Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/GYNpjCcZsLVqMoTSMZuwEaEQM7A.roa
File: GYNpjCcZsLVqMoTSMZuwEaEQM7A.roa (raw, json)
Hash identifier: 8PbLQRFLQ7epoBYFX4wCtzZLiRBCr3C9yNo1Gjt4uys=
Subject key identifier: 19:83:69:8C:27:19:B0:B5:6A:32:84:D2:31:9B:B0:11:A1:10:33:B0
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0198BBD230A93027ACE05A6E7CCE2D3371C7
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/GYNpjCcZsLVqMoTSMZuwEaEQM7A.roa
Signing time: Mon 18 Aug 2025 06:16:11 +0000
ROA not before: Mon 18 Aug 2025 06:16:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60548
IP address blocks: 89.23.109.0/24 maxlen: 24
94.125.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bb:d2:30:a9:30:27:ac:e0:5a:6e:7c:ce:2d:33:71:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 18 06:16:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1983698c2719b0b56a3284d2319bb011a11033b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:f9:b3:a4:d0:be:b7:7e:7e:1c:26:08:79:
ea:a6:6f:55:19:da:46:de:d9:38:f8:bb:6b:8b:da:
84:3d:b8:e0:5f:ea:2e:3d:55:86:2d:33:0b:5b:ca:
85:c9:a9:12:24:f6:4e:60:5e:f8:e3:6b:6a:30:f7:
0c:02:4c:be:94:db:17:38:a3:02:5b:ba:dd:c6:33:
d3:28:f8:69:45:17:a6:0b:19:2d:56:9e:0d:2c:d8:
0b:fb:6a:7e:3b:d1:df:b7:17:ad:5e:57:b5:c2:d4:
02:9c:b0:4c:02:bc:a5:d9:1f:44:ad:a2:32:40:75:
da:70:85:80:ea:6c:f1:4b:40:9a:ce:f9:cc:e3:5e:
e7:ff:e6:53:43:2a:2f:b3:ca:5c:d9:73:4e:91:79:
70:1e:d3:ed:b0:8a:07:4b:99:e4:4d:f8:4e:e3:6c:
c1:63:09:09:8f:8e:4b:02:1e:19:e9:36:bf:d2:af:
6e:a7:f5:75:db:7f:4b:bb:69:d6:61:f3:cc:25:04:
8f:ab:fb:67:6c:9f:5b:dc:c1:9b:2a:3d:52:53:b9:
04:a8:14:20:da:cc:dd:df:5e:96:e9:8f:26:4d:e4:
96:ce:6a:1d:cd:5a:82:44:f3:c8:52:54:70:ab:ff:
1c:f9:83:ec:8d:42:da:62:97:2e:b7:0f:a4:42:23:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:83:69:8C:27:19:B0:B5:6A:32:84:D2:31:9B:B0:11:A1:10:33:B0
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/GYNpjCcZsLVqMoTSMZuwEaEQM7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.109.0/24
94.125.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:10:fb:5c:c6:a6:77:b7:2c:95:74:d2:45:36:3e:3d:a2:01:
ab:85:24:02:ea:3d:d8:8f:1a:6f:c2:54:6e:da:e9:2d:15:41:
9d:47:6a:ae:b0:82:43:a0:13:c3:30:18:b1:58:97:f1:fb:c9:
b7:1b:fd:64:f0:00:86:19:31:50:ef:2e:3a:80:aa:14:2f:39:
bd:76:1e:82:e7:a6:ab:51:b8:08:56:ac:cb:cd:11:b8:ab:63:
7e:7b:fb:85:85:dd:f3:80:fd:23:a8:bd:8f:1a:b5:ab:10:4e:
f5:20:69:1f:bf:81:89:ad:af:b3:a3:aa:81:7c:17:c6:66:3f:
d1:b6:bc:92:1d:0c:c2:58:06:29:a8:6d:8b:2f:89:3a:0e:a8:
f3:a0:c2:49:b3:6d:f9:80:1e:52:87:9a:e3:13:d6:94:c6:c1:
fc:64:4a:7b:7e:56:82:c8:89:5f:f5:59:27:2f:73:c4:32:ca:
a1:56:61:e5:a8:80:14:95:ed:25:ef:95:5c:b0:8b:3f:54:bb:
2b:a1:d2:05:8d:c5:b1:f2:83:1c:7c:6d:58:26:75:9c:49:9c:
a3:4a:fe:26:d7:8f:4e:e7:7b:62:12:96:ff:e9:35:17:09:0e:
83:06:c1:95:be:79:48:bf:a6:d3:44:90:5a:23:94:db:f1:25:
7b:9f:b4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:03:14 2025 by rpki-client