Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/J9sdBRndgWMXRbtrEj6DzAaduFM.roa
File: J9sdBRndgWMXRbtrEj6DzAaduFM.roa (raw, json)
Hash identifier: 1mU1gIeMkOu38sOl5UhcF+y7DrqaJPBXlv7kx0JqTAw=
Subject key identifier: 27:DB:1D:05:19:DD:81:63:17:45:BB:6B:12:3E:83:CC:06:9D:B8:53
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 01981BFE94562C1B1B1AE6238D5C4E7BF280
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/J9sdBRndgWMXRbtrEj6DzAaduFM.roa
Signing time: Fri 18 Jul 2025 05:25:25 +0000
ROA not before: Fri 18 Jul 2025 05:25:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 195.248.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1b:fe:94:56:2c:1b:1b:1a:e6:23:8d:5c:4e:7b:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Jul 18 05:25:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27db1d0519dd81631745bb6b123e83cc069db853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:75:c3:81:d1:83:c1:3c:b1:32:b0:f9:86:
5f:c2:5c:e3:19:c3:46:30:2d:f8:d1:32:4f:44:29:
f8:44:a8:53:5e:9b:08:4b:64:4b:14:25:f6:84:ce:
6a:3f:db:6e:d9:e9:b9:9b:49:86:e2:6e:68:a8:6b:
72:5a:6d:a9:4a:b8:6c:5c:2d:b9:84:ca:96:76:8a:
05:c6:4b:06:94:90:26:7c:56:73:b0:da:ce:46:45:
c1:7a:dc:c7:9c:c0:43:85:b9:aa:7e:b1:93:e6:19:
59:13:dd:6a:2a:12:ef:c8:d5:2c:63:fa:f4:17:0f:
ca:9a:21:80:b2:f3:39:d4:1b:6e:f1:e2:87:5f:12:
c0:ee:2f:b7:49:ed:9d:82:df:56:4a:0d:ca:db:23:
5c:b2:3e:80:28:b8:e1:01:5f:21:77:3f:9a:63:7c:
c0:11:c5:93:e8:41:44:f6:cc:d4:b3:83:d4:59:15:
7a:f2:a6:60:12:18:dc:ff:ff:af:14:2d:b1:52:81:
f0:7e:bb:51:b2:7d:5f:49:d5:41:58:dd:0f:aa:37:
fe:3d:2d:9a:2f:fb:44:81:d4:c3:00:ec:ac:10:6f:
c0:9e:fc:f8:70:74:1f:2e:d6:13:39:a4:38:60:07:
cf:a1:2f:0d:f8:7c:8b:0b:bd:bc:14:dd:4f:9e:83:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DB:1D:05:19:DD:81:63:17:45:BB:6B:12:3E:83:CC:06:9D:B8:53
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/J9sdBRndgWMXRbtrEj6DzAaduFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.90.0/24
Signature Algorithm: sha256WithRSAEncryption
74:10:cf:5a:9c:79:4a:a9:96:f5:b0:fb:11:39:65:e1:4d:dc:
55:11:66:04:8a:bf:a8:d6:2a:e5:7e:0a:39:02:ff:f1:ca:11:
56:c8:e4:5e:bf:a6:d3:51:14:be:c9:bf:61:94:b5:c8:71:8d:
53:9c:3b:57:f9:72:76:0a:91:d2:a9:38:a8:73:97:51:2b:ad:
22:80:26:f7:a7:c6:2a:8b:a4:80:d4:28:34:a4:76:5f:2f:2d:
93:fb:c4:53:36:7c:52:66:72:38:5a:bf:1b:2c:cf:4e:51:da:
cc:8a:4f:c9:0b:04:3a:f0:f4:5e:6f:97:da:6c:75:fa:11:ef:
bc:52:b0:92:17:89:4e:c9:29:0a:1e:b7:bc:c8:0d:a1:cd:07:
f2:e1:58:ef:df:19:9c:f8:86:24:05:0f:42:78:56:9f:69:68:
3e:51:00:2f:84:e1:9a:09:46:6e:c0:21:29:1c:27:c1:00:ec:
3d:2f:d7:dd:ed:3a:49:19:8a:5f:46:23:40:83:9d:91:cf:27:
1c:c0:a1:e1:f9:21:6a:b6:73:37:09:08:c1:30:27:58:8b:f9:
6d:f3:80:0c:db:7f:88:05:b7:a7:cc:ff:6c:a0:0c:7e:cc:27:
33:8b:74:6c:a1:ae:a7:bb:d5:09:8a:b4:b7:b7:7a:90:64:69:
da:ce:66:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 21:40:32 2025 by rpki-client