Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/R1122jvmaRFCyB-pLRYd5mvSj18.roa
File: R1122jvmaRFCyB-pLRYd5mvSj18.roa (raw, json)
Hash identifier: Mn7gPdy8qzzJOoR47mruMMkcr1ejf5GwtKlMHf6MI9I=
Subject key identifier: 47:5D:76:DA:3B:E6:69:11:42:C8:1F:A9:2D:16:1D:E6:6B:D2:8F:5F
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01990E559F1A21352E6563E8A135446ADD3E
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/R1122jvmaRFCyB-pLRYd5mvSj18.roa
Signing time: Wed 03 Sep 2025 06:48:36 +0000
ROA not before: Wed 03 Sep 2025 06:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 91.149.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:55:9f:1a:21:35:2e:65:63:e8:a1:35:44:6a:dd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Sep 3 06:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=475d76da3be6691142c81fa92d161de66bd28f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:1a:df:81:8f:6c:47:d1:c1:1a:98:24:23:
97:96:c1:ab:35:9f:e8:9f:94:90:9e:87:5b:78:df:
ba:8d:93:e5:28:3e:c0:cd:73:1e:89:98:16:9a:8e:
4f:5b:2c:b3:87:cc:53:81:89:da:61:21:9d:ed:2d:
27:8e:9d:9b:2c:9b:75:5f:47:02:19:c8:d9:73:c2:
29:67:d6:75:2a:6a:92:1a:c3:58:7c:b6:26:0d:c7:
40:65:53:12:3f:6c:98:8c:33:96:d2:74:89:94:1a:
f4:80:bb:3f:77:71:6c:bf:5d:2e:28:d8:a0:09:c1:
9d:a9:a8:8d:ca:ac:50:ee:29:e9:7a:12:21:62:9b:
ec:86:d3:4e:06:2c:f9:d8:12:95:59:56:9e:8a:4a:
30:07:ed:35:78:9a:cd:62:c2:36:76:dd:7f:48:c6:
83:dc:f4:bc:ea:fc:f4:ed:43:8e:f9:b5:a2:60:d6:
96:2b:ff:f7:16:90:fe:0f:13:15:3a:1b:5e:2d:3f:
f7:06:ec:72:6b:a9:27:f2:22:16:27:84:1b:d8:39:
c0:23:a9:77:2f:34:d6:92:66:a4:64:d2:ca:2f:c7:
fe:30:c6:41:0d:19:a3:5f:4f:33:b2:60:bd:e6:34:
d3:3b:ab:f8:39:df:34:93:53:df:4d:49:a5:39:1f:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:76:DA:3B:E6:69:11:42:C8:1F:A9:2D:16:1D:E6:6B:D2:8F:5F
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/R1122jvmaRFCyB-pLRYd5mvSj18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.200.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:20:cb:36:2b:89:f6:0a:6e:3c:3c:bf:62:e0:39:5d:73:dd:
aa:ab:36:9a:aa:44:06:00:ad:8e:06:56:b9:5c:24:fa:f3:e8:
2e:b3:be:ef:0d:f6:4b:da:b7:66:9b:85:9d:02:0e:7f:9f:dc:
5e:a3:fd:e0:d7:9b:bc:c3:fd:a7:b2:2c:3f:d9:5c:7b:09:2c:
ce:d2:bd:81:db:7a:3e:1f:6c:b0:1e:9a:51:c5:27:b8:d5:85:
d6:ef:02:d3:b1:50:de:81:9b:2f:57:ab:01:1d:32:db:05:53:
79:3d:d8:1f:61:9a:9e:a4:07:b1:7f:e3:ca:34:a8:f2:e5:b1:
9f:5a:6e:79:bb:44:ca:e3:b1:12:cf:c5:7c:0e:1a:df:24:fd:
d9:f9:24:51:e1:95:7c:29:3b:60:cf:ef:91:c7:d4:e8:b8:ec:
59:f0:cf:5b:83:d4:59:43:5e:c0:81:6e:53:bd:d0:c8:c3:23:
70:8e:93:7f:da:f4:31:08:c3:19:d2:2b:32:76:93:f4:17:62:
38:58:25:30:f4:68:c5:68:c1:ed:69:11:d2:27:b8:d4:06:57:
b1:f4:e4:06:74:71:88:5b:8b:89:cf:c0:5c:07:c3:42:0c:4f:
81:22:65:d0:32:73:8d:b5:75:75:d6:a7:3c:a9:62:d5:78:80:
ab:96:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:32:36 2025 by rpki-client