Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/JYm-31tHmtKX0NnDCQwWZyZvWS4.roa
File: JYm-31tHmtKX0NnDCQwWZyZvWS4.roa (raw, json)
Hash identifier: g4JwaI96sCFvP21t58o8pogqZoudya604Aq5hrOnaTM=
Subject key identifier: 25:89:BE:DF:5B:47:9A:D2:97:D0:D9:C3:09:0C:16:67:26:6F:59:2E
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 019866ACAC04546C41C908FD03B512F61C6B
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/JYm-31tHmtKX0NnDCQwWZyZvWS4.roa
Signing time: Fri 01 Aug 2025 17:27:28 +0000
ROA not before: Fri 01 Aug 2025 17:27:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8649
IP address blocks: 176.65.137.0/24 maxlen: 24
176.65.138.0/24 maxlen: 24
176.65.139.0/24 maxlen: 24
176.65.140.0/24 maxlen: 24
176.65.141.0/24 maxlen: 24
176.65.142.0/24 maxlen: 24
176.65.143.0/24 maxlen: 24
176.65.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:ac:ac:04:54:6c:41:c9:08:fd:03:b5:12:f6:1c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Aug 1 17:27:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2589bedf5b479ad297d0d9c3090c1667266f592e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:40:f9:de:07:c8:4f:91:63:37:a2:8a:9e:
58:9d:28:18:ff:56:d7:61:78:fb:33:eb:0c:ad:40:
e4:0b:77:a6:3f:a8:2f:39:30:e0:d5:ac:ea:99:53:
2c:a4:34:06:87:1b:5d:9e:de:9e:f7:99:13:83:ad:
be:b7:b6:ac:10:1a:94:9b:ab:bc:70:62:66:19:6f:
f6:4b:44:04:1f:e8:fc:ef:9d:d7:ab:dd:d7:57:36:
eb:2c:78:01:85:96:b3:6e:e2:9a:65:02:ea:cf:80:
20:22:ac:6c:ff:03:a8:75:f7:49:97:27:29:4c:74:
14:41:f5:1c:ab:1f:90:85:00:3f:50:a0:e5:d5:81:
04:52:13:c2:bd:f6:25:8a:09:a3:6b:0b:ce:16:e8:
2e:25:cb:5f:d2:a1:84:53:9c:fa:a2:ed:83:9b:6e:
70:ac:fc:ca:00:0f:62:71:c5:59:f4:f8:f6:1c:b3:
0a:7e:c7:5f:de:4b:00:67:7d:de:fa:53:5f:24:06:
92:c4:67:50:3c:e4:da:f2:8c:96:86:be:22:52:4d:
c7:9a:ee:08:09:02:fd:c6:a1:47:f4:27:5b:21:df:
8d:1b:b5:8f:9d:36:99:61:d5:51:29:3f:5b:46:81:
ab:2d:17:3e:db:03:06:6a:18:1d:15:e0:fe:da:da:
dd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:89:BE:DF:5B:47:9A:D2:97:D0:D9:C3:09:0C:16:67:26:6F:59:2E
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/JYm-31tHmtKX0NnDCQwWZyZvWS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.137.0-176.65.144.255
Signature Algorithm: sha256WithRSAEncryption
0c:26:36:69:39:79:94:a0:0c:09:e9:1b:14:66:01:af:d0:78:
ac:04:99:a3:65:d5:9d:2f:93:b7:7d:4b:d2:59:2c:66:9a:48:
b9:c9:8e:f7:d3:de:4b:76:19:23:19:d8:29:1b:3f:09:78:38:
1c:31:7f:e5:cb:43:d4:d4:77:20:7f:44:ee:bf:3a:ac:9a:6e:
17:80:e3:ab:a4:e3:ca:ba:47:53:e8:16:38:96:60:72:9d:25:
52:74:bd:e4:f2:17:44:f4:72:60:34:73:19:64:dd:7c:a9:cb:
40:59:3f:25:5b:a6:a9:01:9d:bc:02:3c:df:d8:b5:df:f9:d0:
f9:0f:d5:33:99:dc:b3:8c:55:f8:b5:db:cc:58:0d:9a:f7:91:
a9:fa:a6:2a:00:96:c3:6b:88:5f:ca:63:93:d3:6f:54:11:7e:
9b:a6:a0:23:a9:e3:b1:af:48:f1:c1:77:09:05:9b:b0:7b:5e:
a9:25:d4:80:b9:28:79:78:b7:f8:1f:c0:b1:cb:e3:99:b5:14:
4f:b6:25:d1:31:f7:2a:e0:30:c6:be:51:50:8b:84:bb:b3:b8:
6f:48:78:e6:c3:1f:ad:6a:15:e8:eb:35:98:d6:6e:61:ee:75:
54:94:3b:7a:23:6a:8d:05:f6:98:e1:ec:35:85:88:74:cf:67:
a5:00:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 17:51:57 2025 by rpki-client