Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JyckXigwYGV__68AUCYD52rnXo0.roa
File: JyckXigwYGV__68AUCYD52rnXo0.roa (raw, json)
Hash identifier: SbkH6tPWhWrW/o78zmYE9oC7rLfxWmyocNFH2s//I5E=
Subject key identifier: 27:27:24:5E:28:30:60:65:7F:FF:AF:00:50:26:03:E7:6A:E7:5E:8D
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0198E35FD18157FB890CDA898A1813028525
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JyckXigwYGV__68AUCYD52rnXo0.roa
Signing time: Mon 25 Aug 2025 22:36:04 +0000
ROA not before: Mon 25 Aug 2025 22:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44881
IP address blocks: 94.137.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e3:5f:d1:81:57:fb:89:0c:da:89:8a:18:13:02:85:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Aug 25 22:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2727245e283060657fffaf00502603e76ae75e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:2f:bc:ae:68:a2:65:ee:c8:d4:fb:4b:02:
a6:98:dd:74:d3:a8:96:5f:4d:bb:4f:e3:e6:44:9c:
a6:9d:e8:d1:42:50:a4:a6:79:19:0a:2c:54:ce:e1:
94:b0:60:a1:66:5f:dd:f1:8a:3a:42:49:f5:7c:75:
97:5c:16:d9:23:fe:23:f6:77:59:e5:73:1d:9f:06:
3a:cd:c5:ae:b5:a0:c1:48:34:43:7c:89:13:5c:14:
5c:ad:f1:a9:22:a2:44:5a:48:4b:98:d8:88:ae:63:
3a:7a:89:71:88:6c:97:0e:63:3a:d8:18:b7:00:d8:
fd:c6:3c:60:b5:74:de:af:d1:96:d6:9c:53:a3:f6:
43:5b:75:bd:e0:63:2e:6c:ec:ba:ca:6b:f4:4a:96:
50:4f:c5:6e:22:66:9d:2a:cb:e1:14:46:00:5d:64:
05:4a:05:4b:5b:a1:a7:52:35:48:cd:9b:72:bb:d9:
1d:29:de:00:51:be:c2:0c:88:7a:eb:cc:18:18:e3:
d9:9f:6b:cb:55:71:ec:92:b1:ae:12:06:42:9e:68:
38:b9:f8:c8:6d:95:24:3c:05:96:08:5d:83:c7:db:
96:72:e2:e9:9f:6b:a3:b7:c9:52:53:11:b0:e1:13:
06:2f:5b:37:8b:03:10:c2:2f:35:e5:d4:58:3c:5f:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:27:24:5E:28:30:60:65:7F:FF:AF:00:50:26:03:E7:6A:E7:5E:8D
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JyckXigwYGV__68AUCYD52rnXo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:cb:f9:5a:26:0a:31:8a:aa:02:a6:ec:44:b6:07:5d:2c:09:
7e:f4:87:04:c6:11:4c:38:b8:01:cb:d4:6f:06:cd:d9:b0:0e:
2f:19:67:0e:e3:84:99:7e:a5:e4:d7:2d:f0:7f:59:53:3c:4a:
86:14:a8:b6:91:39:d1:db:e4:38:82:8b:47:48:29:b7:bb:11:
e9:76:5e:57:d3:f8:4b:06:ad:1d:8e:d4:f8:e9:b3:e0:9a:a1:
a6:a8:52:ec:ef:9f:dc:cc:5d:75:0b:5d:5b:8d:ad:3a:8d:39:
09:67:9b:90:e4:fa:cc:41:0a:f1:f9:06:f4:c3:69:5b:20:d6:
59:fa:30:e4:b1:d4:b5:76:03:f5:4d:0a:e0:64:1b:a9:85:9c:
57:c0:1a:31:25:2d:76:e7:4d:b0:db:b9:cc:d1:48:b4:c3:0a:
52:8d:b2:d3:95:af:d3:b2:00:ba:5e:19:65:f7:dc:55:fc:0b:
d4:7b:cf:20:fa:fc:37:6a:31:15:37:9a:88:d6:64:64:57:98:
b9:5c:91:38:09:27:95:62:d9:22:00:12:1f:3c:24:f5:e9:fa:
22:dc:06:84:8b:f1:06:5a:1e:90:48:cc:f5:d1:2b:3a:cc:e8:
0b:2c:e1:9b:f9:e8:0b:d1:78:d2:1e:36:fe:cf:ed:95:6b:db:
b2:36:01:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjjX9GBV/uJDNqJihgTAoUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjUwODI1MjIzNjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzI3MjQ1ZTI4MzA2MDY1N2ZmZmFmMDA1MDI2MDNlNzZhZTc1ZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy4vvK5oomXuyNT7SwKmmN1006iW
X027T+PmRJymnejRQlCkpnkZCixUzuGUsGChZl/d8Yo6Qkn1fHWXXBbZI/4j9ndZ
5XMdnwY6zcWutaDBSDRDfIkTXBRcrfGpIqJEWkhLmNiIrmM6eolxiGyXDmM62Bi3
ANj9xjxgtXTer9GW1pxTo/ZDW3W94GMubOy6ymv0SpZQT8VuImadKsvhFEYAXWQF
SgVLW6GnUjVIzZtyu9kdKd4AUb7CDIh668wYGOPZn2vLVXHskrGuEgZCnmg4ufjI
bZUkPAWWCF2Dx9uWcuLpn2ujt8lSUxGw4RMGL1s3iwMQwi815dRYPF98DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCcnJF4oMGBlf/+vAFAmA+dq516NMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvSnlja1hpZ3dZR1ZfXzY4QVVDWUQ1MnJuWG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXolcMA0G
CSqGSIb3DQEBCwUAA4IBAQBPy/laJgoxiqoCpuxEtgddLAl+9IcExhFMOLgBy9Rv
Bs3ZsA4vGWcO44SZfqXk1y3wf1lTPEqGFKi2kTnR2+Q4gotHSCm3uxHpdl5X0/hL
Bq0djtT46bPgmqGmqFLs75/czF11C11bja06jTkJZ5uQ5PrMQQrx+Qb0w2lbINZZ
+jDksdS1dgP1TQrgZBuphZxXwBoxJS12502w27nM0Ui0wwpSjbLTla/TsgC6Xhll
99xV/AvUe88g+vw3ajEVN5qI1mRkV5i5XJE4CSeVYtkiABIfPCT16foi3AaEi/EG
Wh6QSMz10Ss6zOgLLOGb+egL0XjSHjb+z+2Va9uyNgGr
-----END CERTIFICATE-----
Generated at Wed Sep 10 09:27:22 2025 by rpki-client