Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1Jksh5d2UXRwUr4OymjXwvYN6MY.roa
File: 1Jksh5d2UXRwUr4OymjXwvYN6MY.roa (raw, json)
Hash identifier: +BI9aS0E2Mv1ssJN8Ovb5opmRLYEUER89diFBYr+hh4=
Subject key identifier: D4:99:2C:87:97:76:51:74:70:52:BE:0E:CA:68:D7:C2:F6:0D:E8:C6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01994C856CA719C506FDFD103E836AA8E845
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1Jksh5d2UXRwUr4OymjXwvYN6MY.roa
Signing time: Mon 15 Sep 2025 08:37:16 +0000
ROA not before: Mon 15 Sep 2025 08:37:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 81.5.191.0/24 maxlen: 24
82.152.177.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:85:6c:a7:19:c5:06:fd:fd:10:3e:83:6a:a8:e8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 15 08:37:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4992c87977651747052be0eca68d7c2f60de8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:ad:71:71:16:49:48:97:ca:a4:8a:aa:7c:
5b:ba:b5:6d:dc:9f:1e:3d:a9:e8:64:15:31:e1:e7:
02:7a:d3:d6:67:46:fd:15:33:d7:4d:4e:f5:ef:2b:
d9:27:af:e2:29:7c:dc:af:78:89:08:25:e0:0d:eb:
03:54:a8:01:bc:1c:51:db:1d:2d:ec:20:39:f3:fd:
17:87:62:7c:6f:59:5d:84:f6:09:a2:53:8f:02:22:
4b:e9:b9:1b:ad:6e:81:97:82:65:8b:74:14:75:fc:
74:c8:93:9e:99:02:ca:14:f5:4e:9e:c1:a5:c5:b5:
86:6e:3f:b1:b7:24:94:b9:ff:ec:a4:da:1c:2e:7f:
28:b2:c9:6b:b0:23:23:81:f7:69:9f:f3:c0:ff:8a:
fd:09:3f:98:af:8f:6d:10:8f:a6:9b:ae:7c:72:60:
df:c7:55:6a:45:6c:9c:9f:dc:1f:d8:97:d2:65:e1:
0e:3f:47:34:ad:6a:4b:0f:b3:84:a0:8c:64:56:9c:
61:18:c8:34:f2:d4:9d:98:11:53:9b:82:a4:a3:34:
a5:10:cd:de:4f:01:27:6c:d9:de:e3:2e:c7:11:49:
f4:3e:a9:17:aa:76:8c:17:d9:89:83:d9:e6:dd:15:
24:c2:bf:82:62:3a:8f:76:8c:8a:bc:de:32:c7:2a:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:99:2C:87:97:76:51:74:70:52:BE:0E:CA:68:D7:C2:F6:0D:E8:C6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1Jksh5d2UXRwUr4OymjXwvYN6MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
82.152.177.0/24
82.153.69.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:66:c6:21:6c:c5:da:c0:34:f6:1a:a2:2f:38:85:6e:00:cd:
96:cc:fe:1d:13:d3:d6:d7:d4:67:52:c6:5c:d9:42:1a:a1:1c:
ca:38:56:e4:b8:f1:b5:29:05:29:b8:24:81:ea:36:12:52:4f:
04:7a:59:69:ea:e0:da:f9:d1:76:94:c4:3b:03:30:37:37:fa:
f1:b6:93:b0:48:09:2c:22:59:c1:48:0a:3d:71:e6:1c:42:d9:
03:70:c9:d0:82:8d:a7:07:89:ca:28:53:5f:a0:b1:d7:6d:21:
61:b4:3e:d8:e6:a5:4f:ca:b2:10:25:8a:a8:c7:5b:92:24:7a:
86:81:41:af:9c:b2:b2:4a:cd:15:fa:55:cb:ca:34:52:a6:95:
fc:a3:4d:c2:0c:c1:bf:eb:47:21:f3:62:64:28:1c:1a:6b:2f:
33:f7:42:2e:17:f2:1b:01:88:57:43:70:b6:e2:6c:69:57:11:
f6:15:21:d9:af:0e:d1:b9:3f:67:6e:ad:89:26:6b:2d:51:b0:
85:db:74:29:f0:3c:c7:eb:8a:f1:76:64:ce:62:4e:d7:d4:4c:
2c:3a:da:22:7e:a8:f6:62:80:30:d6:57:b4:ac:b5:32:f6:d4:
85:91:7a:e4:3a:0f:38:a5:40:e9:78:28:c8:25:c6:f5:95:6f:
e8:e9:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:01 2025 by rpki-client