59:
55:ed:49:9f:91:e0:bd:e9:1e:0e:1c:b1:9f:ee:91:5a:97:0f:
95:16:71:91:c9:89:67:3a:41:6f:c6:03:08:73:68:d0:72:eb:
df:3f:64:b7:c1:0f:71:fb:7b:71:5a:8f:ab:d3:cd:0d:1a:51:
bb:80:c9:b6:bf:ae:67:bb:8d:4b:b9:4d:7f:eb:2f:af:ab:1a:
aa:cd:6d:70:37:36:5e:ad:90:bd:37:ed:f0:d9:f5:ca:97:db:
04:71:a8:ae:46:a3:5c:fe:bc:7d:92:ea:fd:11:59:6c:0b:d6:
0e:cc:a7:20:cb:c5:4a:01:8e:b5:6d:5a:ee:bb:d4:2f:ff:7e:
ff:fb:3a:67:3e:0a:68:46:4a:5b:dc:8e:4b:df:27:a8:91:5e:
11:aa:c0:a9:a7:e7:86:9f:0f:e7:4a:49:b0:a1:0b:80:a2:85:
a8:5f:79:ce:63:9b:8f:dc:c5:50:7a:a1:fe:d6:32:4e:9d:be:
3f:73:52:8a:c5:46:4c:fb:bd:28:58:c1:05:e2:f4:73:a2:76:
eb:0a:55:04:40:44:5e:0d:12:8d:df:60:1e:ff:81:13:b1:b8:
a9:f5:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:38 2025 by rpki-client