Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/JIUfJiSMwwRhLhXhNFBhDMd2oXs.roa
File: JIUfJiSMwwRhLhXhNFBhDMd2oXs.roa (raw, json)
Hash identifier: o+w9uCPhfVsnCQk8/ZFs5vyGrQvgAaes0qJUqUvPv88=
Subject key identifier: 24:85:1F:26:24:8C:C3:04:61:2E:15:E1:34:50:61:0C:C7:76:A1:7B
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 01993CD68EBF3CFFF2DD4F2E280B903F6E2E
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/JIUfJiSMwwRhLhXhNFBhDMd2oXs.roa
Signing time: Fri 12 Sep 2025 07:31:58 +0000
ROA not before: Fri 12 Sep 2025 07:31:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 2a14:2a00::/40 maxlen: 40
2a14:2a00:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:d6:8e:bf:3c:ff:f2:dd:4f:2e:28:0b:90:3f:6e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Sep 12 07:31:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24851f26248cc304612e15e13450610cc776a17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dd:22:24:f0:af:a3:ea:47:62:ee:76:41:41:
ec:9e:3f:2a:2e:a8:8c:dc:48:95:f5:9c:11:7b:5f:
ba:01:ab:f5:9d:05:37:70:33:d4:d5:eb:bc:a6:7d:
83:dd:ba:d0:98:43:70:8c:7d:6b:1b:f4:a0:df:79:
93:78:6c:e8:f6:6b:e7:87:fa:d4:ca:0a:72:7a:68:
48:ab:48:57:6f:2e:64:2e:22:06:4a:07:33:27:4e:
ab:7e:37:98:37:ee:0d:cf:75:27:ba:13:bd:97:0c:
d4:7b:4e:07:ba:01:f0:df:4f:f3:51:e2:f1:4d:43:
4a:9e:70:92:c4:a1:dc:aa:68:73:b5:3e:0b:93:35:
4e:fb:9a:99:35:c7:e0:2e:47:58:3b:5b:01:38:d7:
d3:65:3e:58:cb:40:f2:c8:5c:5b:c0:96:2c:c6:cd:
2b:48:50:e9:08:15:b1:92:25:7a:08:45:a9:2f:e4:
3d:60:4d:bd:6d:d5:15:36:2b:7e:93:06:23:a3:86:
cb:fd:a2:f4:d0:19:36:70:f6:85:c1:a8:d8:0e:19:
4c:55:cc:a0:3e:96:1c:e4:b5:d2:e2:86:32:cf:0d:
1b:05:be:58:6d:ef:b8:4e:7d:c3:68:70:72:95:52:
e7:85:43:28:80:d2:93:8f:c1:82:5f:f0:3f:0c:ae:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:1F:26:24:8C:C3:04:61:2E:15:E1:34:50:61:0C:C7:76:A1:7B
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/JIUfJiSMwwRhLhXhNFBhDMd2oXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2a00::/40
2a14:2a00:200::/40
Signature Algorithm: sha256WithRSAEncryption
51:c4:4c:97:69:02:94:d4:c8:c2:84:23:a0:1a:20:6a:f9:b9:
1d:c6:ce:be:fd:64:17:32:f5:71:60:75:0c:15:f9:a1:50:96:
e8:e7:36:b1:13:f0:8b:cf:d0:10:7c:35:83:65:de:13:59:bc:
36:95:35:8d:2c:2f:62:42:94:fe:b8:c1:44:56:77:72:34:10:
5f:9c:9c:a5:83:8e:2b:5a:f8:f0:26:bf:c4:7d:25:49:b2:41:
d2:6c:e7:a9:84:2e:7e:b6:38:bd:e2:a0:e1:bb:4e:ae:24:9d:
11:aa:00:1b:53:32:ad:5c:df:1f:04:25:69:ef:07:70:17:67:
a6:dc:97:aa:31:59:49:2d:ab:93:97:93:a4:19:51:da:83:4e:
ab:d6:88:ff:9e:3a:58:9c:d4:63:28:ad:27:92:77:1d:51:69:
d4:53:b9:9e:c9:d3:2d:0a:8b:4f:43:a9:02:f9:2e:3b:26:17:
de:32:d2:b5:f8:7e:b1:90:f0:fd:63:e3:ec:d7:ca:e7:78:61:
37:54:01:24:c7:2a:76:79:6e:20:15:fb:16:bd:54:98:8e:6e:
bb:c1:14:d2:b2:7a:46:11:ca:9a:f9:9f:13:3c:fc:84:53:ff:
09:77:90:9a:47:f4:2b:a2:83:70:fa:96:cd:34:42:bd:85:1d:
95:9f:40:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:26:57 2025 by rpki-client