Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JkNtc_kOP3s77qdX7fmDbC2U9CM.roa
File: JkNtc_kOP3s77qdX7fmDbC2U9CM.roa (raw, json)
Hash identifier: BPSFBZ2BBwrIaeWI+nEyxkKGD82lblqKEAwN6JxcuE0=
Subject key identifier: 26:43:6D:73:F9:0E:3F:7B:3B:EE:A7:57:ED:F9:83:6C:2D:94:F4:23
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019722811A0CEFBDF1ABC37C3F6710DFE251
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JkNtc_kOP3s77qdX7fmDbC2U9CM.roa
Signing time: Fri 30 May 2025 18:42:55 +0000
ROA not before: Fri 30 May 2025 18:42:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 193.233.23.0/24 maxlen: 24
193.233.88.0/22 maxlen: 24
193.233.248.0/24 maxlen: 24
193.233.249.0/24 maxlen: 24
193.233.250.0/24 maxlen: 24
193.233.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:81:1a:0c:ef:bd:f1:ab:c3:7c:3f:67:10:df:e2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 30 18:42:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26436d73f90e3f7b3beea757edf9836c2d94f423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:af:2a:9d:a3:3e:43:b7:74:44:89:95:96:e1:
bd:5e:c0:45:8c:b3:11:5f:1e:fb:36:9a:b5:e9:8e:
a4:58:af:57:ce:ed:99:5a:44:1f:99:db:04:21:37:
fe:98:33:e1:90:99:c0:8a:93:30:47:24:6b:59:5e:
a6:8c:05:f1:fb:52:ef:24:55:5f:60:a1:3c:90:30:
f8:f7:96:35:1f:ba:3e:ee:04:1b:1a:46:c2:8a:6f:
74:8a:10:3d:e1:1d:ac:03:b0:75:1f:80:eb:18:4a:
12:9e:63:6a:05:1d:79:7d:ba:36:19:47:47:fd:94:
8d:47:ca:4c:3f:07:77:a2:79:91:20:41:7f:d8:14:
a7:bd:b4:16:d4:39:77:3d:90:94:59:da:6a:7e:95:
20:a1:59:4c:36:4a:78:fd:23:74:87:26:c6:25:6a:
95:07:87:2f:4a:98:76:ba:33:9b:99:df:b4:f2:80:
d8:85:8f:ca:a8:eb:76:40:f1:62:aa:d4:a5:30:32:
b1:c2:b4:34:52:c9:b5:d2:d6:4d:9c:ae:15:e9:21:
ca:80:3c:cd:12:25:83:6d:c0:9b:8b:9c:c4:8b:c3:
c9:77:a0:be:b5:c1:da:2f:9d:74:67:6c:8f:2b:72:
6b:2a:e5:32:eb:5b:70:fc:81:7d:73:40:01:9b:ed:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:43:6D:73:F9:0E:3F:7B:3B:EE:A7:57:ED:F9:83:6C:2D:94:F4:23
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JkNtc_kOP3s77qdX7fmDbC2U9CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.23.0/24
193.233.88.0/22
193.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
43:91:e6:b2:70:9c:11:2c:e8:7d:a6:54:e0:51:d5:0d:25:5e:
54:f3:57:53:5e:15:44:d8:56:85:a4:e9:09:12:58:c0:94:d8:
16:f0:81:d9:4e:54:92:5d:1a:50:ad:3d:80:dc:77:f3:37:1d:
49:95:6b:b7:10:01:1b:51:3f:b4:98:60:54:84:90:20:f5:61:
71:0a:f2:59:cd:4d:ca:03:71:65:37:79:8c:10:ab:3c:13:80:
5e:b5:fb:69:f0:6c:c8:87:d9:fe:5d:bd:ff:f6:cd:53:d9:b3:
c7:d8:84:fa:f5:ce:b0:93:8c:7d:c5:54:27:41:7b:92:03:cc:
ac:e3:eb:2c:0f:d5:fe:86:ec:43:7b:26:36:b8:1d:4e:82:d9:
71:11:7d:2d:65:0f:23:d7:c7:45:ab:e4:c1:c5:8c:24:39:0c:
77:cf:30:66:bc:09:a8:d4:59:d9:f5:21:bc:b2:27:96:12:b9:
d2:ba:00:93:0e:b8:bb:55:b5:93:9e:47:4b:5e:0f:08:e5:48:
e1:1a:12:1b:51:ab:09:a8:48:29:0a:de:0f:6e:cc:17:87:0a:
2a:ad:30:36:f3:13:41:50:0d:43:16:ee:d3:48:ef:46:b5:fe:
2a:3e:86:a1:54:75:f4:7b:ce:e8:ea:f5:81:c3:01:17:a4:f2:
bb:ea:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:47:23 2025 by rpki-client