Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/gpqrBIPPCCPf0ZtTIR8VqA07mI4.roa
File: gpqrBIPPCCPf0ZtTIR8VqA07mI4.roa (raw, json)
Hash identifier: bX3sQ6zhlmJhD+C6SZtKleOngtVc916nv+7v57xeexs=
Subject key identifier: 82:9A:AB:04:83:CF:08:23:DF:D1:9B:53:21:1F:15:A8:0D:3B:98:8E
Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial: 019796D493BC0B1E28568C7F5D773F70F515
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/gpqrBIPPCCPf0ZtTIR8VqA07mI4.roa
Signing time: Sun 22 Jun 2025 08:50:03 +0000
ROA not before: Sun 22 Jun 2025 08:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209046
IP address blocks: 89.232.4.0/22 maxlen: 22
89.232.4.0/24 maxlen: 24
89.232.5.0/24 maxlen: 24
89.232.6.0/24 maxlen: 24
89.232.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:96:d4:93:bc:0b:1e:28:56:8c:7f:5d:77:3f:70:f5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Validity
Not Before: Jun 22 08:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=829aab0483cf0823dfd19b53211f15a80d3b988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:c7:0a:08:bd:db:2f:79:57:7a:dd:0e:6a:
0e:3e:b7:fa:0b:7b:bd:6e:eb:eb:55:e2:9c:ec:0d:
d5:bf:63:39:3a:ba:6c:31:9d:11:b0:88:34:2c:c0:
15:4f:75:72:92:bb:0d:32:f2:59:fd:92:eb:fb:fe:
24:59:d2:d8:b7:02:51:24:51:50:c4:98:d1:c6:3c:
ae:eb:96:d4:3f:17:f3:08:1f:9e:1a:13:ef:19:76:
b2:7d:15:72:8e:2e:9a:08:df:a9:fe:e3:41:00:d5:
62:70:74:8b:d8:e6:eb:b1:f1:80:82:47:8e:be:2e:
a9:b0:fc:23:2c:ac:38:32:95:5b:b5:d9:b1:84:89:
87:9c:ce:80:88:53:07:92:06:55:4c:bb:7b:23:39:
ea:4f:4d:4e:9f:22:b5:ea:21:cc:77:a4:89:e8:66:
a5:6b:86:42:a7:27:75:cf:d2:af:0f:d9:48:6e:7d:
ee:2b:32:1f:34:ac:8c:ed:20:ae:76:ea:76:1c:75:
04:4a:73:0b:64:e5:2a:2a:b8:91:c0:73:33:53:11:
ef:8c:33:63:a5:e0:cc:02:43:bd:91:39:45:80:f1:
66:43:69:58:09:0b:4f:7e:3c:93:e9:a0:6a:6c:bb:
c5:c3:26:f8:18:6f:ab:e1:9d:7f:ea:bd:cf:22:f6:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9A:AB:04:83:CF:08:23:DF:D1:9B:53:21:1F:15:A8:0D:3B:98:8E
X509v3 Authority Key Identifier:
keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/gpqrBIPPCCPf0ZtTIR8VqA07mI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.232.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:b2:fe:66:63:9f:31:36:ab:a6:3b:10:8e:89:a1:6c:ed:5f:
61:4b:df:dd:d3:a9:2b:6a:4e:ea:bb:ea:0e:67:2c:83:c7:c4:
80:df:05:83:5b:15:6b:60:3a:d2:69:3b:77:b8:96:18:84:11:
be:11:95:ab:bb:80:78:ce:b6:5c:d8:15:d9:c9:33:10:1f:97:
d0:33:96:48:71:70:82:a9:f1:01:96:29:32:12:28:c2:d7:6d:
75:cf:85:28:ec:a3:bb:44:2a:82:d7:24:c7:f7:91:31:d9:de:
71:ca:ff:48:4a:a6:cc:fb:5e:3f:5d:7a:cb:f4:36:7a:3a:b8:
52:e7:51:88:4c:13:22:61:f8:aa:8f:0e:71:17:1d:5f:7c:cb:
b2:9f:81:58:34:a3:4c:c6:f7:c5:7a:8a:c5:c6:a7:aa:1c:a1:
b4:f9:7a:43:0a:a9:af:17:4c:0b:30:5a:21:fd:fc:72:a1:9a:
fa:96:82:a6:f1:5a:02:85:ce:e9:70:26:39:26:cc:d6:53:1c:
9b:7c:28:24:51:f4:af:7b:73:c0:5e:47:99:f6:3f:c4:5d:88:
0f:23:76:33:83:63:ec:c6:ed:72:18:27:ef:44:29:f5:98:d0:
75:0d:16:55:b3:e7:02:fe:dd:49:48:46:b0:66:fe:47:d5:79:
64:6f:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:40:56 2025 by rpki-client