Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/jsd32GyUcOABxL3lbaYKa1U9QxQ.roa
File: jsd32GyUcOABxL3lbaYKa1U9QxQ.roa (raw, json)
Hash identifier: iIGtz/WTQ1JA6imPxlRGSNb4RKMQ3XrYAPCJJH9Foiw=
Subject key identifier: 8E:C7:77:D8:6C:94:70:E0:01:C4:BD:E5:6D:A6:0A:6B:55:3D:43:14
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 0196AF168434BC1C313A48D040581B632779
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/jsd32GyUcOABxL3lbaYKa1U9QxQ.roa
Signing time: Thu 08 May 2025 08:50:10 +0000
ROA not before: Thu 08 May 2025 08:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211316
IP address blocks: 91.212.42.0/24 maxlen: 24
147.12.16.0/20 maxlen: 24
185.101.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:16:84:34:bc:1c:31:3a:48:d0:40:58:1b:63:27:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: May 8 08:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ec777d86c9470e001c4bde56da60a6b553d4314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:ae:ec:2e:a9:50:2c:82:60:ed:6f:32:00:
fb:84:6c:c2:73:cf:17:02:37:8c:3c:7f:b8:6b:0c:
18:05:b7:6e:a2:bf:a6:5c:7c:db:13:d6:7d:e5:94:
f7:06:6d:68:54:41:d4:3e:ed:4c:0c:73:f2:ba:97:
c1:a6:6b:ca:59:e2:d9:b4:97:99:d6:78:d0:5e:83:
4f:41:d9:78:e3:7d:3d:91:00:59:3b:b2:6b:7c:37:
e8:e8:cb:b7:ef:4c:9a:12:e3:33:01:3b:48:78:e4:
f6:ea:b9:98:20:f8:d1:30:ec:4f:f4:5d:bc:48:5f:
76:3e:cc:5a:f4:79:eb:60:a2:b6:2e:b3:6d:fe:e9:
e2:94:18:87:12:16:37:41:ee:82:03:bc:c3:2b:64:
8c:05:0f:ad:ca:b3:ba:ee:b0:48:14:65:0f:de:37:
16:46:76:0b:9d:f0:66:21:60:f7:91:3f:91:e2:1c:
cd:17:33:e3:74:f6:b4:ae:11:ec:71:64:1c:59:9b:
49:b2:24:d4:d8:d0:7d:2e:0e:d7:74:6c:8d:e2:bf:
40:60:d1:a4:f9:b0:4f:b8:21:c6:64:03:b6:d0:8f:
3b:65:a9:10:3f:1f:4c:20:8c:79:77:a7:43:f6:86:
4d:71:11:d4:82:df:b3:aa:dd:52:32:7c:43:dc:ef:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C7:77:D8:6C:94:70:E0:01:C4:BD:E5:6D:A6:0A:6B:55:3D:43:14
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/jsd32GyUcOABxL3lbaYKa1U9QxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.42.0/24
147.12.16.0/20
185.101.196.0/22
Signature Algorithm: sha256WithRSAEncryption
65:ed:47:ba:9a:39:a7:cb:e7:c5:94:47:ed:11:82:67:81:60:
67:a2:3c:61:10:a8:12:f5:3c:d9:c4:ae:4b:07:5d:38:71:3d:
6a:48:9f:ed:f9:1b:7d:77:45:90:11:e8:84:5a:a1:47:d3:98:
21:98:f5:7d:3d:a0:4a:11:24:82:97:46:3f:8b:bf:4a:a2:ec:
fe:17:22:fc:a2:85:53:1d:04:c5:08:47:80:bf:93:fe:d9:69:
af:53:86:40:59:a5:ac:38:08:62:28:81:9f:e8:f4:86:d1:de:
58:36:ee:a0:e1:e4:9a:57:79:96:c9:7c:3d:98:c2:0c:1c:da:
ac:58:66:39:ad:8a:20:66:36:8e:5d:2a:fc:11:20:e9:fd:e7:
f0:38:80:b4:98:9b:80:8b:69:6f:b6:9f:26:fd:07:33:df:fa:
af:d7:0e:de:8e:9f:03:69:5c:22:02:dc:17:da:d2:ce:c6:1d:
ac:77:90:41:86:58:f7:bd:d0:96:49:3d:77:34:d4:ca:b6:11:
83:cf:bf:49:f9:31:0d:0e:75:eb:b9:69:66:5b:b0:05:a8:e9:
2d:b4:7f:2e:38:9e:da:8b:fa:9e:c0:26:16:a9:c7:fc:3b:ef:
6c:1f:4b:82:18:74:73:70:62:e9:6d:87:81:12:c6:4d:d3:af:
d7:05:2b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:30:39 2025 by rpki-client