Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/JjcLZGuyLgIo7sscNe1lTXgQ2qw.roa
File: JjcLZGuyLgIo7sscNe1lTXgQ2qw.roa (raw, json)
Hash identifier: yov5t9IzlLULjVQIxilX737IcyMMJjqyKN9F9q8eIZo=
Subject key identifier: 26:37:0B:64:6B:B2:2E:02:28:EE:CB:1C:35:ED:65:4D:78:10:DA:AC
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 0197C20E3D4A6D6C87E0E0BF54E2E6CA736F
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/JjcLZGuyLgIo7sscNe1lTXgQ2qw.roa
Signing time: Mon 30 Jun 2025 18:16:42 +0000
ROA not before: Mon 30 Jun 2025 18:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6205
IP address blocks: 185.70.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:0e:3d:4a:6d:6c:87:e0:e0:bf:54:e2:e6:ca:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Jun 30 18:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26370b646bb22e0228eecb1c35ed654d7810daac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:15:a0:3b:cb:63:4e:48:3a:a0:57:40:8a:
b6:e1:04:bf:bb:5e:b9:46:36:0c:9d:07:ab:f2:b0:
a9:d8:56:a3:50:33:4c:c0:0c:55:04:6f:16:fa:35:
4d:e8:0c:43:3b:f0:d5:a9:93:2f:73:6a:e5:5e:e6:
e6:b5:37:c9:f7:2f:80:8e:24:12:15:d3:ba:2f:83:
00:9d:56:06:1d:59:b7:29:bf:b9:6d:4b:b9:70:ac:
7a:82:03:80:ee:75:91:fa:ba:86:c3:11:cd:a0:2c:
69:8d:f4:3e:1a:ba:af:2c:e4:15:92:88:c5:9c:0c:
cc:d2:35:84:0c:f9:e1:f4:38:89:4c:8b:aa:4a:20:
ba:bf:e5:b6:81:e3:4c:26:8d:f4:40:5f:9c:a9:b6:
e1:dd:95:f6:23:21:82:8a:b3:c3:51:9b:cd:12:4b:
f0:60:db:72:32:23:51:96:28:24:38:6b:c9:24:51:
27:99:84:59:2c:71:a4:4f:3a:07:58:0e:0e:30:9c:
19:57:1a:f4:9f:78:3f:e9:16:a6:7d:5f:4f:15:b4:
bf:a0:66:6f:60:32:d4:90:c7:e5:55:e0:3f:89:4b:
13:2d:fe:37:c7:be:10:ea:fa:76:56:0d:39:d9:dd:
80:94:97:d3:84:a4:d8:a1:e3:d6:fb:9e:66:5a:54:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:37:0B:64:6B:B2:2E:02:28:EE:CB:1C:35:ED:65:4D:78:10:DA:AC
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/JjcLZGuyLgIo7sscNe1lTXgQ2qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.84.0/22
Signature Algorithm: sha256WithRSAEncryption
52:60:73:07:84:a8:f9:bc:68:0b:75:fc:33:e4:d0:2e:48:70:
77:ac:58:67:04:9c:8b:ff:1c:04:cb:aa:b1:0e:8c:85:2b:e1:
6e:fb:bc:dc:38:6c:0e:b5:6d:5d:27:53:e5:8a:7f:e9:5c:80:
e8:97:0c:6f:fa:e4:c6:b7:a4:c9:6b:35:06:9e:df:99:4a:3c:
a6:fd:c7:b9:48:6a:7b:97:df:26:38:10:11:b3:a2:d0:21:ce:
af:5e:5d:58:87:71:10:b7:12:38:74:fe:8a:d7:35:69:48:24:
05:9c:0d:a3:db:e8:8d:35:6e:35:cc:67:50:fb:aa:c1:79:9d:
fd:f8:6a:3f:43:1a:2a:10:41:74:4c:77:a0:e8:82:00:79:d4:
86:29:48:75:70:8f:57:18:5c:2e:56:54:36:92:5e:35:d8:a6:
4f:da:c9:f8:c4:bc:cb:2f:2b:bc:d7:a6:30:c3:c7:ca:31:71:
ae:0b:ab:92:88:45:cb:44:39:43:d8:8b:1b:a7:1b:25:c6:e1:
3c:91:ea:d7:d4:e9:80:c2:9d:58:68:d0:86:c3:7d:8a:06:b5:
fd:25:71:ba:b2:c6:77:22:14:81:2e:31:e6:9b:65:a9:2b:90:
98:96:0b:51:7c:22:85:45:1c:85:e0:67:bd:d8:b0:91:ab:8f:
29:15:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:48:21 2025 by rpki-client