Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-jbKRKhn_8xRaKNb3qgWeeUsMIo.roa
File: 1-jbKRKhn_8xRaKNb3qgWeeUsMIo.roa (raw, json)
Hash identifier: GsSVqdAx20VpE+9I/b/fRyjxj9htSkXUIQ6unKy7CBQ=
Subject key identifier: FA:36:CA:44:A8:67:FF:CC:51:68:A3:5B:DE:A8:16:79:E5:2C:30:8A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01999EF0780691AD3CABF4F839131E82BCFD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-jbKRKhn_8xRaKNb3qgWeeUsMIo.roa
Signing time: Wed 01 Oct 2025 08:43:03 +0000
ROA not before: Wed 01 Oct 2025 08:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14445
IP address blocks: 82.152.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:f0:78:06:91:ad:3c:ab:f4:f8:39:13:1e:82:bc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 1 08:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa36ca44a867ffcc5168a35bdea81679e52c308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:81:96:4b:d8:54:5b:52:20:1f:b8:d3:8c:
33:c4:94:bb:32:cd:8b:87:ad:af:d6:77:30:2c:74:
ca:e6:b9:ec:61:0b:be:51:09:ad:e6:db:83:36:59:
bb:00:c5:cd:a3:e0:1c:5c:ce:12:b7:95:9d:d0:e9:
45:bc:d7:12:84:68:52:4c:c3:6f:6e:3a:18:c9:ca:
78:ec:f2:aa:c0:d9:dd:14:64:7e:07:11:6a:93:c6:
62:f7:63:05:ef:f2:38:c0:96:78:62:ee:9e:29:a8:
9f:36:d1:5a:c4:14:cd:30:78:d2:47:2e:90:66:b3:
49:48:89:5b:0f:cf:66:ac:94:eb:0d:57:6e:40:c6:
c8:e1:06:e2:6e:04:ad:f9:d6:cf:62:c8:54:56:39:
be:b0:03:0b:ff:ac:40:83:e5:0d:15:88:15:10:b7:
23:c5:0d:d2:d6:55:a1:9c:a1:44:ad:18:8c:c3:9d:
a0:db:aa:ad:09:0f:b0:c2:8a:49:0b:bf:e3:65:da:
32:4e:6d:bd:53:3a:8f:e9:aa:97:9a:f7:ed:ad:ea:
e0:eb:f9:84:09:a7:31:4f:e0:9a:b9:01:71:9a:9e:
c2:09:ed:b1:b7:c8:ef:40:5e:fa:43:36:8a:57:73:
83:a0:32:44:ee:6b:17:7a:d0:a4:8f:5f:39:eb:8e:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:CA:44:A8:67:FF:CC:51:68:A3:5B:DE:A8:16:79:E5:2C:30:8A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-jbKRKhn_8xRaKNb3qgWeeUsMIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a8:1c:a2:3a:6e:c9:b9:e4:fb:47:36:40:38:13:42:4f:bd:
da:19:23:fc:a2:2c:c4:40:d2:d8:bf:dc:68:b1:f8:20:97:35:
ba:56:4e:0c:6e:be:91:2a:27:77:38:28:a5:7e:ae:47:cf:34:
c9:ff:03:6e:be:ba:16:51:8f:a2:20:07:e7:d5:d2:f5:bb:83:
cc:b9:bf:d0:50:6b:46:35:a2:e2:1d:ee:a7:1d:dc:09:d7:b3:
69:b1:6d:c8:26:30:d8:58:2b:03:0a:87:82:ae:09:0c:4c:d9:
1b:38:ae:f8:8d:09:a1:b9:79:07:b2:c8:f6:05:27:7a:13:87:
55:0c:9e:e2:ef:16:bd:b3:2a:68:4a:8e:42:ba:9b:df:c9:07:
d8:b4:74:61:a9:c0:7f:12:7d:91:28:e4:00:1d:35:e7:b6:41:
29:84:3c:ca:13:41:ca:10:ca:b6:4f:17:46:f1:35:4a:cf:10:
44:30:e1:c3:00:00:54:a4:a0:f7:d7:89:9c:b5:ca:08:26:ef:
62:4a:ec:e0:a3:e9:8e:67:c5:05:47:00:28:bc:1c:69:31:ca:
b0:f6:c2:f3:c8:98:bc:22:70:c6:e4:5a:3c:5a:20:b5:52:9d:
9b:3a:2f:4b:88:0a:c6:73:cf:32:7d:91:d8:53:d1:93:7e:70:
8c:ad:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:00 2025 by rpki-client