Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/jH9C8p9nitrfAItNyA_YLJEP6ds.roa
File: jH9C8p9nitrfAItNyA_YLJEP6ds.roa (raw, json)
Hash identifier: qAfQVpQ0k0QfJ2KTETvmr94XZk/rf+3SC4Qevdx1ZDY=
Subject key identifier: 8C:7F:42:F2:9F:67:8A:DA:DF:00:8B:4D:C8:0F:D8:2C:91:0F:E9:DB
Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial: 019812AE82C98BF080545B118A6F8F3BD94B
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/jH9C8p9nitrfAItNyA_YLJEP6ds.roa
Signing time: Wed 16 Jul 2025 10:01:23 +0000
ROA not before: Wed 16 Jul 2025 10:01:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206495
IP address blocks: 91.240.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:ae:82:c9:8b:f0:80:54:5b:11:8a:6f:8f:3b:d9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Validity
Not Before: Jul 16 10:01:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c7f42f29f678adadf008b4dc80fd82c910fe9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:a6:29:94:7f:f5:27:41:2a:16:d2:79:e4:
84:b7:ec:2a:6c:54:1d:32:11:ad:b3:a9:1a:a8:63:
71:36:b3:94:f7:3b:21:46:ea:ea:46:f4:5d:90:04:
70:70:b7:1d:59:c6:8b:5a:68:39:45:d8:4f:fb:64:
a8:a0:68:9b:bf:db:f4:e8:74:7c:e2:fa:20:bd:1e:
96:fc:4f:3a:f2:2c:84:29:04:9b:6c:6e:30:f8:00:
ee:cc:54:a2:a6:24:84:ef:75:8d:58:1f:6e:c0:bb:
79:44:d0:23:49:db:0f:39:22:3c:78:05:a6:29:ec:
55:60:06:ea:d5:64:e2:23:b0:76:1c:22:db:8f:37:
c8:98:cc:0a:c7:2b:0f:3a:5e:35:05:59:b8:6b:34:
ff:0e:0d:77:06:80:e4:ea:91:48:3f:33:62:97:22:
ba:45:8c:ad:2b:fd:89:5d:3b:db:87:8d:2b:95:04:
19:e1:0f:fd:2f:b3:b2:fd:95:0f:5e:19:7a:4e:66:
ce:1c:f2:5d:cb:90:26:3a:8b:df:ca:10:58:34:48:
b8:9c:29:b5:f2:0e:d7:b2:28:a7:8a:9a:0d:be:a2:
f9:64:54:56:29:77:11:41:98:de:ed:a6:2f:eb:aa:
3a:7a:e6:b8:b3:9d:01:a1:a7:81:c3:fe:40:a0:50:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7F:42:F2:9F:67:8A:DA:DF:00:8B:4D:C8:0F:D8:2C:91:0F:E9:DB
X509v3 Authority Key Identifier:
keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/jH9C8p9nitrfAItNyA_YLJEP6ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.60.0/22
Signature Algorithm: sha256WithRSAEncryption
67:50:b2:5d:4b:25:69:40:fa:ee:b9:4b:7d:a7:67:62:26:5c:
ad:e8:96:c9:11:22:00:c2:33:f2:cc:6d:78:78:42:7c:fa:6a:
ab:5f:70:28:6c:96:0a:ae:39:4d:14:9a:a8:16:46:6d:ec:a5:
f1:d7:52:49:5a:fa:31:f7:98:7b:9c:9d:f9:7f:a1:02:be:8f:
b4:93:79:94:67:75:b7:9a:14:45:05:5f:84:01:ff:c2:6f:ba:
68:50:4f:55:89:3b:82:a9:40:65:7c:8a:7e:2f:1f:8a:ed:c8:
3e:fe:8a:1a:50:49:c6:3d:f2:e0:ba:5e:e8:14:85:14:e4:74:
d9:a9:f9:67:a5:0d:61:33:be:72:4c:21:3e:a0:86:64:24:88:
9d:33:a9:33:a1:ff:d9:bf:1b:ba:1c:94:9a:82:d0:aa:84:a4:
99:5a:44:99:7b:5d:fb:0b:67:f6:92:d7:5a:20:42:20:7a:b5:
4d:43:c4:5b:f7:a8:a5:4d:c0:0b:53:bd:8f:04:7a:e8:cc:36:
7e:45:b0:9b:90:42:3b:13:ec:8a:ac:4d:00:dc:46:75:cd:b0:
76:3a:f9:e3:49:33:7f:61:41:7c:f3:2a:3f:9f:ec:ce:ae:9a:
17:3a:ef:9a:15:bc:b8:a3:eb:17:90:33:db:4f:74:58:3c:bd:
b1:3a:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:28:56 2025 by rpki-client