Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/JpC3ZHpCxRx5LZy3hAauynFC2rk.roa
File: JpC3ZHpCxRx5LZy3hAauynFC2rk.roa (raw, json)
Hash identifier: t72l9q+RqkmkHPrOevrptzB6LhYN4CuTx7B9D4SrZ+Q=
Subject key identifier: 26:90:B7:64:7A:42:C5:1C:79:2D:9C:B7:84:06:AE:CA:71:42:DA:B9
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019853811554ACD5A20F5A59BEEF500EE73D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/JpC3ZHpCxRx5LZy3hAauynFC2rk.roa
Signing time: Tue 29 Jul 2025 00:07:05 +0000
ROA not before: Tue 29 Jul 2025 00:07:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1426
IP address blocks: 89.106.27.0/24 maxlen: 24
103.47.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:81:15:54:ac:d5:a2:0f:5a:59:be:ef:50:0e:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 29 00:07:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2690b7647a42c51c792d9cb78406aeca7142dab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:81:c7:48:66:8f:04:12:8a:08:85:f7:91:
5a:30:62:dd:54:06:a4:b6:09:2b:82:3f:72:13:1b:
d0:a3:76:cc:59:5b:a7:b0:39:f7:93:86:03:c7:9a:
b8:05:40:82:9c:52:c2:7e:49:5f:6b:c5:cd:5f:8d:
b3:8e:9f:88:d5:a3:63:59:0c:40:c6:15:80:85:6f:
dc:28:d3:a7:c1:76:9a:e6:95:f4:49:00:1d:a0:9e:
5e:6d:ca:b7:7a:73:28:80:1c:a5:c9:8d:4a:11:d5:
7e:65:8e:5d:35:59:5f:4d:99:9a:f7:a4:b4:62:7c:
de:0a:33:1e:af:69:37:a2:b3:d8:d4:84:c0:6d:1a:
ba:b5:df:53:6c:f4:b6:75:84:20:c6:9b:cc:5c:0d:
93:15:7a:80:52:51:22:26:77:d0:08:ed:ea:a7:15:
98:0d:0a:3e:df:83:c7:e8:76:16:e1:89:a7:d8:e1:
2b:ef:49:02:9c:37:ab:6c:7c:bb:a8:67:c8:9c:d1:
c1:12:5a:d5:4f:ec:6d:50:e3:00:5f:b9:81:9c:35:
5a:6d:3a:5d:1d:a7:e5:67:b5:7c:c9:23:cf:9f:1b:
f1:64:c8:fc:a3:1c:43:e2:c9:1f:77:16:4a:95:2d:
75:aa:b2:f8:e6:df:6e:2d:2e:63:65:59:5e:99:b9:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:90:B7:64:7A:42:C5:1C:79:2D:9C:B7:84:06:AE:CA:71:42:DA:B9
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/JpC3ZHpCxRx5LZy3hAauynFC2rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.27.0/24
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bc:4a:75:63:b7:2d:f9:1a:88:95:2e:9b:3a:9b:e9:ed:8c:
ba:c8:fd:84:0b:a0:43:81:8f:5b:f4:cd:9b:3e:60:4a:2e:51:
ae:77:ca:6d:c4:9f:05:02:6a:1b:74:ad:7c:03:81:9e:cc:57:
3b:21:2b:ce:97:f0:7c:33:48:6f:af:42:6f:74:86:cf:3f:d8:
0b:b3:f9:43:f8:d8:2f:d8:ab:5c:8c:4c:72:bb:62:37:02:a8:
21:4a:3a:26:3f:1d:0e:52:71:b5:e2:1b:43:57:21:58:bc:68:
c5:a9:ed:71:40:77:a1:75:db:c0:1b:64:9d:e3:13:9b:26:86:
72:69:ef:ec:be:1f:7e:b0:40:d6:36:6d:fe:fd:bd:91:8c:e8:
4a:5f:a5:d1:f0:93:b4:63:92:2d:5f:8a:b0:3d:38:07:40:5e:
af:fe:2d:42:34:b6:46:b6:74:29:81:da:d0:06:db:61:28:49:
61:36:43:0f:68:3e:26:45:b5:e4:7d:0f:86:ec:06:32:98:ee:
87:96:a3:f5:ad:7f:2c:83:f6:7a:30:a3:2f:c4:83:19:34:d9:
53:92:19:c8:e1:ea:9e:5e:f7:4e:22:1f:f8:10:4a:84:c4:86:
61:a3:c6:33:5b:7b:10:a6:6f:2f:28:c5:02:dc:94:13:ec:8b:
22:96:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:42:00 2025 by rpki-client