Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/JYJUNADtbNU2Yx7i0LBcobueyTE.roa
File: JYJUNADtbNU2Yx7i0LBcobueyTE.roa (raw, json)
Hash identifier: 7c0QlTsEb8iwiFKiuK5La2S9GWIJ6N3/yOqTtQZH9hY=
Subject key identifier: 25:82:54:34:00:ED:6C:D5:36:63:1E:E2:D0:B0:5C:A1:BB:9E:C9:31
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01990BA6FB76E62FB0A34D95D72FFF88C5FF
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/JYJUNADtbNU2Yx7i0LBcobueyTE.roa
Signing time: Tue 02 Sep 2025 18:18:36 +0000
ROA not before: Tue 02 Sep 2025 18:18:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215567
IP address blocks: 109.122.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:a6:fb:76:e6:2f:b0:a3:4d:95:d7:2f:ff:88:c5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Sep 2 18:18:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2582543400ed6cd536631ee2d0b05ca1bb9ec931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:77:05:3d:d3:39:61:e9:87:da:00:81:e8:
fa:b6:9d:01:0a:82:60:8a:7c:0f:20:70:d6:1e:62:
66:4f:c6:77:ab:5e:f4:30:d8:2f:62:c8:c3:1a:26:
a5:ac:0a:9a:c6:db:9d:ac:23:89:4f:fc:72:31:69:
a9:75:32:09:9c:3e:94:90:bd:5d:b6:12:af:65:be:
c8:65:0d:3b:85:bb:d1:24:d6:9e:b9:89:4c:d2:8c:
d4:94:4e:94:96:31:6d:fb:80:92:30:b7:56:38:85:
57:73:4d:eb:4f:eb:21:ca:cf:cc:39:b6:dd:11:62:
43:8f:0d:92:77:7b:36:c5:b0:88:bb:05:f1:a6:57:
64:d4:d3:d2:c1:b8:d4:1a:d0:bb:09:d3:4d:4a:99:
f5:e3:4c:4a:a2:cd:17:3f:5c:33:5b:34:c6:a7:7d:
f8:ed:5f:1f:67:2e:25:69:b1:9f:66:db:b3:f4:12:
5a:c6:8e:dd:7a:c8:93:a2:d4:1c:e5:85:ed:67:fc:
22:33:1b:b7:59:22:b4:63:99:db:6c:ba:c5:2c:03:
9d:00:e4:12:4e:bb:8f:f7:01:cd:b9:de:68:5f:93:
f6:44:88:f4:0a:65:b3:95:9e:e7:50:2e:b5:74:22:
6d:76:8c:37:d6:e4:07:84:39:0c:20:2e:8f:43:8c:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:54:34:00:ED:6C:D5:36:63:1E:E2:D0:B0:5C:A1:BB:9E:C9:31
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/JYJUNADtbNU2Yx7i0LBcobueyTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.6.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d3:32:2a:b6:99:0c:d1:8e:a4:44:ad:21:fe:10:be:ce:44:
85:df:17:0f:40:69:a4:b8:97:08:00:2d:6b:e9:43:7d:76:18:
c5:15:ec:0e:e7:ab:5e:89:1b:fe:22:b8:b4:80:0b:e4:5a:08:
1f:24:be:e3:29:a4:e1:7a:e7:b0:27:6c:e5:a2:7e:4b:4d:27:
33:2a:89:64:8f:52:05:28:ec:a2:fc:c1:c4:a0:59:f3:04:d7:
d5:9f:5f:db:c9:3c:d5:3b:9c:19:ff:8f:ce:f7:9a:8e:6b:6a:
55:2b:30:93:3f:85:7e:95:44:3a:91:35:09:2b:04:64:61:a8:
40:b6:a6:5c:1b:1a:28:08:28:f3:01:a9:fc:c5:0f:9d:a2:29:
02:d9:0b:b3:a4:1b:6c:01:e2:9d:0e:c5:2a:2e:41:0b:36:f4:
53:68:5b:27:b3:cb:7a:56:75:f2:a4:bc:98:07:28:5b:d2:3e:
30:60:28:47:5e:3f:91:b3:6b:cb:e8:dc:c7:23:81:9d:43:35:
b4:18:29:1f:f2:f7:a1:7c:cd:5b:10:79:7c:22:44:e9:d3:e8:
c2:cf:b6:1c:ce:ce:66:1e:ff:64:49:40:7f:07:e8:9a:eb:5c:
1c:ed:d0:15:31:fc:82:10:ce:f4:c1:2b:73:93:35:cf:a7:4f:
2f:58:14:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:48:41 2025 by rpki-client