Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/8_ja4y1JNGjzcRrjPOcvPb7iMqI.roa
File: 8_ja4y1JNGjzcRrjPOcvPb7iMqI.roa (raw, json)
Hash identifier: FTafPTHlq1IH+/Ui1c1N+bawak9jOSxUpNj0gy0d0pA=
Subject key identifier: F3:F8:DA:E3:2D:49:34:68:F3:71:1A:E3:3C:E7:2F:3D:BE:E2:32:A2
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019A2042D8520454053CFD5B3326F7CD8E85
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/8_ja4y1JNGjzcRrjPOcvPb7iMqI.roa
Signing time: Sun 26 Oct 2025 11:24:02 +0000
ROA not before: Sun 26 Oct 2025 11:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 168.222.252.0/24 maxlen: 24
168.222.253.0/24 maxlen: 24
168.222.255.0/24 maxlen: 24
208.92.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:42:d8:52:04:54:05:3c:fd:5b:33:26:f7:cd:8e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Oct 26 11:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3f8dae32d493468f3711ae33ce72f3dbee232a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:b0:02:44:3f:f2:24:5c:de:9b:5b:a5:be:
79:46:6f:21:d4:54:12:66:64:35:d5:b3:07:d4:af:
2d:cc:33:98:4a:58:53:1a:3b:65:b6:b4:ff:a1:8a:
18:a0:1b:b8:06:f3:40:7d:94:86:8a:59:c2:10:e9:
26:fe:90:27:b7:e3:98:c8:78:ca:b5:64:cb:cf:55:
f8:ef:9f:9e:9e:c1:90:c5:a4:5a:6d:27:13:28:f9:
85:a1:d6:e1:e3:1a:6c:ec:4f:4d:ca:ab:0d:57:c7:
48:78:a3:de:5b:0e:a7:3d:53:51:78:f4:70:46:f7:
98:e3:ad:59:6a:e3:8c:a6:74:8e:05:a7:48:45:24:
3d:39:51:6d:91:7a:50:51:81:8c:f7:2c:02:83:36:
5a:e2:59:4e:22:b3:54:51:58:e2:b2:48:87:d3:71:
c9:c4:f8:ab:b8:39:6c:66:97:48:90:d0:43:1d:cf:
5d:c9:db:01:aa:5a:b5:a0:10:1f:99:0a:d8:6a:27:
a4:88:b3:58:0c:14:87:0d:80:76:e4:e6:f9:cb:21:
e7:76:9f:84:09:eb:d2:68:d3:b8:9d:60:9e:3f:df:
be:1f:62:65:e3:2f:e7:8d:dc:61:59:ce:aa:d8:a3:
ef:8b:a1:f1:ec:f8:9a:8b:50:40:19:e1:72:dc:59:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F8:DA:E3:2D:49:34:68:F3:71:1A:E3:3C:E7:2F:3D:BE:E2:32:A2
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/8_ja4y1JNGjzcRrjPOcvPb7iMqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.252.0/23
168.222.255.0/24
208.92.226.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:27:83:c3:9b:43:7d:55:1f:a3:40:7f:60:5c:27:5e:d4:91:
d2:61:52:6b:4e:8f:40:3e:6b:38:ef:c7:e9:61:a4:71:fd:5e:
79:d8:07:c7:8d:25:be:d4:55:78:36:42:35:36:0a:17:1c:33:
7c:25:4c:5f:ef:30:44:2b:e1:7d:e2:7b:2e:8c:2b:50:47:8c:
90:db:da:cc:26:f7:69:7b:13:52:7e:dd:19:66:01:83:1b:16:
69:49:1e:e2:68:e6:95:47:2e:c2:0d:56:d9:86:dd:45:be:a5:
18:d8:83:ed:63:94:31:37:ac:01:68:46:35:29:c1:9c:7b:70:
52:37:4a:a8:ee:f9:2b:61:fb:6d:3b:c8:73:8a:67:cd:73:5c:
bd:26:7b:7a:5e:69:4a:3b:c7:3c:af:86:c7:af:17:ec:5d:4e:
f2:0d:cd:58:d5:40:de:28:f4:37:76:3c:f8:c2:c7:7c:03:7a:
40:2c:62:f8:d4:13:9b:2c:14:df:2e:4e:1f:e4:a3:30:f9:91:
ef:7f:db:e4:f1:92:f5:96:47:55:49:8a:6d:68:1e:72:3c:ea:
7f:62:c8:91:9a:9b:8c:2c:f4:e2:60:8d:a6:2f:57:8b:64:2c:
3c:a4:9e:74:e2:8e:bf:17:41:12:15:db:a2:8c:db:a4:a3:76:
99:08:c8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 07:30:05 2025 by rpki-client