Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/JfryfnDf58cdzPixCTHxiiFWu-Q.roa
File: JfryfnDf58cdzPixCTHxiiFWu-Q.roa (raw, json)
Hash identifier: K0Yl8xYuw8CDSrVjNHAKQ9wJ8kHE2ag93Ne1V4LiqEk=
Subject key identifier: 25:FA:F2:7E:70:DF:E7:C7:1D:CC:F8:B1:09:31:F1:8A:21:56:BB:E4
Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial: 01998044E54A0B73F230B62B2E6E373C4260
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/JfryfnDf58cdzPixCTHxiiFWu-Q.roa
Signing time: Thu 25 Sep 2025 09:47:02 +0000
ROA not before: Thu 25 Sep 2025 09:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 45.88.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:44:e5:4a:0b:73:f2:30:b6:2b:2e:6e:37:3c:42:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
Validity
Not Before: Sep 25 09:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25faf27e70dfe7c71dccf8b10931f18a2156bbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:73:28:1d:70:a1:2f:4c:57:ac:ee:66:69:
10:84:ee:9d:d1:ee:65:17:0f:dd:98:76:a5:f4:3d:
a6:1d:20:1e:9b:03:16:32:3f:3e:ef:20:73:35:b8:
33:3e:ad:e3:cc:5f:e4:85:02:d7:8e:82:fa:49:3c:
0a:29:26:e9:27:57:50:bf:71:4d:be:93:70:2d:c8:
7a:55:e1:ca:30:b1:9d:8a:02:60:bb:eb:c2:85:4b:
f0:0f:69:e4:13:93:83:81:bb:19:65:86:fb:cb:7f:
39:9e:66:20:c6:e6:3f:4d:77:6a:ad:1c:d4:7a:0e:
a1:58:bc:84:35:4e:f6:85:ea:4f:e6:32:0a:fd:19:
8e:63:ab:d9:6d:e0:68:04:c1:cd:26:27:b1:99:10:
d4:95:0c:aa:21:98:f9:84:2b:df:01:46:c7:36:e9:
8e:e9:83:79:2b:32:9c:e4:c1:19:fa:8e:95:95:c1:
b7:b6:e6:2b:9d:87:31:6c:af:4d:41:c7:d3:33:32:
38:d1:b8:6e:3f:7f:de:62:ec:58:14:23:e6:c3:85:
68:4a:7b:b8:05:f8:f8:29:b8:4f:a1:4e:1c:e8:1d:
3e:19:f2:22:eb:3a:64:49:09:86:15:b8:62:52:6d:
71:c4:5d:d9:cb:cd:bc:93:d5:cf:27:1c:1f:9e:5f:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:F2:7E:70:DF:E7:C7:1D:CC:F8:B1:09:31:F1:8A:21:56:BB:E4
X509v3 Authority Key Identifier:
keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/JfryfnDf58cdzPixCTHxiiFWu-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.249.0/24
Signature Algorithm: sha256WithRSAEncryption
77:46:ae:f3:e4:59:64:d3:85:41:f4:19:39:c3:90:e2:8a:b3:
a0:1c:83:31:f0:5e:93:21:a6:b5:08:95:08:64:90:57:bf:80:
45:07:c7:56:f1:c1:46:ff:d5:46:a1:bf:9d:1d:38:87:8a:17:
ce:62:f3:e9:d5:68:5e:3f:68:7d:e8:d3:43:32:6a:6a:26:8f:
6d:35:75:e0:e2:7f:35:88:99:0c:ea:d5:bc:cf:66:77:ea:e9:
39:b5:d8:d5:48:09:ef:da:c7:af:0d:e7:8a:51:1b:4c:a0:9c:
f0:6c:84:f6:65:1c:6a:af:25:87:06:46:7f:f2:1d:cb:24:af:
9c:b0:1a:2f:f9:b1:8b:fb:71:98:45:2a:9e:8b:b4:11:01:3d:
9d:da:a1:50:5f:0f:b0:2c:f2:9b:33:35:d2:61:cd:07:88:50:
92:37:cc:74:ff:14:17:e8:11:71:39:84:3e:57:6a:0f:5d:8e:
7f:9b:79:34:02:f6:c2:ee:50:a3:da:73:68:9c:69:f1:94:2d:
6e:6b:f1:e8:3f:29:c3:7e:d0:34:49:47:79:2f:85:cf:e4:a1:
b6:ca:d5:cc:a7:65:c3:39:8b:55:ef:90:46:9e:14:85:bf:d4:
fd:d1:06:91:32:8a:2e:0f:5f:ae:29:08:ed:a7:fd:9a:7c:c3:
78:f8:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:30:08 2025 by rpki-client