Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/JjM1scO0M1VRz2BqKO1r_ZLa970.roa
File: JjM1scO0M1VRz2BqKO1r_ZLa970.roa (raw, json)
Hash identifier: jE4M6onTNWLyp2LT8jDW1lcK5SlJ5FLJoUcPkAM9kEQ=
Subject key identifier: 26:33:35:B1:C3:B4:33:55:51:CF:60:6A:28:ED:6B:FD:92:DA:F7:BD
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0198F22F80DBE96D0D8D289436BD463644FD
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/JjM1scO0M1VRz2BqKO1r_ZLa970.roa
Signing time: Thu 28 Aug 2025 19:37:36 +0000
ROA not before: Thu 28 Aug 2025 19:37:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 996
IP address blocks: 188.191.100.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f2:2f:80:db:e9:6d:0d:8d:28:94:36:bd:46:36:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Aug 28 19:37:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=263335b1c3b4335551cf606a28ed6bfd92daf7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:0a:9d:5d:32:c0:14:5f:82:0f:a6:9b:e2:
dc:30:ac:94:32:73:2d:b8:58:6c:e4:03:ee:5b:d6:
d3:62:b4:ab:d8:ac:69:1b:97:d6:03:29:75:1b:84:
cf:ca:fd:c1:b9:1e:7b:75:97:69:c8:d7:7b:9a:22:
9b:d9:68:8d:17:7a:b2:5b:25:c7:a8:97:b9:3b:6e:
4a:27:c2:17:08:4e:e9:61:6e:90:81:63:a7:30:82:
ee:16:5e:ea:6f:c5:ce:86:7b:e5:44:d6:19:9f:65:
c6:d7:56:52:49:75:00:8f:cb:76:83:74:75:00:76:
d6:dd:3a:f2:7d:06:ac:8f:f7:22:34:aa:07:58:ce:
7f:7b:5d:ff:86:ab:2f:e0:42:61:04:e2:46:9a:db:
33:44:b1:11:7d:14:1c:ed:21:3e:78:e3:35:ce:34:
ff:e5:7c:2f:f9:b6:56:30:11:28:68:03:96:56:a7:
df:10:01:f4:85:da:cd:f6:0e:b2:9f:e8:c0:42:d1:
ca:1f:72:98:23:06:99:40:b7:c7:91:c3:a1:92:bc:
8d:19:24:ad:06:e5:ec:1a:2f:c8:16:3f:10:a4:8d:
ec:c2:65:76:4d:bd:b9:f2:4b:dc:13:c2:1a:26:2b:
86:d0:23:6f:f0:6f:98:e1:79:e9:3f:5f:33:82:d0:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:33:35:B1:C3:B4:33:55:51:CF:60:6A:28:ED:6B:FD:92:DA:F7:BD
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/JjM1scO0M1VRz2BqKO1r_ZLa970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.100.0/24
188.191.106.0/24
Signature Algorithm: sha256WithRSAEncryption
69:21:cd:6e:27:5d:49:00:43:b2:5b:81:c7:77:6d:d9:f0:08:
9c:ae:68:cc:99:c8:9f:17:c9:e4:f7:bf:d2:94:c4:47:fb:eb:
77:eb:c9:b1:d0:c8:4d:98:15:93:4c:b6:43:1e:de:cc:ee:5e:
9f:c8:e2:c9:58:eb:21:cc:47:9e:c2:70:d0:57:72:34:87:94:
3a:83:f9:ce:53:f1:6d:c6:92:c7:92:cb:e9:d2:07:6c:1c:ca:
8c:ea:62:6c:81:ba:18:dd:18:3d:b6:a8:7f:a5:48:ed:44:26:
2b:9e:83:c3:cf:8b:1a:b8:58:88:df:b3:2b:eb:70:95:1e:46:
6c:d1:8a:77:d7:f2:33:f7:1d:6b:fb:87:36:f0:a0:93:2e:91:
87:97:9d:1f:c2:8d:3a:cc:bd:70:8f:44:34:5c:3b:8c:09:93:
16:0b:6a:0c:20:4f:9b:21:59:ab:9d:0c:8e:98:58:2c:78:02:
cb:4b:e6:70:3d:e2:b5:94:a7:be:35:99:af:a9:c1:b6:ab:4f:
6f:7a:77:fb:9e:c1:4d:f5:04:5d:6c:7d:24:1f:ea:93:fe:72:
01:a2:31:e4:e9:e7:86:cb:f0:83:72:a8:ed:5b:54:d7:ef:d5:
27:a1:1f:ca:81:64:bc:d3:36:3b:11:a8:dd:14:97:89:0e:4c:
78:14:d9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 23:29:43 2025 by rpki-client