Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JfBZCcRPygkZGKoGaELekXe6Xg0.roa
File: JfBZCcRPygkZGKoGaELekXe6Xg0.roa (raw, json)
Hash identifier: /hRYpBDovJfZ/w2v649rrRrnp1nVCxe4Z4eb7jbswiQ=
Subject key identifier: 25:F0:59:09:C4:4F:CA:09:19:18:AA:06:68:42:DE:91:77:BA:5E:0D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01984E99E49D536D40BB31ADA75CE851AF95
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JfBZCcRPygkZGKoGaELekXe6Xg0.roa
Signing time: Mon 28 Jul 2025 01:16:05 +0000
ROA not before: Mon 28 Jul 2025 01:16:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8447
IP address blocks: 2a02:2fc0:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:99:e4:9d:53:6d:40:bb:31:ad:a7:5c:e8:51:af:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 28 01:16:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25f05909c44fca091918aa066842de9177ba5e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:e3:ac:29:41:d4:7b:d0:90:2c:a3:87:f5:
9c:8d:5c:f0:45:62:48:b5:30:45:8a:4c:9d:2b:6d:
62:66:1d:d7:d9:0b:70:fb:d9:d9:49:01:21:73:07:
9f:9f:85:07:b9:cb:3c:dc:b1:7f:63:98:1b:dd:c1:
4d:4c:a7:24:28:36:0a:2e:02:d6:88:6b:bb:ad:5b:
1b:1e:8a:2e:1a:a1:f4:df:2d:f4:98:f8:4e:e8:44:
81:8f:cb:7a:c4:af:e9:29:e4:d8:9a:e4:a0:a3:60:
a0:b1:6b:93:64:28:d4:7d:d0:97:81:4f:cc:6e:e7:
1a:11:a9:3a:c9:84:30:4c:d1:ea:92:d7:5c:f7:5d:
f9:6d:6b:ff:43:6b:13:0f:ca:e7:e2:b6:7f:97:e9:
74:d9:b7:8b:56:45:a2:75:1d:81:db:58:7c:23:06:
6b:76:12:32:33:97:02:ed:b6:8d:ee:b9:c0:6e:2e:
0a:1a:84:7c:33:3a:ad:8b:3d:7f:bc:9e:89:a9:0c:
9d:74:b2:e5:df:54:72:3a:2c:44:82:39:d2:58:7e:
4e:99:b0:fa:b9:9e:e8:1c:ed:77:a2:a5:ea:cc:24:
1d:50:ed:fe:3a:54:d7:f1:7d:ac:4d:fc:29:6c:5a:
c5:e8:98:02:90:f9:08:62:69:0c:33:2d:ab:9c:32:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F0:59:09:C4:4F:CA:09:19:18:AA:06:68:42:DE:91:77:BA:5E:0D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JfBZCcRPygkZGKoGaELekXe6Xg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:14::/48
Signature Algorithm: sha256WithRSAEncryption
33:45:14:f1:87:04:72:fc:ac:03:a4:a7:67:d8:6a:34:15:e2:
19:45:3c:3c:d5:bc:60:28:82:5c:25:1c:3a:b0:69:ff:e9:19:
dc:f6:e5:b1:e5:44:bc:fc:9c:ab:9a:28:e3:28:57:86:8a:13:
d3:f9:01:81:a8:1f:45:25:f9:a4:57:0b:8c:63:06:20:71:8d:
9b:6d:fa:b0:dc:03:5a:0f:56:d9:31:5a:61:5a:a1:c4:3d:ea:
c7:1b:e6:8b:25:fd:0c:8c:1b:95:bd:9d:04:8e:be:4b:36:8f:
86:74:53:96:3f:7d:43:f5:42:39:ad:15:a9:c2:04:79:b6:5f:
89:70:70:c7:ae:3d:a5:99:0d:19:0b:29:cc:76:eb:7f:72:ce:
9c:d2:64:59:dd:33:e8:7a:6b:e8:43:a4:3c:39:60:f4:b0:2c:
59:d3:dc:ec:2f:04:94:0f:d3:41:fd:4d:49:95:02:71:2a:b6:
b8:d8:ea:14:eb:f0:88:da:2a:95:63:42:e5:2a:86:e5:a6:a0:
2d:f2:cc:56:f4:43:f3:6b:bd:cf:7c:e7:68:e1:9c:ca:a5:c3:
dc:76:9f:a6:ac:bd:ec:57:82:e4:f7:e6:3b:7b:cc:18:ed:e5:
ef:a1:50:1c:ff:b3:dc:36:7c:47:26:db:84:39:c9:2f:68:8d:
91:a3:7a:be
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZhOmeSdU21AuzGtp1zoUa+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNzI4MDExNjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWYwNTkwOWM0NGZjYTA5MTkxOGFhMDY2ODQyZGU5MTc3YmE1ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRTjrClB1HvQkCyjh/WcjVzwRWJI
tTBFikydK21iZh3X2Qtw+9nZSQEhcwefn4UHucs83LF/Y5gb3cFNTKckKDYKLgLW
iGu7rVsbHoouGqH03y30mPhO6ESBj8t6xK/pKeTYmuSgo2CgsWuTZCjUfdCXgU/M
bucaEak6yYQwTNHqktdc9135bWv/Q2sTD8rn4rZ/l+l02beLVkWidR2B21h8IwZr
dhIyM5cC7baN7rnAbi4KGoR8Mzqtiz1/vJ6JqQyddLLl31RyOixEgjnSWH5OmbD6
uZ7oHO13oqXqzCQdUO3+OlTX8X2sTfwpbFrF6JgCkPkIYmkMMy2rnDKQzQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCXwWQnET8oJGRiqBmhC3pF3ul4NMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSmZCWkNjUlB5Z2taR0tvR2FFTGVrWGU2WGcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIvwAAU
MA0GCSqGSIb3DQEBCwUAA4IBAQAzRRTxhwRy/KwDpKdn2Go0FeIZRTw81bxgKIJc
JRw6sGn/6Rnc9uWx5US8/JyrmijjKFeGihPT+QGBqB9FJfmkVwuMYwYgcY2bbfqw
3ANaD1bZMVphWqHEPerHG+aLJf0MjBuVvZ0Ejr5LNo+GdFOWP31D9UI5rRWpwgR5
tl+JcHDHrj2lmQ0ZCynMdut/cs6c0mRZ3TPoemvoQ6Q8OWD0sCxZ09zsLwSUD9NB
/U1JlQJxKra42OoU6/CI2iqVY0LlKoblpqAt8sxW9EPza73PfOdo4ZzKpcPcdp+m
rL3sV4Lk9+Y7e8wY7eXvoVAc/7PcNnxHJtuEOckvaI2Ro3q+
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:11 2025 by rpki-client