Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/COfNecMp37Kyo8BUu-OjhqwkX0M.roa
File: COfNecMp37Kyo8BUu-OjhqwkX0M.roa (raw, json)
Hash identifier: EcSrFvvwVtSZ3xGoiWJMUyEv74s10nwqb3WegulBEsY=
Subject key identifier: 08:E7:CD:79:C3:29:DF:B2:B2:A3:C0:54:BB:E3:A3:86:AC:24:5F:43
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 019904483C6366453BE28D7FD2AE8F29590F
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/COfNecMp37Kyo8BUu-OjhqwkX0M.roa
Signing time: Mon 01 Sep 2025 07:57:46 +0000
ROA not before: Mon 01 Sep 2025 07:57:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209106
IP address blocks: 91.239.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:48:3c:63:66:45:3b:e2:8d:7f:d2:ae:8f:29:59:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Sep 1 07:57:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08e7cd79c329dfb2b2a3c054bbe3a386ac245f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:e7:6d:26:57:ad:2f:a3:71:0f:c3:d6:86:
8a:f5:7d:d8:9f:1c:d6:68:9f:3f:b0:9d:34:d1:b4:
d4:66:0c:2a:35:e0:80:6d:d9:d8:80:b1:09:a3:f5:
fa:f9:44:27:3f:f5:85:95:5d:e4:28:95:21:8a:d6:
db:a1:e7:93:c5:e3:37:0b:d1:c3:50:17:ab:23:e7:
da:43:8f:4e:28:9c:9b:2b:5d:7d:71:c1:b1:07:ae:
16:86:77:c5:e6:a2:10:75:e7:71:fc:7f:61:a9:11:
1c:bf:3d:5d:c1:3f:30:2a:02:d0:94:47:d0:f7:e0:
e1:c8:4c:14:90:7d:96:5d:44:f1:4d:cb:22:73:c7:
2e:75:53:64:2f:47:4e:62:00:a7:20:5a:19:09:de:
cc:1e:eb:f8:74:9c:e4:7a:1e:fe:9f:43:0d:40:8c:
8d:d8:59:e7:90:19:cd:eb:2c:56:6a:c0:fe:fd:93:
b4:1e:5a:ac:66:4f:87:dd:ea:a5:d1:96:f7:ab:b8:
d9:a7:20:9a:80:c2:35:6f:64:45:4b:01:18:eb:0c:
da:ae:9e:65:2d:fb:fa:87:86:5d:59:30:39:a1:fc:
81:fc:2e:26:67:f5:fa:70:9a:bf:0e:b6:41:8d:43:
ab:86:f9:fa:77:19:2c:06:60:41:11:73:d8:f2:2b:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:CD:79:C3:29:DF:B2:B2:A3:C0:54:BB:E3:A3:86:AC:24:5F:43
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/COfNecMp37Kyo8BUu-OjhqwkX0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.139.0/24
Signature Algorithm: sha256WithRSAEncryption
05:63:78:9d:51:49:b8:da:c5:5a:d5:a0:2a:16:9d:69:7e:2b:
81:56:a4:96:8a:db:86:b0:80:b7:2b:15:24:2c:41:db:dc:78:
07:cf:0c:16:35:9e:d1:e1:2f:1f:62:51:96:83:c0:62:ce:49:
bc:80:29:8a:e3:b6:33:79:0d:02:53:0d:98:f4:61:b5:64:47:
c0:47:e2:4f:09:d4:cf:d8:42:11:58:7e:81:91:bd:6c:f8:cc:
b5:61:2b:d5:9a:ac:0c:d1:54:1d:8c:2d:b5:c0:d2:7a:bb:c1:
14:c9:dd:9c:a6:da:5f:07:02:9b:aa:19:4b:69:dd:52:cf:7c:
9f:47:e2:b5:69:a3:c5:14:12:c5:11:13:87:c7:ef:a6:31:cd:
af:5d:2c:ba:0f:57:13:22:6d:31:df:2f:e6:de:a0:18:98:e3:
f4:85:4e:f8:ba:4c:8f:fc:70:01:33:42:79:b7:a2:c1:75:86:
76:d9:07:24:84:85:bf:44:f9:05:1e:a3:e6:93:ec:15:2c:9e:
3d:b1:f2:54:2c:d3:58:b7:74:b8:4d:50:20:03:dc:6f:19:c7:
22:23:af:1b:d0:2c:e9:f7:11:7b:3d:3c:5e:34:f6:fa:62:37:
fd:a4:0f:2b:ae:ff:96:c5:a2:aa:a5:ef:07:82:f7:02:b4:29:
7f:18:24:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:07:43 2025 by rpki-client