Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Sj-_RnC34ecuvBpc0rCzlEDa7pg.roa
File: Sj-_RnC34ecuvBpc0rCzlEDa7pg.roa (raw, json)
Hash identifier: phaHK5TmaT8HFSOfZpT3D2+yYeLJ3Irl7+kbC/pKRPc=
Subject key identifier: 4A:3F:BF:46:70:B7:E1:E7:2E:BC:1A:5C:D2:B0:B3:94:40:DA:EE:98
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019927449B65A24D4ABA73204A4A9DCE2608
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Sj-_RnC34ecuvBpc0rCzlEDa7pg.roa
Signing time: Mon 08 Sep 2025 03:00:31 +0000
ROA not before: Mon 08 Sep 2025 03:00:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 23.90.128.0/18 maxlen: 24
94.154.120.0/24 maxlen: 24
104.166.128.0/18 maxlen: 24
185.207.112.0/22 maxlen: 24
192.169.96.0/19 maxlen: 24
192.169.104.0/22 maxlen: 24
193.118.32.0/19 maxlen: 24
193.118.96.0/19 maxlen: 19
199.182.232.0/21 maxlen: 24
2a0b:21c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:44:9b:65:a2:4d:4a:ba:73:20:4a:4a:9d:ce:26:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Sep 8 03:00:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a3fbf4670b7e1e72ebc1a5cd2b0b39440daee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:b1:c0:e6:41:8b:4b:83:6d:e5:79:56:8c:
bb:bc:2b:56:52:74:c4:f4:71:8f:a2:87:de:5a:25:
46:77:f1:13:1c:7c:de:0b:e8:95:8a:e4:43:d8:28:
c4:85:c5:7b:8c:fa:b0:bb:60:65:24:11:a2:e8:00:
49:93:2c:db:cc:6d:31:66:bf:88:84:5b:ea:ee:d9:
6c:11:8e:08:f8:56:64:23:12:c9:77:6f:25:c5:0d:
90:08:cf:96:63:1d:c5:98:cf:90:24:4c:50:92:1b:
67:d3:71:dd:f7:46:83:c4:a5:da:a7:ba:7b:3c:ac:
83:f2:21:0e:af:e6:33:82:54:42:3f:c0:40:0e:18:
0a:1e:06:ac:be:77:3e:61:d2:e0:2e:e1:09:79:ea:
52:04:b3:0e:21:b0:c1:cc:0c:ac:84:b0:bd:6d:6f:
6f:94:eb:ea:4b:d0:80:64:a7:ea:af:bb:3a:c4:c6:
19:46:8c:94:18:57:d4:e5:f2:81:a0:f6:5b:d7:b8:
d1:7c:c5:9d:d6:68:0c:65:c9:8a:2d:68:65:db:b0:
74:56:bd:1a:3b:6c:4e:bd:6c:6e:e2:0c:f2:99:06:
b4:3e:1c:ff:5d:bf:77:86:73:96:56:d1:87:54:cd:
f6:ad:17:dc:84:9d:2f:0a:af:63:4c:df:b5:12:1b:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:BF:46:70:B7:E1:E7:2E:BC:1A:5C:D2:B0:B3:94:40:DA:EE:98
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Sj-_RnC34ecuvBpc0rCzlEDa7pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.90.128.0/18
94.154.120.0/24
104.166.128.0/18
185.207.112.0/22
192.169.96.0/19
193.118.32.0/19
193.118.96.0/19
199.182.232.0/21
IPv6:
2a0b:21c0::/29
Signature Algorithm: sha256WithRSAEncryption
5a:ba:74:f5:e4:be:31:b7:0f:3e:e9:45:ba:f7:1c:a5:45:a4:
18:82:63:07:53:d3:64:53:bf:b3:25:9d:41:40:df:e4:4b:51:
af:7c:2d:8e:e0:aa:81:55:ff:fb:64:84:43:c1:a8:91:c1:49:
ae:7a:05:01:19:67:18:be:55:ac:44:7e:01:78:7f:9b:4b:ad:
dc:9d:c4:8a:74:71:3f:fe:59:08:bb:40:a4:e0:9e:b8:32:de:
f1:9c:31:7d:f1:8d:f3:2f:26:57:4d:11:c6:0b:12:2e:92:3f:
29:b6:a2:8f:2c:fd:2f:4f:cc:33:f8:65:31:56:26:99:56:b6:
b0:88:19:d4:fd:9c:8e:c9:76:20:55:70:fb:f3:d0:94:1e:e7:
c4:19:49:1f:59:6d:15:d1:4c:ad:df:38:19:88:d2:e1:88:97:
69:2c:43:d8:a8:5c:ee:50:16:51:e1:cf:de:f8:cc:1c:f2:1f:
cc:20:7a:9a:e5:e2:ac:e6:f3:89:e4:aa:b4:ac:78:dc:c6:1d:
54:39:09:3a:fb:96:65:24:31:e7:13:80:95:57:0e:bb:a5:97:
7b:ea:c9:1d:1b:86:70:f3:99:0e:a5:3d:6b:2a:97:b0:fb:9b:
96:0a:1d:e6:b6:8f:61:f4:5f:ba:38:fa:cb:2d:aa:1e:8e:61:
2b:72:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:57:34 2025 by rpki-client