Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/JMDcAIWxrwE8KfR3NGRyLH7J9uQ.roa
File: JMDcAIWxrwE8KfR3NGRyLH7J9uQ.roa (raw, json)
Hash identifier: 0nHeWpMjTTXLjF1SNsTFJ//WlmXhrR/+ojxRWqJj3yI=
Subject key identifier: 24:C0:DC:00:85:B1:AF:01:3C:29:F4:77:34:64:72:2C:7E:C9:F6:E4
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0198EF71BA0A7A4FFC2FA5EC239A3017512F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/JMDcAIWxrwE8KfR3NGRyLH7J9uQ.roa
Signing time: Thu 28 Aug 2025 06:51:04 +0000
ROA not before: Thu 28 Aug 2025 06:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 193.93.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ef:71:ba:0a:7a:4f:fc:2f:a5:ec:23:9a:30:17:51:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 28 06:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24c0dc0085b1af013c29f4773464722c7ec9f6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:72:7d:b1:f4:ab:9b:9e:90:26:6b:39:b0:
99:d8:1c:fa:e3:67:ae:e9:69:20:3d:64:3c:71:8e:
e1:63:2e:61:23:8f:28:20:8c:a7:35:da:d1:db:88:
ef:14:94:ec:71:5b:8a:72:ef:ce:32:a9:bc:d9:02:
69:cb:96:ad:fd:f0:e8:18:dd:c9:ec:b7:c0:36:04:
97:cb:76:f2:9a:a7:79:45:e9:38:cb:23:b6:a7:72:
57:05:8b:60:62:c3:fa:5b:b1:3f:44:8d:12:20:34:
d7:91:c5:b1:c8:6c:79:01:25:98:a0:8b:e9:e9:a5:
7e:91:93:f5:d7:22:cc:8d:49:60:73:2b:c2:f9:a1:
01:ec:ef:90:6f:ea:93:ef:ab:f3:e8:f5:61:28:6e:
b1:9c:7b:4f:37:63:bf:53:35:53:f1:91:10:3f:33:
ff:80:c7:2b:57:4d:57:66:95:81:ab:ab:b8:f3:1b:
d9:a2:5e:19:49:e7:85:a5:ce:a9:fa:e3:00:85:2f:
07:72:e5:e6:2b:33:1a:ac:94:51:50:f3:ca:bd:4c:
4b:1c:2d:d8:0c:a2:9f:7e:90:ae:32:7c:d9:62:f2:
a1:f5:7f:ff:fc:e7:ea:0d:6f:1a:b5:a6:63:16:6a:
57:3e:f9:ba:52:af:c8:10:b2:17:db:47:78:dd:4a:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C0:DC:00:85:B1:AF:01:3C:29:F4:77:34:64:72:2C:7E:C9:F6:E4
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/JMDcAIWxrwE8KfR3NGRyLH7J9uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:51:60:60:d5:f2:f5:43:ca:69:10:91:9b:f8:3b:a4:8e:a8:
96:39:3b:9a:75:c3:9a:c9:83:09:69:35:13:84:b3:fa:88:31:
a6:10:85:be:ab:04:39:b5:44:ed:0b:57:b7:e8:12:14:f1:82:
97:5f:b0:de:b0:e3:0c:32:9a:c6:16:e5:19:62:16:ba:03:87:
fe:3e:d3:e3:cc:36:9b:ae:af:6c:20:3b:52:64:89:d9:7a:76:
5a:59:5f:02:af:5e:91:01:4f:9f:c1:d6:d5:0b:88:69:ba:56:
6f:9b:2a:a2:fe:22:bf:ef:da:78:0e:36:c2:a0:6b:fd:d3:4b:
55:8a:52:cb:3d:33:0e:67:5f:97:a7:40:21:ab:9d:7e:b0:90:
85:a0:b3:11:52:69:6f:d0:8f:19:9d:d2:f4:1a:b6:16:4b:b7:
2c:b5:f5:b4:ed:3c:cd:3a:a8:8f:2b:90:b6:1f:02:3a:f1:13:
ee:5e:ae:99:23:ae:89:91:91:14:e1:e8:41:91:2e:48:0e:3c:
7a:77:d2:50:cd:41:c7:f0:e2:00:f3:d0:45:4b:b4:79:6f:45:
26:c2:31:86:01:fd:f1:99:40:93:b1:ce:99:5f:ea:28:da:bd:
f7:0b:56:26:20:01:a3:3c:9b:df:28:7c:c0:16:8c:47:92:21:
81:92:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 22:21:09 2025 by rpki-client