Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/jmGzc4FW1R6PAQNH4WxlC9OKi34.roa
File: jmGzc4FW1R6PAQNH4WxlC9OKi34.roa (raw, json)
Hash identifier: q2c49YbHCp9droshhYthNjwqMciPkn/uk7InBbQTyJo=
Subject key identifier: 8E:61:B3:73:81:56:D5:1E:8F:01:03:47:E1:6C:65:0B:D3:8A:8B:7E
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0198E246C00C589B695C04C626AC0E37246D
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/jmGzc4FW1R6PAQNH4WxlC9OKi34.roa
Signing time: Mon 25 Aug 2025 17:29:04 +0000
ROA not before: Mon 25 Aug 2025 17:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50340
IP address blocks: 2a09:f9c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:46:c0:0c:58:9b:69:5c:04:c6:26:ac:0e:37:24:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Aug 25 17:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e61b3738156d51e8f010347e16c650bd38a8b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:c7:41:3d:8d:5d:81:6c:15:59:e3:73:0c:
15:5d:fa:97:a1:52:1e:10:98:c5:36:38:99:b3:64:
b1:0d:41:f7:71:ad:d7:3a:3b:ba:ac:ef:3c:24:1a:
b2:61:30:c0:4a:25:01:2b:f4:7c:b4:5d:4a:07:c2:
e1:0d:e2:5a:59:41:c2:7f:af:95:0f:8e:71:93:8b:
f9:25:f6:c8:9e:9b:aa:10:ad:ce:84:a0:ef:ac:66:
72:03:69:d9:f8:57:87:cd:a4:20:6d:68:c9:26:c3:
86:9e:7c:01:09:ad:53:61:6f:31:ab:bc:08:44:d5:
a2:42:8c:e5:47:c3:8b:03:47:76:4c:21:56:15:04:
13:fe:41:a9:a4:92:21:52:4c:41:c5:3f:ee:c6:cc:
cd:a7:8a:08:45:55:4f:da:61:61:d4:ee:49:57:15:
fc:52:b6:86:fe:e3:a4:c9:ac:2d:fe:1b:70:08:2e:
27:75:c4:4e:63:b3:41:c3:28:18:b0:46:48:ee:54:
a4:2c:a3:b4:0f:b3:95:34:20:a9:43:ec:ce:08:3c:
87:7a:70:a8:6d:56:d2:45:d9:e6:41:19:16:e2:fd:
ac:73:5a:49:74:79:00:c6:71:56:14:84:e8:b4:d6:
d7:dc:1e:07:f4:26:9d:26:5c:92:a8:a8:66:42:a2:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:61:B3:73:81:56:D5:1E:8F:01:03:47:E1:6C:65:0B:D3:8A:8B:7E
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/jmGzc4FW1R6PAQNH4WxlC9OKi34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:f9c1::/32
Signature Algorithm: sha256WithRSAEncryption
0e:6c:ae:e4:e9:1e:bd:59:5b:1c:2d:8c:ed:52:c9:d2:ca:30:
83:93:b3:60:0e:7a:e5:f4:56:90:9c:3b:4f:ed:e0:33:f7:39:
35:fa:fe:1b:f6:ea:b5:2f:21:16:5b:cf:1c:ce:b6:19:be:e7:
5d:80:45:48:b4:d7:98:3b:55:0e:c9:80:2f:5e:dc:df:b0:09:
c0:cf:27:d0:23:bf:ac:4c:19:1a:f7:c0:f1:c6:26:9e:76:01:
b8:ba:7e:42:95:9e:97:84:12:98:6f:8a:4b:ef:ff:5e:f9:31:
ef:b0:b7:93:e5:6f:be:37:3f:3e:fc:2f:86:cd:72:89:ea:72:
07:70:90:2c:90:b3:e4:29:d1:96:dc:df:3d:3c:56:7e:f5:fa:
88:b2:6d:d5:8b:56:d2:80:03:51:de:b2:6e:e9:55:02:4a:4e:
11:d5:f0:16:89:a8:10:f3:57:be:2d:74:20:94:ac:46:22:78:
7b:ef:d1:41:f1:23:5f:cc:d0:c8:ce:35:d6:d5:3f:9d:61:b4:
5e:b0:6b:2e:ed:cf:b9:25:16:1a:58:8a:a2:e5:24:77:36:e2:
96:f4:37:f4:2c:f9:f4:89:83:bd:b5:19:28:a1:07:1e:7b:c1:
5c:9e:cb:76:cf:68:67:4f:fb:b9:7b:20:0f:54:be:2e:45:2b:
a7:ff:50:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:09:26 2025 by rpki-client