Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CJUA2yuXabkYksmprVZrstM0Xew.roa
File: CJUA2yuXabkYksmprVZrstM0Xew.roa (raw, json)
Hash identifier: J+EyCFwGpmKQm7O8pq8pjwtBZfFrVCksbvDj4On8jok=
Subject key identifier: 08:95:00:DB:2B:97:69:B9:18:92:C9:A9:AD:56:6B:B2:D3:34:5D:EC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A2DA4C190DDBC691A3186088AA91DB499
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CJUA2yuXabkYksmprVZrstM0Xew.roa
Signing time: Wed 29 Oct 2025 01:46:03 +0000
ROA not before: Wed 29 Oct 2025 01:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214299
IP address blocks: 89.106.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:a4:c1:90:dd:bc:69:1a:31:86:08:8a:a9:1d:b4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 29 01:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=089500db2b9769b91892c9a9ad566bb2d3345dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:c9:8a:2f:ee:7a:e5:d3:40:ba:ca:28:04:
50:7e:4b:2a:9d:c5:85:27:62:99:f6:e8:c6:60:77:
58:bd:e7:0f:7f:53:09:00:42:56:15:43:33:dc:aa:
9a:56:9e:f8:2d:fe:a2:ae:4e:96:d9:52:9f:f5:97:
59:46:69:97:05:f1:83:c3:fa:82:c0:74:7e:c3:a1:
a1:42:80:04:8f:6b:ad:8b:bb:9a:2c:aa:24:81:74:
68:f6:e4:00:17:94:a5:f3:cb:0e:e2:cf:d0:f0:08:
30:ca:36:bc:90:9d:40:48:61:2e:64:2a:39:a1:dc:
11:f1:49:d5:07:6d:b1:3c:af:b2:45:d4:38:4a:d3:
c1:32:db:ba:33:f4:d7:6d:41:cf:f9:b6:2a:c7:21:
62:bd:c1:90:a5:42:1b:91:b1:c6:5e:58:db:cc:43:
2a:4d:ee:5b:9d:85:1e:9e:85:98:9b:c8:c1:a2:75:
66:59:2c:d7:b9:a9:c5:4c:46:ea:0e:02:3f:22:f3:
4c:4e:ba:a0:a5:06:89:fd:99:f4:e5:a0:40:ea:e8:
f5:4c:b3:3e:7a:8c:80:21:12:c6:9d:d5:25:85:05:
d3:1d:c0:69:73:be:88:70:7b:96:82:bb:d0:45:db:
6e:93:45:e7:90:4e:f0:79:b8:e7:fd:da:37:af:02:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:95:00:DB:2B:97:69:B9:18:92:C9:A9:AD:56:6B:B2:D3:34:5D:EC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CJUA2yuXabkYksmprVZrstM0Xew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.72.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:0e:9d:ad:3e:7d:cf:9b:c4:9d:7d:bb:ce:0d:c2:cc:57:b9:
60:c2:29:1e:5d:0f:27:2c:f6:5c:a5:b6:43:4e:8d:b9:d2:d4:
b6:f6:01:bf:c2:2f:04:61:ab:ab:30:22:a1:3b:ef:7c:70:17:
53:91:9d:58:a5:aa:4b:fb:2b:4e:7c:bd:62:e5:fe:bb:0b:2f:
4b:94:b5:79:c3:fc:9d:fb:9d:8f:0a:e9:e5:96:35:e6:b9:cc:
bb:f1:00:d2:3e:14:9b:0e:14:0c:6d:0d:79:00:41:2c:8c:3b:
e3:ad:7b:bd:2d:f1:e1:88:ae:9b:81:bf:d3:31:16:77:ec:2d:
0c:d1:5e:e5:40:51:1f:2b:7c:95:55:73:e4:c3:0a:ae:23:c4:
d5:a9:25:8e:0c:a3:03:84:61:6d:35:2c:c5:a0:d2:2a:b4:a9:
a1:ad:53:46:22:be:e0:02:70:b4:cd:9a:ee:e5:dd:29:30:e3:
13:ea:b4:ea:3f:1c:25:f3:03:9a:5a:13:ff:08:0e:41:ea:f0:
98:9c:87:02:2d:5f:e6:b8:d2:68:42:46:b3:9d:7c:f5:e8:6e:
92:71:be:0f:9f:d1:99:96:d3:35:b6:49:b9:ff:a0:48:fd:e9:
5c:ae:08:04:d9:8a:bb:cd:bc:e4:61:fc:7b:6e:28:89:bc:28:
0b:ff:c6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 19:52:50 2025 by rpki-client