Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/JB9Y7wnJwFNh42qjbGzSSoW0uhI.roa
File: JB9Y7wnJwFNh42qjbGzSSoW0uhI.roa (raw, json)
Hash identifier: idOHiv8xfyir4aZA/b0dlRbG2HOO8hhEFkrMoBmk7Eg=
Subject key identifier: 24:1F:58:EF:09:C9:C0:53:61:E3:6A:A3:6C:6C:D2:4A:85:B4:BA:12
Certificate issuer: /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial: 019830F1BCEC599E7C75AA0F1B68B8A6949C
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/JB9Y7wnJwFNh42qjbGzSSoW0uhI.roa
Signing time: Tue 22 Jul 2025 07:03:25 +0000
ROA not before: Tue 22 Jul 2025 07:03:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198726
IP address blocks: 5.10.0.0/21 maxlen: 24
91.137.64.0/18 maxlen: 24
91.137.124.0/22 maxlen: 22
185.14.64.0/22 maxlen: 22
185.35.216.0/22 maxlen: 22
185.233.220.0/22 maxlen: 22
185.238.160.0/22 maxlen: 22
185.240.224.0/22 maxlen: 22
2a02:acc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:f1:bc:ec:59:9e:7c:75:aa:0f:1b:68:b8:a6:94:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
Validity
Not Before: Jul 22 07:03:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=241f58ef09c9c05361e36aa36c6cd24a85b4ba12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:65:cd:c4:8f:8f:a8:54:fd:bb:70:2c:8e:
c2:58:79:c5:82:95:7d:90:55:63:a7:85:b7:5a:a6:
fd:57:9f:6c:32:9a:00:29:ed:62:d5:b5:4b:7b:1f:
3a:56:a3:62:35:ff:b7:07:fe:2e:e2:79:65:be:16:
5f:ad:71:e6:cd:e1:34:66:2c:5c:69:bd:b9:5a:4a:
ec:1a:52:3b:7e:8a:77:0e:44:c2:c5:fb:f5:52:78:
12:d6:78:db:7c:c2:a6:e9:07:2f:d9:ad:51:88:6a:
52:c7:e0:c4:88:78:9f:19:86:bb:26:7c:76:4a:e9:
f1:45:d3:bd:11:f1:20:2a:f8:98:ae:dd:9e:0e:08:
ce:65:bb:f1:c9:ee:ed:84:e6:f5:4f:6d:f3:a5:77:
c8:83:22:13:ad:56:7c:16:90:58:b2:32:cd:52:36:
1a:c1:91:9a:ec:ba:d6:d9:d4:41:42:5a:b1:4a:aa:
99:ed:00:61:77:ab:61:4f:ba:6e:fb:f8:07:93:7b:
fd:15:8e:f7:ab:8d:a1:21:89:63:23:1d:59:6a:f1:
63:6d:1a:9b:5b:e7:7a:53:ed:b9:c5:58:c8:15:f1:
60:7a:79:c5:8a:ab:f9:56:79:45:c1:fc:82:f8:32:
2e:4d:1f:d6:17:4e:53:da:d0:f7:d3:54:47:e3:db:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1F:58:EF:09:C9:C0:53:61:E3:6A:A3:6C:6C:D2:4A:85:B4:BA:12
X509v3 Authority Key Identifier:
keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/JB9Y7wnJwFNh42qjbGzSSoW0uhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.0.0/21
91.137.64.0/18
185.14.64.0/22
185.35.216.0/22
185.233.220.0/22
185.238.160.0/22
185.240.224.0/22
IPv6:
2a02:acc1::/32
Signature Algorithm: sha256WithRSAEncryption
18:10:d8:09:08:d8:d2:af:d4:2f:73:05:17:07:fd:60:13:9e:
30:2a:00:2d:5e:12:d4:c1:fa:c5:8b:72:64:c8:ac:51:11:72:
1f:c6:51:ab:10:b8:c5:69:43:c7:99:9a:2c:f8:88:c0:61:5f:
e3:f3:84:7d:05:63:24:18:49:39:5d:48:7a:23:0c:63:06:d4:
fb:04:10:19:05:d5:03:0b:2c:18:68:2c:0b:3c:bf:e8:0c:c2:
a4:e3:b4:08:72:b2:c2:7e:71:4d:c1:0a:1e:83:f6:69:ca:30:
dd:49:85:74:d3:d3:2f:3d:a8:cf:c5:3a:d7:5c:8d:1d:21:d4:
0b:e6:2b:85:5d:82:fc:72:57:64:cf:ea:24:07:92:f1:ce:50:
8c:80:b5:1c:12:54:96:2d:f2:b1:49:5a:c8:cf:3b:4d:d4:7f:
03:4d:ac:c5:4e:74:8d:c4:d9:e5:dd:98:b5:12:2d:a0:33:67:
bd:0a:6a:00:d8:8b:fb:47:3d:0c:fc:09:2a:b6:32:b4:0e:5f:
f1:58:6e:d1:0d:82:18:35:01:7f:97:d0:0e:9c:a2:4b:68:1f:
6e:9b:c4:6f:7a:46:01:03:11:87:be:68:86:dc:d3:e9:b1:64:
bc:02:74:4a:78:99:ce:ab:54:3b:b9:75:33:b1:11:33:d4:85:
b4:86:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:58 2025 by rpki-client