Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/jrbItzUNEH8rNuRKqj_moPSL76A.roa
File: jrbItzUNEH8rNuRKqj_moPSL76A.roa (raw, json)
Hash identifier: MddU7hBmFca6+WpltnhT8I5jhwwjpiy5HJwTYX9nENM=
Subject key identifier: 8E:B6:C8:B7:35:0D:10:7F:2B:36:E4:4A:AA:3F:E6:A0:F4:8B:EF:A0
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 019942B274861DDB5EC102334FC4F751F964
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/jrbItzUNEH8rNuRKqj_moPSL76A.roa
Signing time: Sat 13 Sep 2025 10:50:15 +0000
ROA not before: Sat 13 Sep 2025 10:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50214
IP address blocks: 176.100.151.0/24 maxlen: 24
176.100.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:42:b2:74:86:1d:db:5e:c1:02:33:4f:c4:f7:51:f9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Sep 13 10:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eb6c8b7350d107f2b36e44aaa3fe6a0f48befa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:7b:b4:c1:0d:ad:f3:3c:fb:ff:b6:a8:3e:
4f:e1:89:f3:28:a5:f8:74:ca:6b:f8:db:ee:91:1c:
0b:31:4b:8a:39:4a:e9:22:2c:5b:f5:46:7b:9e:f7:
01:09:60:f0:6d:4e:78:31:48:98:98:a5:ce:c7:a6:
de:0a:df:82:5d:ef:5b:bc:10:9d:cd:c0:99:0d:d8:
ff:9b:ae:3a:56:d6:78:3d:e0:2b:c5:4b:a7:f5:55:
21:3a:f4:0d:32:de:ab:08:d5:b3:a8:5c:84:ed:a2:
a3:0e:ee:29:5f:d8:77:66:68:7e:e4:7d:36:57:b0:
84:43:21:b8:dc:46:25:ac:70:ea:f8:68:d5:8a:48:
a7:b4:82:1b:3c:fd:e0:2e:ef:d7:1f:c2:80:16:57:
32:48:91:99:fb:58:c7:16:4f:d1:ad:d2:9c:86:bc:
d5:d1:ab:9c:da:2e:45:72:37:c2:b4:34:1a:90:fc:
58:c5:39:9f:e5:62:b9:64:37:85:5e:01:6c:42:0c:
9b:c6:4b:1d:29:0e:01:31:53:28:4d:ec:96:aa:e2:
b6:71:68:fc:db:b9:5a:e0:8f:d0:6a:33:34:fa:b1:
d9:84:30:ce:72:07:d5:43:80:16:f0:e0:7e:02:3c:
c6:17:40:50:ec:03:2b:55:5d:5b:2e:86:64:17:ec:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B6:C8:B7:35:0D:10:7F:2B:36:E4:4A:AA:3F:E6:A0:F4:8B:EF:A0
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/jrbItzUNEH8rNuRKqj_moPSL76A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.151.0/24
176.100.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3b:ba:55:a2:1d:72:cc:67:46:3d:41:82:56:73:81:f8:26:
71:f0:5e:e7:70:cf:da:e4:9a:a2:a5:60:7b:58:e5:b3:1c:bf:
c5:07:5e:d9:ba:14:d9:84:e3:b0:eb:44:02:27:c0:31:33:1e:
1b:6d:22:43:5e:a6:d2:56:a6:4c:87:1e:9d:11:be:f4:5a:82:
06:29:1f:44:46:54:30:f1:55:d2:fa:29:ba:b1:32:d6:71:a2:
9f:a8:38:02:0b:4c:0f:7c:0d:f8:27:6a:b5:da:c9:fc:6b:cb:
5b:f8:bd:75:9d:70:0a:77:21:57:30:b8:be:f7:1c:cb:d4:c3:
b4:3e:01:e5:78:43:58:25:1e:95:66:4f:ab:af:b0:5f:0a:40:
84:04:d3:11:f9:1d:bf:4b:98:6f:ec:32:65:4f:1e:c1:a8:dd:
2d:a4:e3:26:7b:81:02:8f:0a:6e:fc:d5:89:40:87:28:10:22:
af:c9:ef:af:02:3c:08:c0:26:18:fc:fc:6e:b9:88:2f:a9:5b:
8f:50:ec:84:31:1a:9a:fe:0d:f7:9f:6f:ee:e9:de:3f:ad:8a:
38:24:52:8e:9c:ed:3c:e4:ad:a5:25:d4:f9:cc:ff:af:3d:47:
53:31:73:2c:18:18:5f:85:2c:ca:4b:90:19:84:9d:d2:c2:70:
dd:f6:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:49:05 2025 by rpki-client