Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/jOymoJxHGwdVZzZI9smm-cJUr94.roa
File: jOymoJxHGwdVZzZI9smm-cJUr94.roa (raw, json)
Hash identifier: qWI9otHAEzYeu3JxtLRfxyxQ4Q9YIp9LKlboUGQXpbE=
Subject key identifier: 8C:EC:A6:A0:9C:47:1B:07:55:67:36:48:F6:C9:A6:F9:C2:54:AF:DE
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019A06FA1261639AF59A50393C3EBC55B59A
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/jOymoJxHGwdVZzZI9smm-cJUr94.roa
Signing time: Tue 21 Oct 2025 13:34:03 +0000
ROA not before: Tue 21 Oct 2025 13:34:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3226
IP address blocks: 157.22.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:fa:12:61:63:9a:f5:9a:50:39:3c:3e:bc:55:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 21 13:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ceca6a09c471b0755673648f6c9a6f9c254afde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:72:f0:31:d3:ed:9b:10:ba:ba:03:ec:55:
ef:fe:f8:dd:16:98:5c:75:5f:45:1c:22:df:12:d0:
da:99:28:be:87:48:a5:c7:ec:d2:58:bd:8d:34:6f:
e3:29:5c:82:ce:da:5c:7f:b6:6d:9b:c6:4b:a0:e5:
0d:f9:f6:70:bd:6b:df:dd:57:b6:2c:7c:1c:92:55:
00:79:90:c8:8d:64:b5:2f:4a:d5:38:ed:c5:85:4c:
1a:4a:d1:ab:8c:fb:73:5a:46:eb:39:46:6b:c1:39:
59:ee:d0:45:a9:0d:65:9e:91:21:1f:26:c5:64:fa:
68:41:69:69:d1:bf:44:e9:69:2f:4a:56:be:c0:41:
2c:b4:1c:3a:29:f0:3f:ac:75:f0:2d:b8:78:b4:e8:
51:79:94:f1:ec:be:1a:a2:fb:0a:62:ba:2d:ce:53:
39:a5:56:db:71:dd:8a:0b:c1:d3:b7:a4:75:6c:1b:
8b:36:c6:8f:98:db:6c:ff:4c:c2:fd:2a:d8:e1:fe:
28:9e:88:b3:8c:aa:87:9a:ee:f7:c3:eb:a5:a6:62:
da:8e:22:6c:6e:41:2e:d7:92:11:9e:57:9f:8c:ba:
86:19:02:72:3b:a9:d3:c4:7c:6c:7d:41:2d:f9:82:
9e:62:16:73:1c:a5:c2:a3:31:a2:e8:f5:0a:1d:fe:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:A6:A0:9C:47:1B:07:55:67:36:48:F6:C9:A6:F9:C2:54:AF:DE
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/jOymoJxHGwdVZzZI9smm-cJUr94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.22.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:2c:74:d0:83:70:d3:e5:a5:e2:2d:c0:33:86:6d:6b:17:db:
03:ce:af:88:13:ba:36:3c:65:21:02:92:8c:e6:8d:87:88:8b:
cc:ea:b9:30:ae:8f:7a:a7:55:71:dc:50:e5:b8:98:84:52:9c:
1d:54:ca:20:d6:86:92:72:d2:aa:62:7a:17:88:b2:9f:27:31:
6d:3b:89:60:6b:d8:68:28:4e:c9:45:91:b9:bb:71:1d:57:3c:
3c:46:b8:d7:06:b2:cf:5f:8d:38:0c:23:d7:16:90:71:8e:6d:
a2:77:68:be:da:95:d9:7f:c2:c5:43:73:11:2a:ca:17:ad:06:
45:cb:a1:8f:ea:5c:4a:46:d7:11:21:b3:fe:d6:4a:d2:c5:3c:
0c:9a:a7:bc:4d:cf:db:63:7b:42:f6:8f:3d:82:39:0e:c4:9a:
5f:c0:3b:12:0b:9d:86:63:fa:dd:5f:c3:a3:85:5e:38:b6:2e:
a5:c3:bb:11:a9:ed:3d:cc:fa:c1:b3:95:62:ff:3d:be:ae:42:
3e:35:b1:cd:e0:de:56:3f:b0:c2:72:33:e8:44:02:ad:8d:aa:
44:d4:0a:1a:f9:fc:c0:a9:0e:4d:75:f1:be:db:6d:be:9a:9b:
51:92:de:67:e6:29:76:ee:f6:d2:74:ff:15:db:80:36:ca:ab:
e6:71:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:38:20 2025 by rpki-client