Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J-cSIAoI4lo9Lbo6eSBUfrnmnKc.roa
File: J-cSIAoI4lo9Lbo6eSBUfrnmnKc.roa (raw, json)
Hash identifier: 0cvEXoOHzePPIwVAgdtw5GnhDkJ2+jJAWt7uUREt5Po=
Subject key identifier: 27:E7:12:20:0A:08:E2:5A:3D:2D:BA:3A:79:20:54:7E:B9:E6:9C:A7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01993B2C31888EFB37370F3D53E1191C4148
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J-cSIAoI4lo9Lbo6eSBUfrnmnKc.roa
Signing time: Thu 11 Sep 2025 23:46:16 +0000
ROA not before: Thu 11 Sep 2025 23:46:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147186
IP address blocks: 85.93.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:2c:31:88:8e:fb:37:37:0f:3d:53:e1:19:1c:41:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 11 23:46:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27e712200a08e25a3d2dba3a7920547eb9e69ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:be:9d:34:c7:66:3f:a5:a7:ba:3c:c9:0b:db:
b9:10:82:23:a1:c9:c2:8e:22:ed:7b:f3:9d:32:a2:
b4:7f:1e:fa:5e:f5:65:f1:77:6c:f6:01:7d:7d:48:
9e:c5:ea:7f:54:8c:26:a1:30:ac:79:7b:ba:c8:49:
05:10:7a:6c:39:b3:36:7c:55:86:75:cc:bd:bc:89:
e6:8c:83:3b:a9:66:a6:74:73:b1:71:3d:92:61:04:
60:58:e5:59:c7:06:4e:85:b2:0e:12:46:bc:10:b9:
e1:f5:c6:6a:26:09:1d:44:68:92:9d:36:10:67:3b:
b3:ae:cc:5f:2f:ab:83:6a:ac:ad:e2:d2:95:a3:38:
ac:3e:51:47:af:2a:77:da:3d:20:5d:fc:05:08:f6:
e5:02:43:e2:b8:3b:2a:92:7e:32:71:ce:85:27:99:
af:c3:2a:f9:76:5a:d6:06:b4:77:29:74:97:c1:bb:
92:e2:b4:3e:bc:63:9d:8e:4e:99:fb:a4:f1:cb:02:
e8:e6:cc:76:a0:28:62:7c:2d:d8:d4:9d:ab:21:fb:
60:14:44:ef:33:26:1d:80:b1:1f:fe:25:3d:31:cb:
4f:aa:3e:6e:12:85:4e:a8:38:b5:b7:e1:9b:7e:32:
bf:72:b3:9d:1d:1c:11:f3:d2:32:a1:38:c3:80:4b:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:12:20:0A:08:E2:5A:3D:2D:BA:3A:79:20:54:7E:B9:E6:9C:A7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J-cSIAoI4lo9Lbo6eSBUfrnmnKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.21.0/24
Signature Algorithm: sha256WithRSAEncryption
67:43:2b:80:2d:2d:c8:83:cb:33:37:52:d2:45:aa:5d:06:33:
f2:f0:c1:47:9b:f3:b1:c8:00:5a:ef:14:c5:e1:12:53:64:7e:
c5:c6:f5:e2:e2:d7:a3:48:27:a9:4a:39:da:54:67:07:23:e4:
b4:9f:b7:e6:fd:a3:6f:30:72:9b:59:35:9e:d0:8a:ea:e3:6a:
8d:79:73:e7:04:a6:57:08:9f:47:82:cd:6d:c0:ed:df:d6:4b:
08:69:36:5b:8d:86:7d:e1:bd:da:4d:16:d6:5d:57:bf:9f:d5:
31:12:d6:2b:dd:7d:42:2d:a4:df:4e:33:d0:31:30:86:ff:82:
91:55:a6:a8:21:ae:0a:5e:5e:60:af:ce:f2:1e:dd:32:8f:4e:
c1:3c:83:fa:7e:c1:59:02:1a:a8:09:ce:da:3b:76:ff:b5:da:
ca:b1:e2:67:22:94:2a:30:91:fd:8b:62:56:de:dc:9e:22:e1:
e7:5a:55:ab:e9:ba:1c:25:16:c4:43:20:94:a2:1d:e4:1d:7e:
68:2b:94:79:af:d9:e1:f4:2c:97:8a:cb:46:bc:de:5e:e8:fe:
60:a1:e8:e7:3b:7e:7f:2e:c3:29:17:86:f6:f6:8d:ae:58:81:
4e:d4:10:47:c4:71:ec:5e:b7:5c:02:f6:96:68:3e:90:e6:b0:
62:72:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 22:29:18 2025 by rpki-client