Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iJaynQcuUSSRb1tXmBxC-wp6Lfg.roa
File: iJaynQcuUSSRb1tXmBxC-wp6Lfg.roa (raw, json)
Hash identifier: v00WJ7HoXUcpUB4sINCd02LKgtvX8UgsWoHjVdppSOY=
Subject key identifier: 88:96:B2:9D:07:2E:51:24:91:6F:5B:57:98:1C:42:FB:0A:7A:2D:F8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0199FDFA8AD232621BF96171F319FBCBE431
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iJaynQcuUSSRb1tXmBxC-wp6Lfg.roa
Signing time: Sun 19 Oct 2025 19:37:59 +0000
ROA not before: Sun 19 Oct 2025 19:37:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214719
IP address blocks: 192.124.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:fa:8a:d2:32:62:1b:f9:61:71:f3:19:fb:cb:e4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 19 19:37:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8896b29d072e5124916f5b57981c42fb0a7a2df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:41:26:a5:d8:b9:46:f3:a6:82:8d:c8:57:
86:ad:d8:b5:83:08:14:79:95:88:d3:3a:93:fd:32:
4c:1a:41:3d:f2:40:42:04:3b:57:5e:02:64:31:db:
a3:e3:96:6a:41:2a:6e:17:fc:51:0b:46:53:4b:e4:
58:bd:9c:a7:18:07:8c:1c:53:9d:df:15:ae:6a:04:
7e:e9:8b:31:20:53:a4:3b:a4:84:e8:ea:dc:75:4a:
72:84:6c:08:b3:71:d6:7c:9d:8a:0f:9b:bd:2f:bb:
c6:37:9e:17:fa:a7:e5:45:ec:c0:51:76:6d:40:50:
b2:6b:3d:b9:6d:15:2c:5b:07:47:17:41:42:ec:54:
64:6a:da:44:75:50:d6:28:32:0d:0f:7a:26:6f:97:
62:ba:b1:9d:cb:c2:83:11:7b:50:75:89:85:59:8d:
79:fe:fa:cc:ea:42:de:5e:d5:be:a3:c2:d0:05:9a:
1d:81:a3:2e:96:c7:35:e2:89:3a:37:b6:cb:1d:ef:
ed:0e:aa:0d:96:a1:0d:76:fc:e0:c7:1f:b8:0f:ee:
9c:85:0f:2a:6a:94:ad:17:61:dc:a7:d3:69:67:ce:
1d:89:09:9a:22:4b:e1:e0:f5:fe:42:e8:42:57:16:
9c:59:9b:11:49:a5:f2:79:ee:25:d5:f8:09:97:39:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:96:B2:9D:07:2E:51:24:91:6F:5B:57:98:1C:42:FB:0A:7A:2D:F8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iJaynQcuUSSRb1tXmBxC-wp6Lfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.216.0/24
Signature Algorithm: sha256WithRSAEncryption
82:20:cd:1a:7c:6d:3c:ba:fe:9d:00:11:db:8e:77:ad:48:08:
e3:40:64:39:b4:ff:41:7d:61:02:e9:34:a0:09:91:bd:5d:f2:
3d:6f:7f:4a:13:88:58:92:d6:69:75:c4:e6:b4:f0:fc:58:bc:
b8:08:e3:cd:4a:12:b6:cb:3c:cc:a3:14:9f:d5:36:c8:d8:17:
1d:a5:b5:3d:6f:fc:20:a4:d9:a7:4a:5b:67:89:26:5e:15:83:
95:a1:e4:b8:3f:bb:90:b6:bf:2c:93:a0:db:4e:e6:5f:97:fe:
44:41:ef:bd:cb:ae:2f:2f:2d:c2:9c:9a:64:a0:91:7a:7f:a4:
0b:32:be:44:e2:54:77:da:66:e8:2e:87:9e:62:e5:a1:02:da:
da:84:45:4b:55:af:05:51:99:23:76:0a:dd:17:d8:39:a7:a4:
97:70:ca:0a:13:44:03:28:95:d6:79:52:e6:48:2e:c0:76:f0:
d7:b3:6f:55:f0:c0:d4:39:95:79:90:6e:8b:48:78:14:ab:98:
c0:72:33:2b:5b:2a:37:aa:4e:4f:ee:b0:e3:dc:05:b2:d4:8d:
71:23:d3:28:44:7f:e2:73:9b:d3:f4:94:68:40:77:2c:c5:6a:
e5:dc:d4:9b:5b:57:3e:8d:c4:a9:8e:f3:24:d3:dd:b9:39:69:
2c:ee:3e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:26:24 2025 by rpki-client