Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/JRgyiOk_LfA7u6guZj8T-mLV5ek.roa
File: JRgyiOk_LfA7u6guZj8T-mLV5ek.roa (raw, json)
Hash identifier: n3a74BFPnSGvy48Z2olIpeDYQbz6pUrH/b/fuU5b5O4=
Subject key identifier: 25:18:32:88:E9:3F:2D:F0:3B:BB:A8:2E:66:3F:13:FA:62:D5:E5:E9
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 01981CA44AF1AC4D187348C8C242BDA42F97
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/JRgyiOk_LfA7u6guZj8T-mLV5ek.roa
Signing time: Fri 18 Jul 2025 08:26:25 +0000
ROA not before: Fri 18 Jul 2025 08:26:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214789
IP address blocks: 85.159.94.0/24 maxlen: 24
91.147.110.0/24 maxlen: 24
194.164.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:a4:4a:f1:ac:4d:18:73:48:c8:c2:42:bd:a4:2f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jul 18 08:26:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25183288e93f2df03bbba82e663f13fa62d5e5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:5a:06:3d:6b:01:63:3f:b7:3f:fb:35:f1:
1f:35:f8:34:b8:22:17:d7:c1:d3:9e:c6:b6:dc:ba:
2c:b9:7b:7b:15:cb:0b:6c:7f:ac:50:36:97:3d:c5:
fc:6e:3d:49:6e:07:e3:95:7b:ee:91:95:43:b5:79:
f5:f6:07:75:e8:aa:d2:c7:9e:65:59:de:42:7b:eb:
ed:4e:c1:63:a8:f3:5b:46:bb:ea:cd:92:ef:6c:aa:
df:f8:08:d0:f9:a3:e3:bd:3b:86:fb:18:2a:22:76:
f3:f7:ce:56:e5:2e:28:8b:28:50:fd:50:cb:f4:41:
62:11:2e:cb:dd:e8:5b:f7:9c:08:3b:3e:62:57:d0:
be:47:d6:4b:3e:fe:e0:a3:e7:09:67:58:0a:70:86:
2c:2b:59:64:7b:73:fb:5f:e4:a3:bf:bd:85:ef:4e:
88:e8:7e:03:0e:c2:77:a4:a6:dc:8a:61:d8:d1:36:
6a:73:e7:1c:57:0e:3c:b6:8e:48:b7:8e:13:88:0d:
f3:91:3b:77:23:fa:ff:c5:7f:ba:84:77:0c:a8:ed:
9b:2f:15:7e:0c:42:ef:92:84:01:3a:10:6e:a0:80:
13:1f:6a:44:55:ba:9c:79:eb:45:5b:a7:70:3b:56:
9a:76:ba:ab:6e:85:82:d2:ec:d4:c6:b9:ae:7b:de:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:32:88:E9:3F:2D:F0:3B:BB:A8:2E:66:3F:13:FA:62:D5:E5:E9
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/JRgyiOk_LfA7u6guZj8T-mLV5ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.94.0/24
91.147.110.0/24
194.164.115.0/24
Signature Algorithm: sha256WithRSAEncryption
34:de:30:59:b9:9b:1e:0a:6f:16:ed:01:aa:37:f5:34:78:40:
50:6b:d7:55:8f:7c:f1:53:75:9f:52:b7:c6:f1:ca:79:d8:71:
eb:0e:fb:1a:5c:74:df:35:ce:f8:1b:56:d2:49:9e:67:f8:84:
d2:72:4e:2f:fe:a6:c4:0b:ba:fe:f6:b8:67:86:46:7b:8f:56:
21:f6:40:dc:d8:6c:60:9c:89:31:3b:74:37:bd:49:45:7f:5c:
fe:e4:b2:af:a7:7a:cf:71:8a:55:3b:7c:d8:a7:e4:ab:e1:cd:
b5:00:c2:92:96:f4:b0:43:0b:07:d5:27:23:84:23:07:f7:e4:
0e:b9:09:e6:58:5a:99:44:0b:25:9e:cb:ea:36:8d:3f:f3:a7:
13:1f:39:fe:7a:cf:8a:bc:7c:08:2d:37:18:a9:be:22:6b:af:
ba:89:64:dd:e4:ec:c1:b8:74:87:2b:e3:18:a1:c2:4c:19:d7:
39:6f:d0:51:47:1b:a7:c4:09:8b:b8:b3:0e:1d:c6:e1:30:4e:
a3:85:6b:37:40:74:94:37:8a:e9:76:8f:ae:51:c6:77:2d:7a:
c5:3a:ee:41:89:4d:5b:99:ca:10:ba:a3:5c:80:8e:78:67:56:
9c:4f:d3:0c:0e:05:62:ff:2c:4c:30:65:12:13:de:12:43:eb:
43:68:9d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:57:18 2025 by rpki-client