Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jCr7GTugsC-TgIv_Y5X_sZMwuiM.roa
File: jCr7GTugsC-TgIv_Y5X_sZMwuiM.roa (raw, json)
Hash identifier: j4EmGNjBRnRNgZ3rcZ/Q6Z6IoPCGPQ+lrNG9mWK1sMQ=
Subject key identifier: 8C:2A:FB:19:3B:A0:B0:2F:93:80:8B:FF:63:95:FF:B1:93:30:BA:23
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019A06D85C666ABAF2BB51106278D00E350D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jCr7GTugsC-TgIv_Y5X_sZMwuiM.roa
Signing time: Tue 21 Oct 2025 12:57:13 +0000
ROA not before: Tue 21 Oct 2025 12:57:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8473
IP address blocks: 192.71.5.0/24 maxlen: 24
192.121.12.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
193.181.65.0/24 maxlen: 24
193.183.47.0/24 maxlen: 24
193.183.48.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.234.54.0/24 maxlen: 24
194.71.215.0/24 maxlen: 24
194.103.93.0/24 maxlen: 24
194.132.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:d8:5c:66:6a:ba:f2:bb:51:10:62:78:d0:0e:35:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 21 12:57:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c2afb193ba0b02f93808bff6395ffb19330ba23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:ea:ae:74:b1:59:f1:55:6d:ca:51:63:05:
0d:bc:0c:8d:1b:57:3f:ca:f2:1e:5d:fb:c5:6c:9a:
44:41:eb:d4:2e:d8:4a:3f:91:39:16:b5:c1:c1:bd:
4f:45:ea:9c:c0:0e:49:1f:2b:3e:42:37:92:dc:e5:
15:92:28:0a:41:ed:d7:0e:3d:4c:7d:52:67:28:99:
c5:9e:e7:3d:44:7b:4d:15:86:36:67:3c:1d:d5:85:
3f:11:a8:ec:e7:3d:93:9e:b6:28:81:c8:7b:f9:60:
56:c8:cf:ec:2c:ee:f0:57:47:ff:17:22:9e:81:41:
84:0c:70:04:2c:a1:d2:89:af:8c:0a:59:22:8e:45:
b1:b9:9a:40:99:fd:54:21:e6:0c:88:71:1c:b1:4e:
bf:55:92:ae:36:31:b5:82:8c:66:86:c2:1b:44:67:
ed:5e:3b:15:41:25:bd:7e:1b:d2:3b:b5:72:ae:91:
05:df:bb:c5:46:21:ab:3c:1d:bb:ef:74:fa:b5:4a:
c0:41:6f:59:86:fb:c9:f3:0e:cf:e5:a6:af:91:89:
a8:4c:bd:7d:f1:4d:6f:4d:6b:26:62:f7:60:68:f2:
63:fd:d0:8a:b2:ca:8a:ee:20:f8:d7:4d:e2:58:ef:
9c:ff:1e:cf:54:31:f4:16:74:64:8d:83:aa:0b:08:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:FB:19:3B:A0:B0:2F:93:80:8B:FF:63:95:FF:B1:93:30:BA:23
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jCr7GTugsC-TgIv_Y5X_sZMwuiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.5.0/24
192.121.12.0/24
192.121.101.0/24
193.181.65.0/24
193.183.47.0-193.183.48.255
193.183.92.0/24
193.234.54.0/24
194.71.215.0/24
194.103.93.0/24
194.132.162.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fe:c0:e8:cf:d8:90:6e:6c:ff:33:58:f4:fa:ee:02:05:ed:
8c:00:14:65:ac:0a:22:ab:b6:b1:8b:f4:77:cc:8c:0d:69:ae:
51:a1:c7:64:9d:cb:9a:3d:64:7e:cd:91:82:5c:b7:64:fd:ec:
2f:ca:43:0a:1f:76:7d:ae:80:39:77:a8:08:62:3a:9e:05:ec:
bb:ce:92:88:da:49:8b:79:f1:c7:65:f2:ca:92:ce:92:77:92:
5d:62:24:29:96:08:6e:01:8a:12:e4:15:71:ba:f3:97:9e:2a:
18:1d:8c:dd:98:93:75:be:e7:2a:1a:67:eb:50:43:38:53:9c:
9e:92:12:4f:63:a2:fe:8b:5e:d1:50:ad:7c:15:97:ae:a0:81:
58:52:36:60:9c:13:92:d5:a4:75:bd:c8:99:cc:62:32:67:3e:
df:18:c4:28:02:1b:8e:45:38:69:8f:2c:00:84:87:23:56:f9:
71:74:90:8b:56:ff:5d:c8:fa:b8:6a:c3:97:80:91:30:7a:2b:
1b:8e:91:f9:26:85:1e:72:fa:30:77:ff:2a:f6:9b:25:51:a2:
9a:b8:b6:49:99:9c:e9:13:0f:c7:45:63:7b:b9:06:ee:65:57:
6e:7e:9b:a5:f5:a8:62:8c:d5:38:ad:80:9d:4a:db:37:5d:f3:
dc:a6:fa:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 25 21:47:00 2025 by rpki-client