Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/_JFW_H3_-ep_GUFHoB-Ar3oYW-I.roa
File: _JFW_H3_-ep_GUFHoB-Ar3oYW-I.roa (raw, json)
Hash identifier: p6GMi/uFbgvbxvmU7TpQgxqqdjW/8BjvFrMefWhNZic=
Subject key identifier: FC:91:56:FC:7D:FF:F9:EA:7F:19:41:47:A0:1F:80:AF:7A:18:5B:E2
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0198FF238C9A542AD9B457141C57A75A0FE8
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/_JFW_H3_-ep_GUFHoB-Ar3oYW-I.roa
Signing time: Sun 31 Aug 2025 07:59:36 +0000
ROA not before: Sun 31 Aug 2025 07:59:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205710
IP address blocks: 2a01:e901:167::/48 maxlen: 48
2a01:e901:177::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 04:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ff:23:8c:9a:54:2a:d9:b4:57:14:1c:57:a7:5a:0f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Aug 31 07:59:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc9156fc7dfff9ea7f194147a01f80af7a185be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:7b:76:98:af:68:a5:84:74:fb:f0:d3:c5:
e0:eb:c4:75:16:1f:a4:9f:b1:f2:36:33:23:fe:a3:
aa:a1:e9:c6:af:bd:5e:62:24:45:82:54:e5:1f:04:
b8:37:fd:f2:e3:ca:6e:e3:8d:90:c2:50:f5:1e:0c:
36:14:24:78:39:53:0b:40:d8:44:83:a7:ca:be:d9:
36:41:88:d2:57:75:3b:eb:e0:f3:bc:a6:31:7e:ed:
7f:a1:14:07:5d:99:8e:c9:3d:62:dd:f0:c7:5a:89:
57:1a:2c:0a:14:f4:6c:f9:29:24:86:b2:a2:ba:25:
ba:c5:f8:f8:c0:dc:67:29:22:c3:2a:5d:18:59:6c:
68:35:ad:b5:28:1b:1b:59:06:a7:2c:c7:d5:21:08:
0e:38:54:79:35:66:8e:6c:2c:10:4b:12:f4:c1:30:
f4:6a:bc:70:42:c4:cf:57:f4:f3:0b:35:15:7f:45:
0b:4f:71:04:87:bb:3e:28:f2:48:67:a7:bc:d9:7b:
b4:67:17:3a:c2:4b:eb:35:82:56:23:08:44:df:b4:
75:9e:78:89:97:ea:23:ae:f7:ab:56:7a:40:89:28:
42:ef:3e:bc:48:36:0d:c3:e8:84:f5:19:d3:bd:69:
b8:8d:b7:a3:23:d3:0c:1c:b3:65:27:f8:fa:72:69:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:56:FC:7D:FF:F9:EA:7F:19:41:47:A0:1F:80:AF:7A:18:5B:E2
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/_JFW_H3_-ep_GUFHoB-Ar3oYW-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:167::/48
2a01:e901:177::/48
Signature Algorithm: sha256WithRSAEncryption
40:09:8c:e7:bf:6b:1d:22:33:4b:a2:5a:be:3d:f1:2c:90:2e:
8f:f8:98:48:c6:b0:1b:56:b6:37:2d:2f:8d:3c:9e:ff:f8:da:
ab:05:74:96:1a:e7:27:69:b1:fa:97:f8:2d:ba:02:b7:b6:62:
d3:b7:90:9c:81:eb:7f:f8:77:dd:73:f8:70:dc:00:57:fb:69:
74:76:be:08:90:00:7f:8d:fe:9e:2f:a7:42:1c:ec:d9:59:ae:
0f:5d:69:d9:79:a5:34:3e:18:56:00:5a:6d:ca:95:dc:f9:57:
f9:e5:c7:76:b9:63:dd:52:92:fd:e8:97:3e:5d:38:cf:9c:ae:
16:ff:6e:2a:d9:7e:c8:c0:6c:50:02:63:21:fd:2c:53:31:71:
3c:7e:c6:0c:9c:5b:1b:b8:6a:b9:fa:63:02:3a:09:da:85:ef:
60:d1:d4:3e:f3:f2:85:96:4d:dc:f9:89:b8:6e:5e:0c:12:eb:
63:ef:56:c0:5f:f8:0e:7c:e2:9e:35:61:b2:2c:6a:28:13:b3:
f4:c2:17:29:f9:1f:8a:ff:c2:ae:80:1a:3b:9e:fb:34:63:9a:
f2:75:9b:08:3c:93:11:33:02:b0:3e:47:89:d7:52:01:9b:39:
65:b2:bd:61:28:93:b8:4e:ab:05:db:96:6d:27:3b:56:98:de:
e6:6c:d8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 13:36:57 2025 by rpki-client