Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/jOJMuOf3wW9QD0EWILNZcKmfsMY.roa
File: jOJMuOf3wW9QD0EWILNZcKmfsMY.roa (raw, json)
Hash identifier: IwHFADa8djjRXX5pH/rvBdr8XX2U2mjyDg3i8wc0tqI=
Subject key identifier: 8C:E2:4C:B8:E7:F7:C1:6F:50:0F:41:16:20:B3:59:70:A9:9F:B0:C6
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 019829C5315A37FEF1B7473FEA597CC8BB82
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/jOJMuOf3wW9QD0EWILNZcKmfsMY.roa
Signing time: Sun 20 Jul 2025 21:37:25 +0000
ROA not before: Sun 20 Jul 2025 21:37:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 79.110.29.0/24 maxlen: 24
79.110.30.0/24 maxlen: 24
91.200.83.0/24 maxlen: 24
185.50.248.0/24 maxlen: 24
185.89.102.0/24 maxlen: 24
185.89.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:c5:31:5a:37:fe:f1:b7:47:3f:ea:59:7c:c8:bb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jul 20 21:37:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ce24cb8e7f7c16f500f411620b35970a99fb0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:c9:ef:a8:ef:1d:18:a6:6e:a3:e5:1a:8e:
5a:d0:ad:60:51:0a:1a:26:78:ff:8c:f5:74:c7:4a:
d2:b5:82:66:79:59:39:d4:86:b9:ae:d9:52:45:69:
af:7b:c1:24:57:0c:51:44:86:7d:08:bc:36:e4:a9:
07:ec:06:07:9f:c9:12:29:12:63:05:7c:9d:51:ca:
d1:a7:95:8b:58:9c:d7:db:f2:f7:9c:a1:62:e6:54:
76:85:66:27:2c:4a:8d:9a:dd:13:0d:27:97:c4:0b:
b8:c0:4b:a8:91:45:e6:93:9b:dd:87:1d:f7:9d:43:
22:74:7b:60:af:03:33:b4:3d:a5:47:ad:2e:77:3f:
c0:95:77:a6:b7:f8:af:3b:74:03:db:cd:ed:5a:16:
59:63:7a:66:19:78:af:6a:9b:56:6a:0d:0e:ee:a5:
22:2f:14:dd:15:50:7e:ca:29:4b:1d:4d:73:41:69:
5e:d7:4d:34:aa:7f:4f:a5:e2:a7:a5:29:9a:f7:69:
b1:32:0d:6d:36:8e:ef:d3:1a:04:78:b9:1c:97:3c:
bd:ad:ff:7d:1b:0d:ef:91:19:e3:87:57:c9:3f:d6:
96:f6:f0:ef:15:77:97:e5:bb:e3:5d:d4:3f:d9:a2:
43:95:a6:48:c9:77:c0:e7:5f:67:8c:aa:b2:f5:ca:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E2:4C:B8:E7:F7:C1:6F:50:0F:41:16:20:B3:59:70:A9:9F:B0:C6
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/jOJMuOf3wW9QD0EWILNZcKmfsMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.29.0-79.110.30.255
91.200.83.0/24
185.50.248.0/24
185.89.102.0/23
Signature Algorithm: sha256WithRSAEncryption
44:85:90:69:5f:15:06:f3:8f:a2:ed:fe:28:dd:20:e6:a9:15:
23:d9:35:66:8b:1e:92:b0:36:e3:e5:e6:b7:ed:ad:49:14:26:
82:c6:ce:58:47:e3:93:3d:c5:18:57:b3:f2:38:2a:61:3b:af:
1a:f9:26:c1:b7:41:89:3e:d1:1c:3a:68:c6:2d:00:99:0a:4e:
22:70:32:9a:8c:6c:95:da:13:d0:1c:f6:26:68:47:35:65:93:
c7:e7:90:bf:91:c2:6a:41:13:4c:43:53:b2:fe:7a:3c:b2:a4:
99:62:10:c8:3f:c5:4e:e9:57:37:26:d2:e4:5d:b4:0a:b7:88:
29:ee:69:de:4d:1d:76:0a:56:14:9c:12:68:bf:a0:83:b1:91:
df:e6:2b:c1:00:bc:27:b0:a4:b0:16:86:2f:6a:d6:19:24:6c:
c3:15:ff:06:fc:5d:62:57:48:b2:fa:4a:8a:61:59:88:59:78:
6d:05:5e:f9:57:5d:29:84:1b:cc:f0:73:66:a6:77:c0:f7:fd:
b2:a6:5b:19:63:b3:c3:5f:43:ea:89:e8:75:24:f8:4d:9f:c5:
cf:17:0d:9b:71:b0:49:8f:47:31:1c:89:94:ae:a9:28:95:c3:
29:17:86:94:37:70:92:2b:b6:af:6a:fa:18:24:13:b8:74:73:
8a:6c:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:04:34 2025 by rpki-client