Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/jzVv027jpWgnkDrAf-mz9sGOGww.roa
File: jzVv027jpWgnkDrAf-mz9sGOGww.roa (raw, json)
Hash identifier: POLvLvEiakYNWXCw8evm2UNxioeFT3u7bWw+xOipttc=
Subject key identifier: 8F:35:6F:D3:6E:E3:A5:68:27:90:3A:C0:7F:E9:B3:F6:C1:8E:1B:0C
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0197F9E3DC4EB05A58D34C7445BE5670BB8B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/jzVv027jpWgnkDrAf-mz9sGOGww.roa
Signing time: Fri 11 Jul 2025 14:29:09 +0000
ROA not before: Fri 11 Jul 2025 14:29:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 46.8.176.0/24 maxlen: 24
46.8.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:e3:dc:4e:b0:5a:58:d3:4c:74:45:be:56:70:bb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jul 11 14:29:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f356fd36ee3a56827903ac07fe9b3f6c18e1b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:96:a9:2c:6a:28:df:0d:3f:eb:6e:93:09:
c2:28:bd:11:41:fb:ce:41:60:23:a5:2c:19:40:46:
b2:87:d9:2b:eb:6a:e5:c3:88:fa:a5:91:f5:70:ec:
f5:0a:4f:dc:95:23:0d:b7:6c:82:54:bd:dd:34:aa:
8f:88:5a:0e:f1:ae:b6:35:f9:08:da:f8:27:09:0f:
e3:27:ef:a0:30:0d:a7:94:46:21:10:d6:34:de:36:
a4:9a:58:65:a8:07:35:a4:46:3c:66:5f:b3:06:f4:
ae:10:11:41:35:d7:29:0e:b3:29:7c:a8:4d:45:e7:
88:d9:13:f1:80:6d:20:13:5a:f2:24:e1:f9:85:c9:
1d:dc:b7:32:58:f8:7f:c1:da:e0:52:e7:84:6a:3a:
3e:53:ef:9c:c9:7e:1c:ef:3e:dc:99:5e:fa:49:6c:
90:d4:af:1f:52:6c:f6:91:d0:b8:a3:b8:4d:f6:95:
4f:85:60:a7:a8:5c:d4:5f:c4:4a:95:62:44:d8:41:
e0:24:ed:16:48:f3:1b:1d:6d:c6:e3:b8:3a:e2:4a:
ed:8a:37:00:cb:5a:70:1c:3c:62:42:90:e5:f7:d3:
fb:1c:9d:6d:e4:c0:56:0a:35:c0:b0:95:12:03:9f:
ab:63:0f:1b:fc:7c:1c:81:e5:2b:34:bd:b4:34:aa:
24:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:35:6F:D3:6E:E3:A5:68:27:90:3A:C0:7F:E9:B3:F6:C1:8E:1B:0C
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/jzVv027jpWgnkDrAf-mz9sGOGww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.176.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:16:fd:70:a2:2b:aa:10:66:99:cf:1e:2c:e6:de:69:ef:69:
37:06:06:17:63:b8:61:89:8b:0e:82:66:f7:4c:da:c5:27:3d:
82:e7:47:fb:9d:f9:63:13:55:36:01:f1:b3:c1:ba:e2:d7:6a:
e3:01:06:da:9f:8c:d9:10:4b:b3:bd:a5:ba:ff:05:5f:45:b1:
c2:0a:d7:6f:84:cb:72:c1:03:11:81:16:c9:3d:a1:d7:8c:2f:
c1:f0:fb:1d:d0:53:93:76:52:ce:92:90:20:04:21:48:18:a8:
b3:62:9c:8e:e1:d9:1b:5c:30:ce:b9:f0:28:b4:37:aa:33:dc:
8c:f5:d9:dd:28:79:ac:04:53:36:7c:5d:1d:bf:4b:e3:12:fd:
98:11:34:df:f1:59:71:fb:4f:33:8e:bf:a8:25:ca:9b:3b:16:
ad:5d:b6:3d:3d:9c:c9:e5:32:87:ef:43:de:87:b7:21:1c:10:
37:f1:ce:49:7b:8a:c6:59:cf:72:2b:8b:53:50:6e:2e:ad:7c:
a3:d8:2b:30:42:d4:c4:c6:f6:54:46:42:0a:5e:9a:b3:7c:57:
e9:69:75:7a:e0:ec:1b:e8:90:b6:d9:c4:99:e4:b2:6f:c6:20:
59:d4:54:e1:f1:6b:cf:63:43:e5:45:fd:38:30:dd:c8:de:46:
cd:14:6a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:43:05 2025 by rpki-client