Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JKmLhFRrJWC0O2lmiQlEOChCv_0.roa
File: JKmLhFRrJWC0O2lmiQlEOChCv_0.roa (raw, json)
Hash identifier: qA/oS5DrI2/fTEoM6/qYllqGp2loEwEts1egTYOs1N8=
Subject key identifier: 24:A9:8B:84:54:6B:25:60:B4:3B:69:66:89:09:44:38:28:42:BF:FD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0198E5D42253D4DEED41761BF11DE4AF9D41
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JKmLhFRrJWC0O2lmiQlEOChCv_0.roa
Signing time: Tue 26 Aug 2025 10:02:21 +0000
ROA not before: Tue 26 Aug 2025 10:02:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211798
IP address blocks: 194.41.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:d4:22:53:d4:de:ed:41:76:1b:f1:1d:e4:af:9d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 26 10:02:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24a98b84546b2560b43b6966890944382842bffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:c3:a9:f6:0a:2b:0f:79:7c:5b:0d:7d:ed:
2b:a7:0d:e0:20:56:54:f7:8a:7c:77:bf:4f:68:34:
4b:cf:1c:bb:62:07:a4:66:83:4c:bc:a4:3c:ca:cb:
90:90:a6:6f:26:0c:3c:66:69:71:36:81:cb:a7:a5:
0e:5d:8c:67:ad:ec:30:bc:4d:fa:ce:53:41:c4:c2:
7d:f2:4c:e6:5e:c9:fd:3d:bf:65:6f:c2:ee:c4:c0:
93:86:af:00:e0:45:b6:98:91:bb:19:75:c4:9e:04:
71:73:10:32:03:58:d6:8c:3d:d9:1c:df:5f:be:44:
a1:a8:fa:1e:7d:b8:17:97:8b:54:05:6b:f9:0c:fc:
37:d3:86:0a:25:4c:74:52:98:17:24:88:3e:9d:0b:
e5:1b:11:02:e7:be:79:ba:11:5c:ca:19:54:ef:10:
e1:5b:2e:6c:86:fd:b1:f1:67:aa:bd:12:3e:ad:50:
16:fd:4b:e1:18:bd:d0:c6:9e:61:c0:69:46:11:f1:
b1:3e:ef:d6:1f:92:f2:3e:fc:99:70:4f:f9:5c:d8:
fe:d1:66:5c:97:dc:19:39:bd:cf:4e:83:29:cb:c1:
71:0e:07:85:12:fa:80:cd:a2:8c:01:c6:a0:d6:d1:
46:c9:f2:1a:36:3b:f1:bf:0d:ec:6d:25:d5:61:6e:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:8B:84:54:6B:25:60:B4:3B:69:66:89:09:44:38:28:42:BF:FD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JKmLhFRrJWC0O2lmiQlEOChCv_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:5e:a3:5f:0a:a2:48:58:b7:38:86:82:eb:ce:62:51:c3:70:
b7:6b:96:be:6a:29:c0:88:09:ed:a5:1b:11:14:a7:f1:c6:4e:
94:31:1f:aa:25:13:4b:2a:fd:24:33:22:de:10:49:ea:7f:06:
27:58:7a:d0:39:be:64:f7:77:4e:45:e2:ce:be:4a:53:fe:26:
4e:57:cc:10:c7:34:3c:10:99:9b:1b:4b:00:59:24:f9:ff:9e:
0e:ab:eb:51:3e:50:6d:5d:b6:ef:de:44:60:79:19:fa:15:41:
4a:1a:92:b5:95:4c:fe:91:fc:de:93:c5:1b:41:5b:78:19:ae:
73:e1:61:01:0a:a9:28:96:d8:5e:37:6a:91:e8:62:a6:5e:38:
66:97:42:d4:4a:0d:0f:5c:a2:53:8d:9c:22:d1:e8:88:f7:81:
48:4e:3d:5d:a5:4b:77:97:c9:2e:83:ab:e0:c3:8b:53:ef:75:
35:e6:3c:83:16:47:86:41:85:49:0d:12:ca:64:31:16:98:1b:
51:f6:5f:ee:f2:96:78:2a:a9:9b:9b:cd:ce:50:bc:8c:98:9a:
82:87:14:5e:e8:b0:86:66:10:a5:e4:a0:8f:b9:a4:6e:f4:1a:
f9:ba:cc:6e:08:eb:a0:a7:5e:ee:7c:22:60:79:ba:13:4b:90:
ff:71:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:50:16 2025 by rpki-client