Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa
File: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (raw, json)
Hash identifier: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=
Subject key identifier: 26:24:B5:4E:2A:61:E4:74:E6:18:DC:D9:D0:AB:41:50:81:1A:7F:B0
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 01973B5073FE367A6AC339675946B9B52E89
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa
Signing time: Wed 04 Jun 2025 14:20:17 +0000
ROA not before: Wed 04 Jun 2025 14:20:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28917
IP address blocks: 82.194.244.0/22 maxlen: 22
89.188.164.0/22 maxlen: 24
89.188.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:50:73:fe:36:7a:6a:c3:39:67:59:46:b9:b5:2e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jun 4 14:20:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2624b54e2a61e474e618dcd9d0ab4150811a7fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d5:42:c1:43:c5:57:9f:c9:dd:97:a9:4e:08:
02:6c:1f:94:2d:62:97:62:50:e0:91:93:d1:e6:14:
61:2d:bf:1f:73:98:44:67:29:24:38:bf:2a:a4:eb:
bf:e8:b1:8a:d7:bb:c2:fa:55:9d:db:4f:c1:3e:4d:
fd:aa:dd:21:52:9c:b8:6a:ad:42:d6:11:d2:0b:7c:
1d:af:19:17:fb:f0:e3:6c:48:0f:13:40:b2:d6:77:
b2:da:d7:43:12:84:5a:5b:88:67:75:ab:dc:14:c5:
27:5d:ea:12:6a:72:ca:70:1c:0d:43:b5:af:a1:cb:
72:7b:b3:4b:d2:50:d7:00:0d:94:74:dc:e4:7b:6c:
aa:bd:00:92:1c:1b:4a:d5:65:e7:33:dc:e7:2d:c3:
e8:c3:3e:7e:14:7f:9a:8b:3e:b3:8c:8f:ca:cb:4b:
ab:5b:2b:2e:af:73:d6:b7:f0:f9:1e:b7:c5:62:dc:
60:d6:f2:eb:d0:8c:43:6e:87:8f:88:b6:23:ff:59:
85:b0:92:af:cb:fc:86:6c:1f:33:9d:99:d6:a8:c8:
87:12:bf:96:bb:c1:6f:4b:1b:8f:3d:45:59:da:5b:
9c:e6:1c:2f:cf:0b:90:a4:87:86:85:77:2a:ff:23:
e0:71:f3:77:d8:8b:37:ed:8a:25:8b:77:91:3f:a7:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:B5:4E:2A:61:E4:74:E6:18:DC:D9:D0:AB:41:50:81:1A:7F:B0
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.244.0/22
89.188.164.0/22
89.188.176.0/22
Signature Algorithm: sha256WithRSAEncryption
78:44:c1:3f:d2:4c:95:3e:14:99:3f:f6:f9:c1:59:f0:8c:31:
ec:99:3d:fd:bf:14:11:81:ba:5c:48:98:e3:1e:44:24:e5:8f:
aa:93:ef:2d:68:23:8f:3a:0d:6e:7a:51:40:3b:3f:b6:58:31:
01:e2:6d:91:41:1c:a6:2f:0a:09:70:77:18:f8:2d:d5:88:6f:
52:26:de:be:ca:37:7b:55:5a:3e:74:99:56:a4:42:9d:f6:93:
20:3a:be:61:93:0d:80:10:26:99:df:e0:4a:41:73:f6:62:c6:
c5:eb:d5:72:2b:cd:e2:09:80:4d:2d:3e:d1:6b:a9:14:90:af:
21:7e:b0:08:9f:c8:73:e3:f5:7b:75:b6:ac:16:ed:e0:2a:7e:
c1:b2:a6:82:48:93:15:1a:69:3c:b1:92:9b:c8:b8:05:3d:1a:
94:82:22:1a:81:2a:1a:bb:cd:85:56:8c:75:79:4b:9d:61:68:
20:3c:c9:ce:69:83:f3:e1:f8:00:50:06:dd:47:0d:79:c7:4f:
ad:76:3f:af:fd:76:8f:fa:1e:ee:1e:31:b1:ce:63:5e:83:9d:
ea:78:d6:7f:30:ba:0f:01:fc:3b:6c:2c:2f:cd:50:25:b2:71:
a5:4c:f0:56:9f:bf:f0:96:66:a5:b2:5c:db:63:e0:4f:2c:98:
50:64:4a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:12:12 2025 by rpki-client