Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jFk2pIEFYHLlisI5UBfJYdpJZS8.roa
File: jFk2pIEFYHLlisI5UBfJYdpJZS8.roa (raw, json)
Hash identifier: FeYRqeLiGKr5DLRwGtOB64OsUr56V0ixj8w5P9c4Ouk=
Subject key identifier: 8C:59:36:A4:81:05:60:72:E5:8A:C2:39:50:17:C9:61:DA:49:65:2F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0198E7973976BF7B3356038AE377A0DDA4D9
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jFk2pIEFYHLlisI5UBfJYdpJZS8.roa
Signing time: Tue 26 Aug 2025 18:15:04 +0000
ROA not before: Tue 26 Aug 2025 18:15:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 62.68.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e7:97:39:76:bf:7b:33:56:03:8a:e3:77:a0:dd:a4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 26 18:15:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c5936a481056072e58ac2395017c961da49652f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:12:fe:29:b8:df:60:f1:47:d8:a2:fd:41:
49:0e:de:39:7b:56:a9:5f:ca:57:39:5e:27:ca:3a:
40:2e:f4:9c:69:b4:b9:05:75:8d:cd:52:26:21:98:
75:f0:68:ca:31:86:58:f6:fe:47:64:8d:e4:83:fe:
ab:ee:15:40:f8:60:ab:bb:2b:32:91:ad:14:1b:5c:
3c:f7:e7:7b:40:c5:ec:9c:00:30:10:53:c1:e3:b8:
97:29:92:92:b4:7c:90:72:d4:e8:80:4f:e9:08:b2:
c1:64:5f:d3:3c:ea:67:9d:1d:d0:93:5f:8f:08:ef:
7d:02:e2:9d:2a:d8:2e:fa:29:be:4f:6a:54:d5:bd:
fd:dc:ce:2c:e1:67:cd:b0:3e:62:e2:ee:35:d4:a4:
47:f9:b8:5c:2f:02:c0:bf:75:3c:7c:c7:32:38:29:
6d:6e:d3:05:73:ff:16:7f:9c:2a:ec:40:01:67:e5:
77:d9:d8:8e:c5:13:25:1d:00:34:9c:9e:37:b0:90:
c0:19:f8:f7:70:a1:39:bc:63:7d:cf:24:c5:46:d2:
f8:3f:d6:b1:64:7f:23:17:8a:9b:a1:2a:fa:63:b4:
6e:6e:7d:17:2c:59:06:20:7f:03:f9:0d:f8:68:a7:
f4:7b:3b:66:23:1f:80:0a:cd:2b:48:f5:dc:08:df:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:59:36:A4:81:05:60:72:E5:8A:C2:39:50:17:C9:61:DA:49:65:2F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jFk2pIEFYHLlisI5UBfJYdpJZS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.80.0/24
Signature Algorithm: sha256WithRSAEncryption
99:23:63:90:f6:ec:ac:9a:27:57:89:95:3c:27:a1:22:ba:e2:
b1:da:fb:85:f2:6f:3f:38:41:09:68:77:0d:cb:94:f8:a7:c1:
6e:77:3d:79:56:fa:92:0c:a7:36:6c:00:35:b0:49:90:a6:83:
b4:0b:8a:64:12:be:d5:73:28:ea:06:0a:46:5c:f1:56:66:c5:
23:90:85:5f:b3:35:7e:f0:a7:73:c1:ca:80:2f:67:1a:aa:85:
3d:f3:b0:c7:ea:73:f1:20:e8:6c:8e:07:80:94:96:f8:a5:7c:
8e:63:8c:c6:d7:75:c0:fb:30:ba:5b:81:66:00:1b:43:91:8c:
38:3c:ab:67:a4:61:ab:4e:74:41:63:f7:49:14:de:f9:bf:e6:
9f:49:48:2d:b0:91:01:f3:84:e5:c4:d1:1f:23:ae:3c:6d:be:
99:01:89:66:ba:52:ef:04:f1:d5:3f:e8:99:ee:d7:24:81:e3:
25:17:33:4d:77:bf:d7:52:8d:4c:c4:79:3d:11:4d:30:cd:3a:
bf:a8:c5:22:bb:80:8f:25:a7:2e:d1:61:15:dd:ff:b4:10:fd:
f8:85:35:42:de:88:59:78:59:ba:42:d4:b2:ed:39:53:ac:d7:
40:7d:f9:09:fd:cc:f8:06:8a:73:4f:b4:4f:44:3c:d4:59:bb:
a7:17:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:34:58 2025 by rpki-client