Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/JJmF9idPFAXWWPX9AjfEMsS8Ozk.roa
File: JJmF9idPFAXWWPX9AjfEMsS8Ozk.roa (raw, json)
Hash identifier: Z6lxpjHZf+bFBTA5z2r8BCssBYWOfAe+nD+SW+UaYNE=
Subject key identifier: 24:99:85:F6:27:4F:14:05:D6:58:F5:FD:02:37:C4:32:C4:BC:3B:39
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 0197EA1BA0F3FF2233490D43DF2FACDB95E8
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/JJmF9idPFAXWWPX9AjfEMsS8Ozk.roa
Signing time: Tue 08 Jul 2025 12:56:08 +0000
ROA not before: Tue 08 Jul 2025 12:56:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212285
IP address blocks: 185.107.134.0/24 maxlen: 24
194.5.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:1b:a0:f3:ff:22:33:49:0d:43:df:2f:ac:db:95:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Jul 8 12:56:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=249985f6274f1405d658f5fd0237c432c4bc3b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:d5:8a:c1:ad:ec:47:11:18:f3:41:14:13:
1b:03:00:17:99:43:b1:4a:1e:48:c1:8c:7d:10:36:
c8:4a:93:20:5f:81:92:43:0a:57:c6:cc:b7:ae:13:
55:09:13:d1:72:27:07:bc:cc:3e:4c:73:f1:f1:df:
2b:50:bc:01:89:5c:6c:10:55:8b:74:d2:11:b6:26:
53:1e:c2:0d:26:96:35:5d:82:47:0b:d8:9e:f1:4c:
92:89:46:2c:68:c9:f3:53:d1:03:10:c8:b8:cf:2a:
ab:55:d8:24:59:d8:17:dc:3d:42:d9:71:c1:6f:51:
a5:f3:e0:a7:1a:35:ef:53:e2:2a:bf:d6:d1:90:47:
33:50:d2:12:54:b8:30:da:28:4f:40:08:4d:e3:28:
84:99:1c:79:a1:5a:ff:4f:6b:04:0c:cc:ea:0d:55:
35:d8:47:06:11:6c:fa:1d:f4:24:e7:f6:5d:41:e4:
c0:1a:f9:0d:d8:3a:2b:07:3f:24:32:e6:9a:ad:a8:
65:a7:ad:03:12:5e:5a:df:d1:5b:9b:72:de:cd:30:
d7:c1:68:aa:41:fa:e9:e9:3f:6e:42:74:99:ac:0c:
23:ab:c3:13:77:fd:e3:13:11:2a:73:51:16:24:1b:
f8:09:6c:3b:61:2d:48:d1:d9:d9:3d:32:f1:96:d7:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:85:F6:27:4F:14:05:D6:58:F5:FD:02:37:C4:32:C4:BC:3B:39
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/JJmF9idPFAXWWPX9AjfEMsS8Ozk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.134.0/24
194.5.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d9:e0:30:e8:8f:10:fd:69:d4:24:90:dc:68:14:1d:b2:35:
c8:ad:fc:29:c6:85:d7:ce:3b:61:da:75:e1:28:9c:20:0c:f3:
ef:62:38:bc:be:5f:14:15:13:c4:03:91:7f:5d:60:60:b5:ef:
0c:30:d8:ed:91:bb:34:7b:47:c6:70:f4:8b:60:da:9e:9d:53:
9c:e2:c0:34:18:b4:66:00:ec:71:34:6f:96:60:3a:95:1c:1b:
ae:88:cc:f8:d6:cb:34:30:55:68:f1:ec:f0:aa:4e:76:43:8e:
e5:12:ec:37:ba:a2:91:6a:88:77:98:ce:03:6b:83:9f:c5:0e:
d8:85:1f:26:60:46:93:5a:82:d3:bc:f3:4c:72:e1:06:4d:dc:
72:b8:b9:2d:13:05:98:c8:be:36:b1:52:c9:b4:6c:4b:fb:65:
47:e9:af:0c:fe:d2:cc:0f:4f:54:8a:3f:20:83:0a:cd:7a:86:
38:4f:9e:ff:af:1b:28:56:d7:bc:57:ee:e3:4b:44:21:7a:fc:
8e:8a:9b:19:05:68:0d:f9:2b:c3:0a:88:dd:e2:32:81:fe:eb:
bf:1d:7f:7a:32:e3:3e:ea:56:81:36:9d:de:ef:a9:da:41:78:
61:f6:17:a1:68:c3:b9:ed:47:de:c9:03:28:4e:4e:70:9f:b6:
e2:39:55:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 14:43:13 2025 by rpki-client