Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/JEFYUU9Yi0EkVGOeD_EIh_uw5BM.roa
File: JEFYUU9Yi0EkVGOeD_EIh_uw5BM.roa (raw, json)
Hash identifier: T4Is0GcffiX+j2jG52OapNWRJUREkPDAWcBKBjLjx2Q=
Subject key identifier: 24:41:58:51:4F:58:8B:41:24:54:63:9E:0F:F1:08:87:FB:B0:E4:13
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0197F2D0F0908A01191077BF229A58D0ABE8
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/JEFYUU9Yi0EkVGOeD_EIh_uw5BM.roa
Signing time: Thu 10 Jul 2025 05:31:08 +0000
ROA not before: Thu 10 Jul 2025 05:31:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214919
IP address blocks: 81.15.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f2:d0:f0:90:8a:01:19:10:77:bf:22:9a:58:d0:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jul 10 05:31:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=244158514f588b412454639e0ff10887fbb0e413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:6a:b2:33:e4:31:5f:34:f3:96:07:98:f0:
84:2d:fc:d1:a6:7d:38:eb:8d:a8:a9:ae:0b:6d:6e:
dc:e6:48:35:32:dd:1b:75:b0:94:a0:40:19:42:74:
50:61:22:ac:2e:eb:9d:21:ca:35:47:eb:9d:e2:62:
cf:1a:8a:35:d2:71:02:2f:ba:21:0d:43:0d:90:09:
a7:bf:59:19:37:1b:8f:f2:77:79:7f:32:dd:c5:e2:
d7:9d:8e:17:8e:d1:20:bb:ad:ad:32:34:fd:ff:7b:
57:33:1b:7c:5d:ac:d2:6b:7e:b4:f7:5a:72:9f:cf:
7f:37:fb:67:9e:44:65:de:db:4d:c5:2a:58:04:7c:
2f:82:a5:98:75:a0:d1:03:83:fd:45:ff:aa:f7:7b:
e3:cb:55:89:52:29:49:a5:eb:f5:77:8a:5f:41:a8:
83:82:18:9b:5d:cf:49:a8:56:a9:df:ad:18:77:f5:
96:d7:6a:30:18:c3:f1:49:d8:e2:6d:7e:67:67:c0:
b6:c5:32:05:ff:32:33:dd:a5:c2:97:53:c7:06:f6:
08:3b:33:2d:1b:fa:82:3f:64:57:8a:a6:32:06:39:
1e:45:98:e6:7c:85:89:d5:7e:c3:a3:17:6a:0c:87:
ed:e8:d7:2c:28:f9:bf:82:fd:1f:03:f9:b3:0b:88:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:41:58:51:4F:58:8B:41:24:54:63:9E:0F:F1:08:87:FB:B0:E4:13
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/JEFYUU9Yi0EkVGOeD_EIh_uw5BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.150.0/24
Signature Algorithm: sha256WithRSAEncryption
62:87:3e:57:13:0a:2b:53:1b:20:a5:fd:aa:11:c2:37:0d:ee:
68:c9:8e:fd:98:b1:c9:d8:a8:b3:82:75:33:a0:7f:54:4b:58:
e8:31:1c:ef:b0:39:92:28:e6:7b:e5:36:9f:6d:1b:7f:cb:61:
d9:65:82:06:60:45:72:e6:0e:da:9e:c1:1e:ce:6e:fa:a7:49:
61:4f:be:10:a7:94:3a:25:60:16:2c:52:f6:09:75:16:ac:43:
bc:39:f5:81:be:da:39:fb:2b:ef:4d:93:68:f2:90:bd:a2:45:
02:0e:8c:a3:55:b5:04:02:90:a4:93:c5:1f:39:cd:b2:a6:50:
61:2b:83:12:36:78:05:d9:99:e1:37:9b:50:78:34:fd:ec:f5:
d9:f7:c2:ae:77:6d:55:71:7c:b2:07:09:0d:bf:03:fa:17:38:
62:75:c3:14:0d:75:58:c6:3e:e6:8a:ff:82:1f:14:bb:06:28:
58:21:76:16:69:9b:00:a4:fa:21:8e:95:ca:8e:3b:2a:70:57:
f8:c7:db:17:7b:41:0d:96:1b:b7:d5:02:9b:aa:5a:72:fb:8a:
3f:12:88:0e:e3:30:1e:95:97:ed:55:a0:71:1c:41:43:eb:82:
f3:36:40:9c:54:90:cd:38:b3:a3:03:25:1e:b2:09:42:39:27:
9e:59:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:58:12 2025 by rpki-client