Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JsUzzZJDTfVorLGq5x1qTwsU3C8.roa
File: JsUzzZJDTfVorLGq5x1qTwsU3C8.roa (raw, json)
Hash identifier: vxA5OQjglHN62tIPqhWgC7Cq6wdA9tTWsnXNDH+79Ls=
Subject key identifier: 26:C5:33:CD:92:43:4D:F5:68:AC:B1:AA:E7:1D:6A:4F:0B:14:DC:2F
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019915877ACA190660852A1BC9E9CFBF6145
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JsUzzZJDTfVorLGq5x1qTwsU3C8.roa
Signing time: Thu 04 Sep 2025 16:20:24 +0000
ROA not before: Thu 04 Sep 2025 16:20:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29226
IP address blocks: 2a11:4b44::/32 maxlen: 32
2a11:4b46::/32 maxlen: 32
2a12:a341::/32 maxlen: 32
2a12:a347::/32 maxlen: 32
2a13:3c80::/30 maxlen: 30
2a13:3c84::/30 maxlen: 30
2a13:9340::/32 maxlen: 32
2a13:9341::/32 maxlen: 32
2a13:9342::/32 maxlen: 32
2a13:9343::/32 maxlen: 32
2a13:9344::/32 maxlen: 32
2a13:9345::/32 maxlen: 32
2a13:9346::/32 maxlen: 32
2a13:9347::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 11:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:87:7a:ca:19:06:60:85:2a:1b:c9:e9:cf:bf:61:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 4 16:20:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26c533cd92434df568acb1aae71d6a4f0b14dc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:41:f4:d3:4c:ca:80:b5:ea:a9:7e:e5:20:
1b:4d:2d:ca:59:c0:3e:25:a6:e1:dc:4b:0e:09:97:
f5:0b:3d:bf:65:b4:ea:78:cf:8c:bd:d6:b2:cc:c3:
9e:db:a1:21:5f:86:12:ca:c8:cd:f9:4c:eb:04:04:
70:4e:28:54:87:1b:85:cb:4e:2b:f4:0f:e4:d1:a5:
e9:25:67:6a:b9:e2:9e:ad:e3:31:27:11:0f:fa:17:
4f:13:b4:9a:59:27:68:36:a8:1d:03:64:e7:ed:03:
66:7c:82:4e:d2:c6:e9:95:c0:c2:a9:5b:2f:5d:80:
86:88:87:de:cb:3c:1f:80:22:94:cb:30:4f:e2:e8:
17:c2:ed:3f:1a:50:93:8a:55:39:2d:2d:02:31:52:
13:c5:b3:80:49:37:cd:aa:a0:07:82:99:bb:0f:c9:
22:dc:7e:99:49:74:96:ba:b9:fe:c9:c9:a9:9a:4e:
d3:6c:55:c7:e4:8b:63:54:bd:3f:0c:8a:26:a8:c1:
5e:bf:11:bf:b5:74:06:90:59:f4:9b:72:7a:2b:b0:
e1:00:31:07:6d:2a:6c:f0:8c:32:b4:b4:65:b4:6b:
78:b7:bd:c6:ca:c2:f5:95:7b:9d:f7:3f:34:a1:65:
e8:58:28:fe:aa:55:67:7c:c0:26:a1:b8:6d:c2:7a:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C5:33:CD:92:43:4D:F5:68:AC:B1:AA:E7:1D:6A:4F:0B:14:DC:2F
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JsUzzZJDTfVorLGq5x1qTwsU3C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4b44::/32
2a11:4b46::/32
2a12:a341::/32
2a12:a347::/32
2a13:3c80::/29
2a13:9340::/29
Signature Algorithm: sha256WithRSAEncryption
a3:df:20:d1:c7:8a:b1:79:47:b6:36:84:51:5b:ad:4c:34:e9:
28:9a:06:76:ad:97:ce:36:2d:b5:38:72:33:ec:b7:d6:df:a9:
15:5d:16:01:fb:40:0d:9f:12:ad:0f:a4:04:b0:cc:0d:ed:b2:
cd:6b:7b:56:a4:e6:fc:6e:c4:96:a8:59:d8:af:1d:4b:7a:66:
a3:0a:e6:85:09:d2:80:2f:4b:48:b4:fd:75:03:62:bc:ad:55:
86:56:f5:96:ee:42:2b:1f:3d:9b:2a:71:2c:92:94:f8:a5:19:
b4:a6:38:65:2b:a8:e5:2e:90:18:39:f7:11:57:b3:79:ff:ea:
ac:1a:b4:7a:0f:04:30:18:e5:50:0d:76:c4:06:6d:25:75:e8:
ad:95:91:ef:43:48:4f:25:db:6e:77:21:18:07:b2:68:78:7e:
70:cd:91:c5:4c:b3:b4:fe:a4:f9:80:75:a4:ee:15:c2:c7:2b:
93:9a:5b:b7:a5:0c:ef:e1:6e:ca:98:d2:c8:26:17:18:43:ac:
de:4c:f2:19:cd:eb:34:a4:40:15:70:29:1c:02:6f:f9:28:8b:
4f:21:67:b8:e9:6b:26:37:fa:8f:a3:86:8b:f9:c2:06:25:86:
d1:68:2d:9f:6c:04:89:7b:61:09:78:ed:a4:44:6e:17:ff:f3:
e9:3c:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:12:22 2025 by rpki-client