Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JBpIWSLCkY1GfzdPXYV6xtTr6E4.roa
File: JBpIWSLCkY1GfzdPXYV6xtTr6E4.roa (raw, json)
Hash identifier: 4VF72TaI6VZhxxOSDH5PEgUcnPnWULGqM2r+3LzXfsI=
Subject key identifier: 24:1A:48:59:22:C2:91:8D:46:7F:37:4F:5D:85:7A:C6:D4:EB:E8:4E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199B8B03A47D555CFE16D3A29C00F21EEEB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JBpIWSLCkY1GfzdPXYV6xtTr6E4.roa
Signing time: Mon 06 Oct 2025 08:43:00 +0000
ROA not before: Mon 06 Oct 2025 08:43:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.122.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.203.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.163.23.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.130.151.0/24 maxlen: 24
213.210.54.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.234.0/24 maxlen: 24
213.218.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:b0:3a:47:d5:55:cf:e1:6d:3a:29:c0:0f:21:ee:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 6 08:43:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=241a485922c2918d467f374f5d857ac6d4ebe84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:be:00:31:bc:59:3f:91:78:b9:14:43:01:
81:89:91:c8:5b:a9:58:69:f0:1c:56:7c:58:9c:36:
8b:03:87:d2:08:35:fb:bd:d9:65:ea:5c:02:4e:7c:
27:36:81:7a:16:bb:28:8c:40:8e:28:a6:a5:7d:b3:
cd:6b:1b:f3:a6:af:e4:2d:56:ee:93:91:70:82:9b:
41:93:7c:f2:82:29:e7:1e:f7:dd:3f:29:f2:4a:79:
c8:8c:5a:8e:b3:cb:e8:33:90:3f:63:e3:01:00:db:
eb:97:93:0f:49:71:51:5e:19:48:c1:d6:c8:8d:ca:
da:fb:c8:dc:0a:34:6e:27:20:49:ee:38:04:55:ae:
47:37:37:70:cd:6a:a0:c5:bc:65:9b:72:f7:63:0f:
a8:e6:a1:29:71:96:94:43:a4:d9:19:25:a9:8b:76:
02:dc:ec:ce:dc:18:78:0b:c3:26:49:fd:51:74:ec:
84:8a:c6:ff:c7:95:05:0e:e6:e3:a0:75:fe:64:4c:
57:5f:7f:80:8f:72:83:09:15:5d:09:dc:33:95:77:
c5:c1:10:2b:41:a2:5a:55:19:b8:30:91:3b:36:d9:
c5:5c:f6:ed:9d:5f:1c:82:fe:30:4b:b9:7f:aa:de:
09:5a:a1:ff:82:1d:e2:45:41:fd:f2:5c:9c:4d:39:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:48:59:22:C2:91:8D:46:7F:37:4F:5D:85:7A:C6:D4:EB:E8:4E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JBpIWSLCkY1GfzdPXYV6xtTr6E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.122.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.203.0/24
82.153.205.0/24
82.153.217.0/24
82.163.23.0/24
89.213.164.0/24
109.176.40.0-109.176.55.255
109.176.153.0/24
212.38.79.0/24
213.130.130.0/24
213.130.149.0/24
213.130.151.0/24
213.210.54.0/24
213.218.214.0/24
213.218.234.0/24
213.218.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ec:c0:b4:89:5b:d9:25:0f:49:f2:1d:b4:ba:13:2d:5e:33:
e8:a2:93:f9:b5:a7:3c:7a:96:c6:dc:1c:18:98:19:14:1c:a1:
21:42:3b:f6:0f:02:15:80:44:dd:33:d5:8b:9a:b4:4e:3f:ae:
0e:b8:e1:d4:69:2c:be:98:25:fc:c7:f9:61:da:da:a6:be:b0:
c1:a2:a7:a7:c7:17:a6:5c:74:e3:5c:11:67:b2:9e:74:6e:ca:
06:20:11:e8:53:1d:25:6f:ae:b1:dc:a9:06:76:fd:39:1d:82:
9f:d5:98:50:19:f0:b8:5d:ad:27:a2:67:f1:1f:b6:76:94:2b:
51:b0:78:fd:af:3d:30:15:79:68:ce:0e:13:60:cc:26:36:04:
76:23:f9:37:6c:e7:6a:24:9f:46:4f:aa:96:3b:84:ad:c9:9f:
ba:3d:db:3f:95:6f:04:ff:a8:82:53:09:15:95:ff:8b:20:34:
46:37:bf:43:2c:9f:93:e3:dd:59:d0:0d:0e:5b:f2:6c:1a:58:
9e:83:00:6b:7d:b4:3f:de:a2:9e:ca:8e:9a:db:bd:b7:a5:96:
b8:bf:55:ac:c1:fe:cd:33:bf:d9:ec:54:1b:91:9e:0b:5c:a4:
ca:42:20:0c:09:0c:32:d3:2f:33:d3:72:89:05:02:3d:e5:d2:
25:53:07:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:01 2025 by rpki-client