Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Jnt6bh66GuDly5EQQhrJde4TYGo.roa
File: Jnt6bh66GuDly5EQQhrJde4TYGo.roa (raw, json)
Hash identifier: IQsMb3ezUFMCCZf8CVdChlVcGk2V6HMOgUw/PGFnwaU=
Subject key identifier: 26:7B:7A:6E:1E:BA:1A:E0:E5:CB:91:10:42:1A:C9:75:EE:13:60:6A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0199158FB90E3522A0340C8B01392628099F
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Jnt6bh66GuDly5EQQhrJde4TYGo.roa
Signing time: Thu 04 Sep 2025 16:29:24 +0000
ROA not before: Thu 04 Sep 2025 16:29:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216043
IP address blocks: 2a12:bec4:1c10::/44 maxlen: 48
2a12:bec4:1c10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:8f:b9:0e:35:22:a0:34:0c:8b:01:39:26:28:09:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 4 16:29:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=267b7a6e1eba1ae0e5cb9110421ac975ee13606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:fe:a3:c5:99:67:c7:a7:8a:44:11:23:af:
c5:fa:fe:73:05:d8:51:e3:f8:35:a7:45:e3:4f:5e:
b9:6b:73:76:a9:cd:7e:f2:15:9e:97:85:16:b6:d8:
86:e1:48:cf:b6:c3:49:20:f5:11:a5:4f:74:4b:1b:
e8:5b:6b:5b:12:f3:ea:50:39:0f:f0:15:3a:58:4e:
8b:df:df:fe:a0:1f:cc:5e:8d:cf:ad:f2:b3:38:e2:
6a:89:a8:ff:c6:07:e0:33:be:29:f6:f8:00:25:6e:
f4:89:b6:bb:15:e9:08:37:64:b7:99:86:e6:35:32:
55:ef:11:9c:fc:ed:12:11:cb:4c:98:44:86:b0:20:
47:8f:dc:fe:bc:82:d6:6a:f1:70:28:0c:01:69:b5:
64:49:a6:03:ab:11:3c:24:70:19:a9:33:ba:ac:1d:
26:3b:07:35:d1:98:33:1a:a0:7b:89:9d:10:53:a2:
5a:b0:4b:fe:5f:b4:b3:f8:aa:b7:9d:33:34:04:7a:
30:cc:b0:08:94:13:f9:fb:33:68:f4:36:71:9b:3a:
df:be:f3:17:b4:33:ed:31:6d:f1:0a:f0:d8:5f:6b:
df:c0:4c:b8:30:ef:5b:cc:10:95:6b:58:1f:29:77:
2d:91:30:54:5e:49:26:35:80:6e:52:8c:44:69:01:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7B:7A:6E:1E:BA:1A:E0:E5:CB:91:10:42:1A:C9:75:EE:13:60:6A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Jnt6bh66GuDly5EQQhrJde4TYGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1c10::/44
Signature Algorithm: sha256WithRSAEncryption
4b:45:71:80:5d:75:98:c8:ff:a0:0c:b4:32:11:63:39:d7:1f:
2f:69:1e:4b:29:cf:1e:c4:82:c0:a8:ec:14:b3:11:d9:8b:ef:
5d:98:de:35:e1:fd:b5:27:3f:bf:9a:3d:aa:9d:87:ff:6c:6d:
eb:ee:11:43:ff:04:3d:3c:50:6e:6c:2d:de:03:d0:11:37:18:
99:e3:66:3e:d7:6f:42:7c:c7:72:a1:f1:94:08:32:d2:a3:e7:
b6:d0:24:c2:9c:fe:76:8a:19:0b:81:77:02:05:64:c7:b5:31:
81:34:9c:94:a9:c6:5c:09:af:a0:74:87:bf:aa:9b:b5:7a:bd:
2d:f6:2c:7c:80:6b:9b:e7:74:44:c6:ae:7c:1f:3d:9d:53:32:
cb:1d:91:de:78:69:6e:73:9d:eb:1f:ed:ac:d1:a5:1f:c5:a1:
dc:e7:c3:f6:e8:1d:31:f9:7c:7d:73:be:b8:60:a0:fb:2d:6f:
4e:33:83:2e:8c:61:77:57:47:52:e8:20:d9:29:72:75:90:9f:
7f:ae:5e:cf:15:e2:02:7c:42:64:a7:3f:71:51:6d:b1:9a:b5:
54:bc:f2:94:f1:be:6f:e3:48:51:87:4a:4a:c3:18:4d:2f:4d:
bc:17:47:89:f4:86:d6:d0:3b:58:a9:7f:73:2e:db:e2:70:f9:
17:2d:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:14:21 2025 by rpki-client