Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J2zkbeEsj05Bq5TuIHTrAKBES18.roa
File: J2zkbeEsj05Bq5TuIHTrAKBES18.roa (raw, json)
Hash identifier: s5lfL+BBB17SZgob10KskRCy/D6ltEJGVG1WFgQey3s=
Subject key identifier: 27:6C:E4:6D:E1:2C:8F:4E:41:AB:94:EE:20:74:EB:00:A0:44:4B:5F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198F3096A11E751C844DC63AAD2EE19F369
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J2zkbeEsj05Bq5TuIHTrAKBES18.roa
Signing time: Thu 28 Aug 2025 23:35:36 +0000
ROA not before: Thu 28 Aug 2025 23:35:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214834
IP address blocks: 89.144.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f3:09:6a:11:e7:51:c8:44:dc:63:aa:d2:ee:19:f3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 28 23:35:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=276ce46de12c8f4e41ab94ee2074eb00a0444b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:54:c2:25:93:55:97:c4:05:d6:6e:7b:da:
00:5a:7a:cb:38:f6:48:51:3a:b4:45:01:8b:19:a8:
80:ce:7c:a0:08:8c:17:f0:21:62:21:96:70:cf:a4:
2b:e7:74:b1:5b:b3:6f:7d:a4:66:5d:ae:ed:d3:a0:
52:9a:31:71:17:6d:54:f6:9a:69:cb:1f:7c:9c:0f:
2b:f7:8b:f5:63:98:fd:38:b4:9d:d8:e7:ef:a9:97:
c7:aa:40:70:87:ad:cc:ac:da:91:c1:0a:33:6e:ee:
78:c2:79:9b:9e:9c:5d:c7:bf:81:63:76:b2:00:5a:
2d:fb:7c:84:6e:23:22:14:3a:c1:be:35:b8:99:3d:
82:5f:0c:c8:5e:12:de:f1:d7:ba:61:9c:dc:1c:b9:
b7:c9:b5:31:2e:6b:a3:04:06:fe:81:35:46:2d:f4:
1f:1a:38:be:17:b9:87:f8:66:e9:08:00:d7:c9:19:
97:16:c0:01:4b:1f:2f:62:a0:a9:29:81:1a:50:18:
f4:0e:75:81:7d:2b:b8:18:11:73:8f:1b:2d:d9:30:
4c:f5:fe:17:1a:f4:c4:10:69:4c:63:0b:94:f6:7a:
7a:ef:8f:27:07:42:d8:e5:6f:d6:4a:e9:a3:3c:de:
76:d3:36:e1:9f:fb:29:86:57:68:e3:89:79:85:72:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:E4:6D:E1:2C:8F:4E:41:AB:94:EE:20:74:EB:00:A0:44:4B:5F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/J2zkbeEsj05Bq5TuIHTrAKBES18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:92:ac:09:1a:fc:18:f6:86:bb:e9:7e:e9:50:9d:ee:08:d6:
00:ee:f8:10:66:71:0f:2c:ea:b8:26:83:14:ff:4b:31:4c:55:
d1:0c:49:e2:20:95:d6:ca:9b:3c:a4:cb:ad:a9:98:10:95:7d:
92:88:ea:7c:3a:fb:40:ef:2d:48:99:4e:69:a7:a7:48:23:38:
c5:d7:0c:f8:e1:31:24:39:c4:47:c7:cd:c2:3f:4b:44:0d:be:
4f:b6:27:e1:79:61:e0:36:71:bc:4e:16:07:8a:a3:1f:38:f3:
9c:50:ba:2a:8c:a9:29:3a:ee:f4:c8:1c:8b:f4:a7:bf:88:b7:
a0:f1:5a:db:96:84:ff:dc:50:b6:f6:3b:34:0b:3c:4e:5e:d5:
6d:4a:56:31:14:20:a0:53:5e:ae:76:6a:86:fa:d1:e8:83:8c:
b6:71:fd:b4:ff:17:e0:d7:89:e5:f6:51:af:54:b0:8e:21:82:
c3:7b:f7:91:cd:56:16:93:c5:5b:bd:9b:b2:44:e0:f7:c2:91:
b5:f2:8b:bd:b6:92:ab:d6:be:86:34:a8:10:0a:22:7a:19:03:
2a:e6:86:f6:20:c6:89:c9:77:17:e8:8c:cb:0d:71:69:60:5e:
27:69:10:99:07:79:fd:f5:ac:82:ee:0a:fd:a5:40:2b:00:79:
44:c9:b2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:15:10 2025 by rpki-client