Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JJCyQZzT5ihQK_pmESCOjq9RtbU.roa
File: JJCyQZzT5ihQK_pmESCOjq9RtbU.roa (raw, json)
Hash identifier: OsUnFBe2h/1i0f2eggtCt2xBPXxClCzWtvzGap/w5bg=
Subject key identifier: 24:90:B2:41:9C:D3:E6:28:50:2B:FA:66:11:20:8E:8E:AF:51:B5:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197CEDFDCCB03B655789E8735DFEC5A5C7E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JJCyQZzT5ihQK_pmESCOjq9RtbU.roa
Signing time: Thu 03 Jul 2025 06:01:06 +0000
ROA not before: Thu 03 Jul 2025 06:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63025
IP address blocks: 194.48.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:df:dc:cb:03:b6:55:78:9e:87:35:df:ec:5a:5c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 3 06:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2490b2419cd3e628502bfa6611208e8eaf51b5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:29:30:93:4a:3b:31:2c:ea:dc:b3:e6:ef:
fb:2d:60:1a:7d:7d:bc:85:c0:c3:b6:2e:92:37:e9:
9a:48:0d:09:86:bf:2f:14:4e:2c:6c:45:f2:ed:55:
be:da:19:d3:5e:2d:db:db:a1:ad:cd:ff:b6:b7:f2:
a4:e5:61:aa:b2:52:01:cf:57:21:63:d2:90:37:c6:
89:de:e4:ce:a0:bb:86:10:ff:c1:ed:6a:eb:61:15:
ae:cf:7e:13:dc:b1:d5:17:6f:57:61:05:1b:3d:f9:
32:0c:22:ec:97:63:87:8d:b0:00:66:ee:74:d2:fd:
ee:11:fd:4d:ac:5d:54:3c:3d:8e:95:59:ea:4a:7b:
a0:84:49:a5:ea:14:6c:14:a5:09:7a:60:28:34:4e:
c6:24:2c:83:69:1f:1a:96:52:59:53:c2:f0:4b:ae:
9d:72:e7:27:60:9a:33:d9:d5:b9:e7:7d:30:d4:92:
ec:77:33:a8:ed:11:2e:53:fe:33:f8:ca:4c:ac:f5:
6b:88:37:45:3a:ff:cc:40:0b:f6:b4:5f:09:1d:48:
2b:d6:36:81:22:a1:6f:32:83:39:4d:d8:fe:cf:93:
12:fc:50:4c:65:75:97:68:ee:e9:84:e3:55:80:b2:
00:da:db:9b:8f:92:5e:f3:fe:75:89:cd:ea:f9:0a:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:B2:41:9C:D3:E6:28:50:2B:FA:66:11:20:8E:8E:AF:51:B5:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JJCyQZzT5ihQK_pmESCOjq9RtbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:be:b9:00:57:66:74:f1:0c:f1:5c:aa:c5:09:5b:bd:2e:26:
f6:43:69:c8:7d:d8:9b:70:0b:35:d2:6f:f5:5a:20:1c:48:08:
92:17:9a:ec:45:cf:9b:83:12:cc:d5:03:89:4a:9f:fc:0e:39:
64:57:bc:58:34:b1:8f:8f:df:89:ec:51:f2:ac:ad:b5:d1:e9:
c4:54:6a:7f:de:50:06:69:ff:33:54:94:34:88:a1:fc:ee:42:
91:f5:85:e4:2a:d5:12:24:5e:3f:49:fb:1a:0c:0e:ab:b9:00:
06:97:85:b1:3d:77:c4:b2:9d:b3:ec:d9:fd:dc:91:a3:75:a4:
d6:3e:8c:70:e5:bc:3c:ae:2b:f6:f9:15:b3:ea:35:7d:9e:d5:
9f:28:29:ef:c6:83:9d:ce:72:df:0c:94:9c:f6:f4:d5:4d:7b:
42:63:80:57:e3:64:fc:f8:00:d4:4e:3c:1f:f5:4d:7b:e5:34:
f3:98:64:e4:58:f3:8f:ef:69:70:c4:b5:cd:df:87:0a:10:9b:
9e:cd:db:36:35:cc:a9:16:cd:0c:70:b6:03:2f:0f:76:13:d4:
96:8e:db:e1:ce:f1:a4:bb:06:1e:e8:a7:6a:30:ee:34:44:28:
cf:2c:bd:32:8d:3b:9f:68:2f:18:91:44:a7:04:68:e3:0b:8f:
7a:95:9c:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfO39zLA7ZVeJ6HNd/sWlx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNzAzMDYwMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDkwYjI0MTljZDNlNjI4NTAyYmZhNjYxMTIwOGU4ZWFmNTFiNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+cpMJNKOzEs6tyz5u/7LWAafX28
hcDDti6SN+maSA0Jhr8vFE4sbEXy7VW+2hnTXi3b26Gtzf+2t/Kk5WGqslIBz1ch
Y9KQN8aJ3uTOoLuGEP/B7WrrYRWuz34T3LHVF29XYQUbPfkyDCLsl2OHjbAAZu50
0v3uEf1NrF1UPD2OlVnqSnughEml6hRsFKUJemAoNE7GJCyDaR8allJZU8LwS66d
cucnYJoz2dW5530w1JLsdzOo7REuU/4z+MpMrPVriDdFOv/MQAv2tF8JHUgr1jaB
IqFvMoM5Tdj+z5MS/FBMZXWXaO7phONVgLIA2tubj5Je8/51ic3q+QoFiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCSQskGc0+YoUCv6ZhEgjo6vUbW1MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSkpDeVFaelQ1aWhRS19wbUVTQ09qcTlSdGJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjD7MA0G
CSqGSIb3DQEBCwUAA4IBAQAcvrkAV2Z08QzxXKrFCVu9Lib2Q2nIfdibcAs10m/1
WiAcSAiSF5rsRc+bgxLM1QOJSp/8DjlkV7xYNLGPj9+J7FHyrK210enEVGp/3lAG
af8zVJQ0iKH87kKR9YXkKtUSJF4/SfsaDA6ruQAGl4WxPXfEsp2z7Nn93JGjdaTW
Poxw5bw8riv2+RWz6jV9ntWfKCnvxoOdznLfDJSc9vTVTXtCY4BX42T8+ADUTjwf
9U175TTzmGTkWPOP72lwxLXN34cKEJuezds2NcypFs0McLYDLw92E9SWjtvhzvGk
uwYe6KdqMO40RCjPLL0yjTufaC8YkUSnBGjjC496lZx8
-----END CERTIFICATE-----
Generated at Sat Jul 5 23:52:45 2025 by rpki-client