Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/jyjyrq_AfUtR4N7vXi1KVwU7zy0.roa
File: jyjyrq_AfUtR4N7vXi1KVwU7zy0.roa (raw, json)
Hash identifier: gGJ4wMLSXQ4nt3254hCEsSARPmaiHzOwXZG33svfRBY=
Subject key identifier: 8F:28:F2:AE:AF:C0:7D:4B:51:E0:DE:EF:5E:2D:4A:57:05:3B:CF:2D
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0197F3C38DECA68825A100E22208CDF7C884
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/jyjyrq_AfUtR4N7vXi1KVwU7zy0.roa
Signing time: Thu 10 Jul 2025 09:56:08 +0000
ROA not before: Thu 10 Jul 2025 09:56:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209622
IP address blocks: 185.131.146.0/24 maxlen: 24
185.131.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:c3:8d:ec:a6:88:25:a1:00:e2:22:08:cd:f7:c8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Jul 10 09:56:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f28f2aeafc07d4b51e0deef5e2d4a57053bcf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:55:f9:9e:6c:56:85:f0:70:1e:e1:82:2b:
dc:15:46:5b:cc:ea:47:02:84:43:8a:12:c4:ac:e6:
63:2a:36:e4:76:f8:ac:20:7a:cf:4e:78:96:68:b0:
54:c4:60:c8:6c:c4:5c:17:9d:13:53:10:5c:e2:fe:
65:f0:64:07:cc:41:df:db:40:42:32:db:f7:c6:70:
ca:ac:f4:09:0e:79:f7:6e:5a:d1:5e:f5:32:b4:07:
f6:dd:75:f3:63:c7:98:6f:40:a2:8c:db:ec:cc:a6:
0f:36:92:4f:ed:00:af:b1:c2:9b:6b:a5:9d:b5:b7:
ac:88:85:ec:a4:e5:af:dc:81:71:ea:c9:a1:67:89:
18:cb:07:4a:04:e3:85:92:6e:39:4a:86:da:2b:11:
3e:26:5d:df:0b:a1:9c:98:7f:e4:12:c3:f6:c6:50:
d1:00:8c:52:b7:a8:09:a8:00:14:20:cf:9a:f8:3e:
f6:ff:5b:47:57:a8:ef:aa:b9:96:c9:d4:3a:d0:ce:
da:4d:16:1e:cb:98:91:2e:d0:6b:1e:2d:ff:37:64:
eb:2f:74:e9:af:f2:6f:a1:2c:1b:03:78:c0:82:47:
1d:37:77:73:53:41:98:da:47:19:6b:fb:41:c6:e2:
36:50:11:40:4f:6f:db:9e:6d:1b:c4:02:b9:b4:68:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:F2:AE:AF:C0:7D:4B:51:E0:DE:EF:5E:2D:4A:57:05:3B:CF:2D
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/jyjyrq_AfUtR4N7vXi1KVwU7zy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.146.0/23
Signature Algorithm: sha256WithRSAEncryption
66:08:23:93:26:23:07:41:01:cf:a3:c4:83:ed:e3:2e:74:3b:
5d:c3:32:0a:60:52:81:53:2c:f9:ad:6d:b7:c2:7b:d4:69:6c:
e2:10:a3:de:42:f8:92:34:bb:a9:58:6c:7d:d8:ac:fb:d3:f5:
b6:84:cc:c2:de:f1:35:de:8b:f2:b3:d4:b5:ca:e7:fd:d8:12:
f5:8b:93:f3:99:8f:02:26:24:fd:56:80:d0:f4:c4:48:8c:db:
55:70:77:d5:ec:e5:f7:45:ab:b1:21:6c:3e:dd:e8:1e:61:56:
60:cc:8e:76:8f:6b:93:5e:5f:f9:ac:09:ed:13:24:c4:c9:6e:
c6:f4:5a:6b:f5:88:76:d5:95:56:0c:a2:a9:72:70:87:be:d0:
03:cd:5b:7a:e1:df:82:f7:15:fe:cc:a4:9e:71:6f:fd:50:b6:
63:f6:0b:e5:80:dc:fe:47:e2:5e:e8:d9:bc:d1:ae:82:1f:77:
89:e9:84:80:3d:1c:1e:1f:bb:b7:f1:4c:aa:d1:e4:50:f0:29:
75:73:b3:be:69:b7:25:0a:46:db:29:bc:e9:a4:89:d4:e4:23:
43:bd:6e:b5:12:23:4e:6d:7a:3a:19:fa:88:f8:fe:ab:4a:4b:
70:b6:a8:24:a6:96:ba:5d:ff:12:14:8f:12:b4:74:e6:29:88:
9f:15:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 15:25:23 2025 by rpki-client