Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JSaYJdFF10J_auny7J1XtUNm8vs.roa
File: JSaYJdFF10J_auny7J1XtUNm8vs.roa (raw, json)
Hash identifier: /J4tHikjXMwSi/84c+3AE7iSgPAyzFH1QyiEI0nwZQ0=
Subject key identifier: 25:26:98:25:D1:45:D7:42:7F:6A:E9:F2:EC:9D:57:B5:43:66:F2:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01982C75AB93B0B6235AA4D90ED18E76A84C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JSaYJdFF10J_auny7J1XtUNm8vs.roa
Signing time: Mon 21 Jul 2025 10:09:25 +0000
ROA not before: Mon 21 Jul 2025 10:09:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 84.21.188.0/24 maxlen: 24
2a06:a600::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e84:20::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:ea00:100::/40 maxlen: 40
2a0f:ea01::/40 maxlen: 40
2a13:2b40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:75:ab:93:b0:b6:23:5a:a4:d9:0e:d1:8e:76:a8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 21 10:09:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25269825d145d7427f6ae9f2ec9d57b54366f2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:9d:a8:b7:58:6a:da:43:52:20:a4:84:c0:
ab:d6:f8:22:86:c1:7f:14:c3:30:de:27:26:5b:4b:
69:c4:72:f4:c5:c7:c5:b7:3b:c1:0d:26:a1:3c:c8:
31:06:a5:a8:a6:51:fa:ba:88:4b:6e:cf:36:7e:fa:
35:52:23:f2:a4:87:86:b9:00:ad:2e:3b:29:b0:18:
bf:70:e0:40:1c:25:24:f3:cc:3a:98:fd:5f:1b:f7:
4e:d2:e9:74:d8:2d:33:b0:4d:3d:c4:f1:60:98:cc:
d8:c6:d8:5f:9a:3f:40:41:18:86:a8:15:66:d7:31:
43:1b:00:ce:86:35:6e:6e:5a:08:f1:f5:e4:35:cc:
16:cf:30:f4:8a:ba:f9:f9:e0:7b:8b:b3:28:d9:6b:
b5:dd:e4:c7:02:02:0c:40:4e:57:3f:7c:8f:dc:17:
db:02:99:d5:40:b7:c9:31:9d:c3:6c:69:71:f6:bd:
e8:c5:ef:a4:91:57:e0:6f:48:d2:bd:54:55:de:90:
36:03:6c:ab:3d:95:74:58:8c:95:3f:2d:ae:65:24:
62:0a:3f:da:97:32:8b:15:d1:28:8a:f4:36:d5:54:
c2:6e:ff:e9:27:73:01:25:a7:fc:37:fc:d6:c1:90:
12:8f:fa:54:24:a1:83:7a:a4:04:96:1b:09:53:f7:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:26:98:25:D1:45:D7:42:7F:6A:E9:F2:EC:9D:57:B5:43:66:F2:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JSaYJdFF10J_auny7J1XtUNm8vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.188.0/24
IPv6:
2a06:a600::/29
2a06:b5c0::/29
2a06:bf40::/29
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:1e84:20::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e1c0:37a::/48
2a0f:ea00:100::/40
2a0f:ea01::/40
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
24:ac:d8:ba:a1:bd:96:08:84:7f:5b:54:3c:45:27:5d:24:13:
4d:81:94:be:9a:c9:56:b8:ba:14:3d:d8:34:88:35:7e:0f:08:
78:1c:9c:69:9e:cf:0c:5d:08:f0:5b:2a:83:f6:5a:4a:20:11:
33:2b:3d:3c:28:36:66:6e:4f:39:64:2c:5b:0b:d1:f3:01:27:
6d:3c:31:f3:b5:24:08:48:7d:9a:34:0f:3b:37:bd:5f:42:10:
63:fe:78:fc:4e:8f:18:86:f6:50:c6:b0:ec:56:50:34:2b:e6:
ce:0a:38:06:e7:c3:75:86:0c:49:96:4d:4c:bb:a0:32:a0:7a:
fe:85:f2:b7:05:6d:95:93:d9:3b:66:0c:98:00:fd:6d:0f:e6:
5b:09:00:2f:3f:88:58:fc:0f:1d:1f:f6:18:b5:9b:c8:b7:38:
c9:f9:f4:66:88:f5:51:b0:a9:ec:f9:71:64:ec:ab:4f:10:7e:
a6:90:9b:67:10:89:06:93:4b:8f:90:00:3c:06:06:f9:92:6c:
5f:86:29:69:fb:5f:9a:19:8c:b2:d8:0f:2f:b1:c0:f6:43:76:
5d:30:6b:36:49:fe:96:35:21:81:1e:fc:a9:7d:81:3b:f9:c3:
a8:3e:84:ea:2e:2b:50:63:1b:92:2d:8f:bd:2e:c2:1b:af:4d:
52:49:c6:52
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZgsdauTsLYjWqTZDtGOdqhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNzIxMTAwOTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTI2OTgyNWQxNDVkNzQyN2Y2YWU5ZjJlYzlkNTdiNTQzNjZmMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oudqLdYatpDUiCkhMCr1vgihsF/
FMMw3icmW0tpxHL0xcfFtzvBDSahPMgxBqWoplH6uohLbs82fvo1UiPypIeGuQCt
LjspsBi/cOBAHCUk88w6mP1fG/dO0ul02C0zsE09xPFgmMzYxthfmj9AQRiGqBVm
1zFDGwDOhjVubloI8fXkNcwWzzD0irr5+eB7i7Mo2Wu13eTHAgIMQE5XP3yP3Bfb
ApnVQLfJMZ3DbGlx9r3oxe+kkVfgb0jSvVRV3pA2A2yrPZV0WIyVPy2uZSRiCj/a
lzKLFdEoivQ21VTCbv/pJ3MBJaf8N/zWwZASj/pUJKGDeqQElhsJU/dpGQIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFCUmmCXRRddCf2rp8uydV7VDZvL7MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvSlNhWUpkRkYxMEpfYXVueTdKMVh0VU5tOHZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwDAQCAAEwBgMEAFQVvDBm
BAIAAjBgAwUDKgamAAMFAyoGtcADBQMqBr9AAwUAKg4ahAMHACoO9gAAXwMHACoP
HoQAIAMHACoPfQAAAQMHACoPvAChxAMHACoP4cADegMGACoP6gABAwYAKg/qAQAD
BQMqEytAMA0GCSqGSIb3DQEBCwUAA4IBAQAkrNi6ob2WCIR/W1Q8RSddJBNNgZS+
mslWuLoUPdg0iDV+Dwh4HJxpns8MXQjwWyqD9lpKIBEzKz08KDZmbk85ZCxbC9Hz
ASdtPDHztSQISH2aNA87N71fQhBj/nj8To8YhvZQxrDsVlA0K+bOCjgG58N1hgxJ
lk1Mu6AyoHr+hfK3BW2Vk9k7ZgyYAP1tD+ZbCQAvP4hY/A8dH/YYtZvItzjJ+fRm
iPVRsKns+XFk7KtPEH6mkJtnEIkGk0uPkAA8Bgb5kmxfhilp+1+aGYyy2A8vscD2
Q3ZdMGs2Sf6WNSGBHvypfYE7+cOoPoTqLitQYxuSLY+9LsIbr01SScZS
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:28:46 2025 by rpki-client