Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RJLJb3ga3P_YNu3kdpeEqT2y3dU.roa
File: RJLJb3ga3P_YNu3kdpeEqT2y3dU.roa (raw, json)
Hash identifier: 9vtdR8dCmZlZwMD+ZQcFw5zOdnqcN1Y7QOCnwaxzYBw=
Subject key identifier: 44:92:C9:6F:78:1A:DC:FF:D8:36:ED:E4:76:97:84:A9:3D:B2:DD:D5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0197DFE9FACA978A083526392FB7FC6D241D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RJLJb3ga3P_YNu3kdpeEqT2y3dU.roa
Signing time: Sun 06 Jul 2025 13:25:42 +0000
ROA not before: Sun 06 Jul 2025 13:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 91.208.61.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
212.192.16.0/23 maxlen: 23
212.192.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:e9:fa:ca:97:8a:08:35:26:39:2f:b7:fc:6d:24:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 6 13:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4492c96f781adcffd836ede4769784a93db2ddd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:37:e4:35:44:fe:28:09:43:be:82:aa:dd:
4a:66:82:b7:ea:8e:8c:60:cc:2c:f8:ad:8a:c6:cd:
46:61:07:11:21:ec:15:ff:74:7a:54:b8:fa:bc:cf:
cc:91:af:1a:12:b0:1a:b8:a1:85:ff:c7:4c:0d:9a:
7f:fb:d8:53:62:b8:de:69:85:71:71:15:51:8b:cc:
5c:4b:56:75:8a:42:ec:3d:a9:ed:f2:ed:77:70:c0:
1b:bb:a9:13:0b:4c:2f:18:db:b9:85:30:54:ec:f2:
40:ac:96:00:4a:ca:c0:c9:5b:22:c7:17:8f:bc:13:
5d:93:4c:18:ba:08:e4:0a:fc:5b:d3:b2:8d:28:4b:
b6:24:02:4d:40:3a:1a:94:89:d8:4d:75:fe:e4:85:
87:05:18:a1:ab:06:94:ba:93:0b:22:bd:41:f6:e3:
03:f0:4e:53:b3:07:fe:7d:a3:8d:5d:87:e1:4c:e5:
4f:6b:47:5e:26:d1:5c:1e:a6:2d:23:08:3d:a2:73:
68:2d:bc:dc:d7:ae:00:42:20:e4:c6:44:a6:d1:8a:
41:fc:c1:06:d7:eb:fe:3f:54:35:b0:6d:68:f6:69:
d9:6b:9b:cd:d9:c7:61:a4:7b:6a:f3:7b:6f:83:70:
f4:16:cd:0b:8c:4d:00:1e:05:2a:87:a8:f3:bd:bf:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:92:C9:6F:78:1A:DC:FF:D8:36:ED:E4:76:97:84:A9:3D:B2:DD:D5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/RJLJb3ga3P_YNu3kdpeEqT2y3dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.61.0/24
103.56.84.0/24
193.124.36.0/24
212.192.16.0/22
Signature Algorithm: sha256WithRSAEncryption
78:50:bf:da:3b:d0:20:b0:a9:a2:91:50:eb:39:3a:b6:67:c3:
c1:cd:14:18:40:da:e9:54:f9:4e:db:a5:3a:43:a1:94:e7:20:
2d:2a:b7:0d:71:1c:85:72:25:2b:90:1c:24:82:97:b8:28:ed:
df:2a:cf:88:ee:a5:b3:12:7e:0a:8a:5d:6d:ea:6b:e9:cc:d8:
04:ec:67:79:f1:6d:ee:b9:60:af:1d:28:86:9d:c8:ae:9d:a3:
ab:11:3e:7f:d4:e6:9e:db:bd:a7:f1:4c:aa:dc:27:ed:f1:7d:
ca:8e:ea:00:2d:da:45:e2:c2:24:66:a0:43:f8:a2:96:72:47:
b8:2c:d1:4f:40:6b:7a:4a:fc:fb:56:dc:b0:c9:e9:ab:93:ce:
0b:fb:d9:9e:7e:4f:97:7d:a0:d3:f7:76:84:cd:3c:6b:d2:d0:
35:8f:8f:77:f4:10:a0:0d:91:c7:65:2c:67:ad:91:9e:80:61:
0e:e4:73:d0:77:5b:24:4d:01:74:df:6e:2f:04:7b:6e:f5:5e:
0b:1a:b4:69:04:24:b0:c7:d6:c7:75:93:54:1f:28:e2:39:cd:
b0:b8:77:51:fc:6a:37:d0:fe:ec:ac:8b:bb:fb:0b:3b:3a:05:
9d:22:c9:79:65:7c:79:68:18:bd:06:e0:1e:e6:ae:d8:a6:ad:
67:b2:3d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 03:13:03 2025 by rpki-client