Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/JNLy_7lmTCOv8pHfidWJCKFJyBQ.roa
File: JNLy_7lmTCOv8pHfidWJCKFJyBQ.roa (raw, json)
Hash identifier: 3xiL/VzS4jqjXP5TF8V2/6zH1Q7ivnUH6SaPv8KeKrE=
Subject key identifier: 24:D2:F2:FF:B9:66:4C:23:AF:F2:91:DF:89:D5:89:08:A1:49:C8:14
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199C03E630E25DF9A51D46B73678F0ABC60
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/JNLy_7lmTCOv8pHfidWJCKFJyBQ.roa
Signing time: Tue 07 Oct 2025 19:55:37 +0000
ROA not before: Tue 07 Oct 2025 19:55:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214762
IP address blocks: 2a0f:b240:5c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c0:3e:63:0e:25:df:9a:51:d4:6b:73:67:8f:0a:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 7 19:55:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24d2f2ffb9664c23aff291df89d58908a149c814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:51:58:ad:d2:2b:78:e6:c9:fb:05:65:b2:
31:c6:a9:35:19:6c:d4:6d:cd:1e:45:ea:fe:8a:6e:
bf:df:8c:44:8b:36:00:53:37:2d:5b:2a:78:d6:fb:
fa:db:76:b8:ad:43:f6:d1:95:7c:35:68:1c:eb:1b:
b5:bd:29:6c:2c:2d:26:c8:44:f9:b9:81:4a:71:a8:
fb:8e:f0:56:c2:59:97:0d:3e:86:63:c1:38:46:e1:
a1:e3:68:5a:a4:1b:98:6f:f8:4d:8f:82:6f:35:d7:
26:49:2f:8d:7c:0b:2e:6b:56:6e:08:b8:41:aa:c4:
f2:db:3d:53:ac:41:05:05:70:dc:d1:12:76:64:20:
ad:88:0c:98:88:e6:4a:b6:3e:35:d8:a7:4d:67:48:
3d:ee:01:16:1f:4d:9b:37:69:70:2a:f7:54:73:72:
ad:32:f4:3a:03:47:40:5e:5a:fa:82:16:1d:89:e7:
fc:0f:ef:d8:40:a2:23:1e:ae:d1:15:d6:1b:6d:29:
1a:2f:e5:33:23:3b:0c:ed:ea:d7:01:4a:4d:46:d3:
16:94:7e:42:de:d4:e5:bc:30:a4:8b:ea:1d:5e:21:
cf:62:18:bb:ba:7f:a0:e5:ff:39:a5:97:d7:28:51:
7b:12:fd:bf:24:0f:f6:2f:08:e8:bb:46:22:de:b2:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D2:F2:FF:B9:66:4C:23:AF:F2:91:DF:89:D5:89:08:A1:49:C8:14
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/JNLy_7lmTCOv8pHfidWJCKFJyBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:5c00::/40
Signature Algorithm: sha256WithRSAEncryption
00:bf:c5:c9:9a:f8:52:2b:cc:62:cf:71:5d:0e:7b:04:da:7e:
cc:7e:d3:d2:14:ab:66:0d:47:af:75:6f:11:11:07:df:87:4d:
31:61:33:6c:61:b5:84:eb:64:4a:0d:40:21:ff:a5:28:43:cf:
ee:bc:e7:a1:a2:5d:b3:f4:49:ef:a3:96:78:b8:11:61:ca:87:
49:9c:65:a8:0f:c0:94:d8:7e:6b:e2:18:44:9b:7f:dc:9d:9e:
7e:7f:fc:41:8a:5a:e0:c9:a5:1e:57:40:04:47:51:d2:aa:fb:
b2:4d:3f:85:bf:d4:35:e3:74:08:4e:75:f1:75:7c:cf:bc:89:
b6:71:d2:9b:3d:46:fb:8a:20:7c:76:99:4c:07:25:6a:84:a0:
5f:97:70:29:00:bd:9b:a3:20:90:2d:67:36:f2:6d:0b:0c:12:
8b:15:40:ba:24:4d:47:5f:8a:35:9f:e6:4a:21:ed:3d:1f:aa:
bf:7e:ee:93:b6:e5:f8:35:8b:66:c4:87:3d:06:ee:70:ad:45:
f8:1f:11:59:fe:68:2d:83:98:dd:16:e8:88:46:09:3b:db:5e:
89:55:90:61:d3:19:e0:04:fa:52:9d:64:f5:c8:a9:20:f1:30:
68:64:a7:5e:16:76:ed:99:c6:4d:bd:e1:48:88:a6:a5:be:d6:
33:a6:83:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:34 2025 by rpki-client