Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ji4XVJTDgdNuXyE3lgDien8vep0.roa
File: ji4XVJTDgdNuXyE3lgDien8vep0.roa (raw, json)
Hash identifier: xrePcs2TDnXcVC/LlJ6lrw6EcxrLgwMUKbLyG7xLZWA=
Subject key identifier: 8E:2E:17:54:94:C3:81:D3:6E:5F:21:37:96:00:E2:7A:7F:2F:7A:9D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0199AE035FD38D378B26FD061E516AD951DE
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ji4XVJTDgdNuXyE3lgDien8vep0.roa
Signing time: Sat 04 Oct 2025 06:58:00 +0000
ROA not before: Sat 04 Oct 2025 06:58:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33993
IP address blocks: 2.56.178.0/24 maxlen: 24
45.12.114.0/24 maxlen: 24
45.12.115.0/24 maxlen: 24
45.128.49.0/24 maxlen: 24
45.128.53.0/24 maxlen: 24
45.136.114.0/24 maxlen: 24
171.22.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ae:03:5f:d3:8d:37:8b:26:fd:06:1e:51:6a:d9:51:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 4 06:58:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e2e175494c381d36e5f21379600e27a7f2f7a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:21:19:67:fc:2c:2b:15:4b:8c:86:97:a8:
0a:46:49:92:15:c1:7b:68:95:ad:7e:88:b1:52:ac:
21:e3:96:5e:9c:52:13:b2:ca:29:92:fb:10:65:8c:
58:f6:52:4b:dd:76:68:f7:df:10:9e:b2:c0:3f:d9:
d6:05:e6:6c:d5:89:cc:65:63:13:aa:da:a7:39:89:
ae:0d:e6:b7:9c:28:5f:d2:c0:3f:42:c9:1f:35:a3:
6b:b7:82:a0:7e:61:88:8e:88:1a:54:6c:a5:2f:80:
47:6d:56:bd:a1:b5:e7:4f:fb:15:36:20:5e:1f:55:
12:e7:6a:9a:ec:6a:f2:86:1f:9b:37:b8:2c:da:eb:
66:ff:09:2e:4d:a1:ed:73:08:25:1a:24:f8:18:f4:
30:90:29:75:f8:b9:ba:35:08:23:2c:bc:a6:79:9e:
58:c5:11:e9:e6:3d:39:43:c4:6d:ce:a0:4a:ba:bb:
ed:0b:f0:48:f3:89:01:a2:51:b3:c4:35:06:a0:3f:
08:d9:bb:35:7b:82:ee:72:13:1d:ab:70:a4:73:eb:
64:1e:fc:33:6c:00:95:88:dd:ff:e6:ef:9a:35:73:
06:bd:b3:32:9a:90:6e:2e:cc:95:50:a4:31:bf:e7:
fc:c2:90:ed:9f:a1:a2:48:53:a6:78:8c:09:74:9c:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2E:17:54:94:C3:81:D3:6E:5F:21:37:96:00:E2:7A:7F:2F:7A:9D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ji4XVJTDgdNuXyE3lgDien8vep0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.178.0/24
45.12.114.0/23
45.128.49.0/24
45.128.53.0/24
45.136.114.0/24
171.22.119.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0b:fc:3b:fb:d0:b2:2b:83:f8:84:5b:ad:af:de:8e:df:67:
0b:88:0b:e4:e9:6b:a7:ac:3f:ba:d3:20:69:be:70:2a:db:05:
47:85:65:33:a1:0d:24:0b:3c:f1:86:7f:c5:34:b5:b2:f3:93:
96:1b:48:27:51:d7:f0:a5:64:c0:34:18:c7:e0:4e:d5:6a:a3:
5b:88:ac:ce:32:a3:2f:6b:4a:20:cf:79:08:6d:b6:d5:7a:c3:
ae:75:79:f5:cc:c8:1a:1c:b3:3b:4f:cd:6e:f9:76:65:a7:62:
46:f0:0e:5b:7e:1a:84:79:8a:f0:37:71:e4:fc:23:65:95:13:
40:22:88:a0:0c:1f:97:18:c8:a1:84:07:56:8d:40:6e:34:c3:
40:93:eb:0e:8b:f1:8c:04:50:19:8b:42:80:19:74:34:00:e1:
a6:c3:aa:c6:07:12:29:13:b7:b2:34:29:69:76:c5:31:1f:1a:
69:dc:c7:90:a7:96:3e:8c:28:d7:f7:b1:20:6d:63:9a:af:79:
ed:17:19:59:87:aa:09:b1:e6:30:0d:de:e3:c3:08:48:d2:84:
87:41:6c:f7:00:09:dc:82:fe:94:dc:3a:bf:8f:ed:17:58:f8:
13:57:e9:a8:60:ac:d1:2a:3a:f8:f3:53:82:de:ce:aa:19:87:
68:9c:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:12:00 2025 by rpki-client