Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/lJr0eEFal3w90uR7K16PpdGtVeA.roa
File: lJr0eEFal3w90uR7K16PpdGtVeA.roa (raw, json)
Hash identifier: bXds5HYnzryvezFx31bM2CqWbCYx96m/VpImkS9zFgg=
Subject key identifier: 94:9A:F4:78:41:5A:97:7C:3D:D2:E4:7B:2B:5E:8F:A5:D1:AD:55:E0
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019838D7D2C4928E134725BA14495BC9FFE6
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/lJr0eEFal3w90uR7K16PpdGtVeA.roa
Signing time: Wed 23 Jul 2025 19:52:04 +0000
ROA not before: Wed 23 Jul 2025 19:52:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49592
IP address blocks: 109.122.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:d7:d2:c4:92:8e:13:47:25:ba:14:49:5b:c9:ff:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 23 19:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=949af478415a977c3dd2e47b2b5e8fa5d1ad55e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:c2:ca:b9:e3:b2:f5:55:75:fd:11:e8:68:
58:ad:f9:99:36:95:f0:36:f9:b8:7a:9a:61:83:5e:
f5:14:03:a3:db:da:11:44:58:d9:47:71:c6:a6:de:
9f:39:1e:a4:93:f4:fe:92:74:65:40:62:23:b9:1c:
a2:a1:8e:9a:95:6f:68:16:11:e9:04:d8:ab:68:7e:
93:b9:dc:3b:16:11:a5:4c:97:5a:20:ea:45:59:b5:
db:70:c5:7b:d0:3a:bd:f1:a9:5f:94:d9:dd:7e:b7:
8a:c9:ba:3d:ee:6a:7b:aa:e9:cb:4a:1e:bc:4b:3f:
3d:89:00:31:3f:29:a4:b5:dc:39:31:48:e6:27:60:
3f:42:5e:c0:15:4e:77:83:d0:e6:94:01:04:d9:0e:
47:36:29:1f:06:e5:d7:8c:29:9c:f1:83:77:0d:87:
14:2e:1f:ec:43:98:c5:07:e3:67:d7:f0:ab:4d:a3:
79:c4:78:cd:98:dd:96:e5:32:b6:24:59:18:20:be:
ef:70:a8:4b:79:e3:3a:ff:af:69:29:09:8c:5d:18:
93:02:36:07:89:6d:73:61:c3:92:c7:92:fc:00:99:
97:2a:10:26:be:37:89:85:7c:5d:63:a5:2a:3e:4a:
5f:8b:58:a7:6f:80:83:78:32:c3:5c:f3:53:8d:69:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9A:F4:78:41:5A:97:7C:3D:D2:E4:7B:2B:5E:8F:A5:D1:AD:55:E0
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/lJr0eEFal3w90uR7K16PpdGtVeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.27.0/24
Signature Algorithm: sha256WithRSAEncryption
57:52:d6:62:f1:c0:83:2b:34:02:5f:f1:79:d1:72:8e:15:b0:
87:9b:f1:0b:5e:5e:02:27:20:cb:c6:10:6b:45:cc:55:a3:2f:
3c:9c:8e:ee:ad:3c:85:65:d4:de:aa:7c:04:82:90:81:bb:b1:
62:54:3b:e6:81:4d:82:b2:6f:6d:d1:0a:6d:f5:d1:12:99:9a:
8a:2f:d0:76:0e:a9:6e:b3:2e:4b:db:56:15:b7:81:09:0e:df:
14:fb:ea:5f:72:c0:9b:6c:94:9f:28:8a:12:62:2c:45:bf:e5:
f5:0a:d4:3b:02:27:27:16:d1:cc:1c:ee:77:01:ac:98:94:29:
8c:67:3d:39:c4:41:56:fe:da:fd:70:32:88:f2:d4:8c:10:c2:
fa:09:02:b2:8a:79:28:58:34:f0:e6:02:b0:0b:9e:ec:13:3c:
9d:83:ec:23:f1:23:5a:48:ab:70:55:96:2d:7b:9d:17:0e:99:
23:df:c5:d0:08:32:78:2a:4d:ae:f6:16:aa:e3:c8:74:77:38:
d7:dd:54:e7:c6:0f:e9:94:e4:9c:c2:99:36:58:83:19:a8:e9:
49:25:d0:a4:29:e3:b8:1f:65:e6:21:bd:4c:19:15:35:b4:eb:
17:3c:2c:4e:93:cf:5f:6d:9a:80:09:fe:2a:55:f0:7c:8c:de:
ad:46:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 21:29:54 2025 by rpki-client