Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/JNDj7IkhbQ_3xrbEz4uAXQ1Yv3Q.roa
File: JNDj7IkhbQ_3xrbEz4uAXQ1Yv3Q.roa (raw, json)
Hash identifier: Wl0WwrfiuzHjyAyUMW+l+iPzUUYZzp7CP7Vher9u5s8=
Subject key identifier: 24:D0:E3:EC:89:21:6D:0F:F7:C6:B6:C4:CF:8B:80:5D:0D:58:BF:74
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 0199059728819539F9C1F1744BB5EC1BADCC
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/JNDj7IkhbQ_3xrbEz4uAXQ1Yv3Q.roa
Signing time: Mon 01 Sep 2025 14:03:36 +0000
ROA not before: Mon 01 Sep 2025 14:03:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 72.56.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 17:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:05:97:28:81:95:39:f9:c1:f1:74:4b:b5:ec:1b:ad:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Sep 1 14:03:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24d0e3ec89216d0ff7c6b6c4cf8b805d0d58bf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:13:82:fa:07:17:80:09:45:98:c1:25:38:
7d:3a:45:da:48:7a:b0:54:c1:bf:5a:0d:ae:37:60:
c2:57:f0:d0:66:1d:35:fb:a9:d9:fd:5d:4a:ee:f1:
72:db:cb:a0:25:b1:8b:d3:3a:d2:ad:bc:81:1c:80:
e6:a3:cc:d1:54:97:f5:15:d5:61:76:3e:1c:2a:67:
3a:0f:dd:3a:c6:af:d3:79:22:8d:fa:47:d6:42:1f:
6d:38:ec:cf:6b:3c:c0:b2:13:45:98:9a:ad:ae:22:
15:3e:f9:4e:de:78:6a:24:03:1c:49:14:6e:28:f7:
df:c2:cd:7e:c8:8f:96:f9:6d:ef:c7:af:e8:db:42:
2e:30:5a:6e:30:9f:da:2f:70:cc:4a:c2:0c:38:a8:
92:7e:9d:73:94:4c:1d:f6:92:25:4f:16:31:fe:ee:
70:a3:b0:65:d8:62:fc:12:68:39:c9:7c:c9:a7:9a:
9b:ca:20:aa:8b:e3:7d:2a:fc:55:f4:04:53:59:57:
8e:8a:3e:6f:23:da:30:11:09:c4:f5:c3:14:a6:23:
27:7d:1f:eb:89:d4:df:30:ca:b4:e4:54:75:ec:7c:
89:7d:77:3b:ec:db:e6:47:ec:4f:27:28:1e:90:4b:
7e:b2:d5:c8:5c:e9:1f:ca:81:89:f1:92:71:d2:8c:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:E3:EC:89:21:6D:0F:F7:C6:B6:C4:CF:8B:80:5D:0D:58:BF:74
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/JNDj7IkhbQ_3xrbEz4uAXQ1Yv3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.96.0/19
Signature Algorithm: sha256WithRSAEncryption
61:05:33:58:f2:35:1e:f5:11:1a:2c:99:21:15:59:d2:f8:42:
04:84:18:29:6f:75:07:a5:9d:5c:f2:fd:ff:9b:2e:96:4c:51:
df:7b:3d:e9:bb:73:52:1c:58:84:65:9d:f2:92:43:b0:68:f9:
3b:0e:7e:31:fa:ef:36:fa:58:d6:77:fc:a8:88:af:eb:2b:ec:
fc:3d:1b:cd:bd:94:41:8d:83:d2:3a:cd:93:3b:98:52:54:98:
80:21:6c:20:52:ff:8e:8a:1a:c0:8b:58:7f:9f:2c:b1:21:eb:
25:8d:ae:25:08:45:b4:90:5c:fd:2e:5a:4a:dc:de:9a:f5:98:
75:88:2c:c2:76:8d:50:c8:63:93:84:36:6f:f3:ca:a0:50:c6:
b4:46:4c:8d:50:04:a3:33:d8:b9:40:45:4e:ec:75:f7:3e:73:
bd:2c:e0:c4:85:53:72:74:46:4c:e8:37:01:29:38:17:13:75:
33:63:4d:84:f4:99:73:58:e2:4a:f8:d1:e9:f6:31:59:3f:37:
44:bb:6f:6d:3e:ac:2a:02:73:56:37:05:b9:d9:52:e2:8b:19:
97:d6:b2:ca:7c:6a:9b:77:fd:2f:8d:fc:57:a5:4f:04:d5:82:
6b:74:3b:90:07:eb:86:1e:ef:90:77:d2:ac:2c:ad:86:93:70:
fe:33:a7:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkFlyiBlTn5wfF0S7XsG63MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0
MjVjYWQwHhcNMjUwOTAxMTQwMzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGQwZTNlYzg5MjE2ZDBmZjdjNmI2YzRjZjhiODA1ZDBkNThiZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeATgvoHF4AJRZjBJTh9OkXaSHqw
VMG/Wg2uN2DCV/DQZh01+6nZ/V1K7vFy28ugJbGL0zrSrbyBHIDmo8zRVJf1FdVh
dj4cKmc6D906xq/TeSKN+kfWQh9tOOzPazzAshNFmJqtriIVPvlO3nhqJAMcSRRu
KPffws1+yI+W+W3vx6/o20IuMFpuMJ/aL3DMSsIMOKiSfp1zlEwd9pIlTxYx/u5w
o7Bl2GL8Emg5yXzJp5qbyiCqi+N9KvxV9ARTWVeOij5vI9owEQnE9cMUpiMnfR/r
idTfMMq05FR17HyJfXc77NvmR+xPJygekEt+stXIXOkfyoGJ8ZJx0oxvQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCTQ4+yJIW0P98a2xM+LgF0NWL90MB8GA1UdIwQY
MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt
ZTg3MWIyMTc5MGRlLzEvSk5EajdJa2hiUV8zeHJiRXo0dUFYUTFZdjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl
LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSDhgMA0G
CSqGSIb3DQEBCwUAA4IBAQBhBTNY8jUe9REaLJkhFVnS+EIEhBgpb3UHpZ1c8v3/
my6WTFHfez3pu3NSHFiEZZ3ykkOwaPk7Dn4x+u82+ljWd/yoiK/rK+z8PRvNvZRB
jYPSOs2TO5hSVJiAIWwgUv+OihrAi1h/nyyxIeslja4lCEW0kFz9LlpK3N6a9Zh1
iCzCdo1QyGOThDZv88qgUMa0RkyNUASjM9i5QEVO7HX3PnO9LODEhVNydEZM6DcB
KTgXE3UzY02E9JlzWOJK+NHp9jFZPzdEu29tPqwqAnNWNwW52VLiixmX1rLKfGqb
d/0vjfxXpU8E1YJrdDuQB+uGHu+Qd9KsLK2Gk3D+M6e5
-----END CERTIFICATE-----
Generated at Mon Sep 8 02:12:47 2025 by rpki-client