Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Jz85AN7DsUiRNmIqgF03io7PReI.roa
File: Jz85AN7DsUiRNmIqgF03io7PReI.roa (raw, json)
Hash identifier: O81WTEhtajm/bUP+G1F7OmyUOswqSuX+9lhe3hsR77A=
Subject key identifier: 27:3F:39:00:DE:C3:B1:48:91:36:62:2A:80:5D:37:8A:8E:CF:45:E2
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01985B20701640618EE087F6EF8F4560795D
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Jz85AN7DsUiRNmIqgF03io7PReI.roa
Signing time: Wed 30 Jul 2025 11:38:29 +0000
ROA not before: Wed 30 Jul 2025 11:38:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152179
IP address blocks: 109.122.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:20:70:16:40:61:8e:e0:87:f6:ef:8f:45:60:79:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 30 11:38:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=273f3900dec3b1489136622a805d378a8ecf45e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:f1:36:79:d6:3a:58:c2:3d:12:24:7a:ef:
77:33:91:2a:03:e1:cd:fa:5d:50:c0:ef:12:06:98:
1c:f4:38:61:5d:09:fc:e9:cf:77:d4:92:e9:57:41:
0b:f8:42:14:b8:fb:66:54:3a:11:eb:dd:28:f4:cf:
77:dd:84:7d:81:68:4a:5d:70:18:5b:d5:12:aa:cc:
f1:3f:45:01:93:c0:2e:20:d0:5d:e7:8d:71:5a:0d:
f5:7a:7d:71:29:36:7f:7d:74:87:e6:65:50:cb:dc:
2e:9e:54:ca:29:75:e8:8e:21:f7:5d:37:29:20:43:
60:b3:fc:fe:74:31:02:9f:45:c8:ef:f3:33:d6:88:
f4:00:14:ba:cf:11:25:76:46:9d:f3:a9:57:d5:cb:
41:e5:5e:c3:ac:82:bf:5d:a0:43:f6:4a:b0:34:d7:
5f:af:29:80:dc:48:8a:51:a2:e8:81:b1:72:d3:4d:
66:ae:be:fe:85:ef:73:2e:24:0f:16:c9:6e:34:99:
2d:b8:e7:47:20:85:4a:66:f1:38:1e:a8:e4:14:3e:
11:eb:4e:3e:f5:6d:81:52:ac:31:bc:fd:5a:3c:0c:
05:40:3d:8e:1e:0d:1c:bf:68:d8:d3:45:f3:60:1f:
67:19:87:8b:4b:7d:b4:78:66:2b:c5:30:24:58:d2:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3F:39:00:DE:C3:B1:48:91:36:62:2A:80:5D:37:8A:8E:CF:45:E2
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Jz85AN7DsUiRNmIqgF03io7PReI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.5.0/24
Signature Algorithm: sha256WithRSAEncryption
07:57:4c:bd:12:24:ed:7d:c3:8a:ad:89:0b:5b:4f:0f:ef:ec:
6d:32:12:ae:8e:3c:6b:4d:d3:7b:54:64:95:dd:72:2d:36:e4:
cb:35:b8:90:93:93:25:9c:1f:dc:8e:68:b4:a2:c9:c3:85:82:
5b:98:ca:71:2c:dd:cb:9f:a2:b2:a2:99:46:87:c6:1f:1e:8c:
4c:d9:63:4f:e5:71:ac:dd:d4:74:f7:23:09:21:ec:38:f0:04:
b8:64:e5:6e:f2:ee:b7:6e:ee:0a:d7:be:e3:01:63:7b:20:48:
73:59:50:25:81:e3:d7:e3:59:e0:61:b1:88:e7:ea:0a:0b:ef:
91:5b:a6:fb:0c:61:33:d9:7f:79:8e:31:90:7c:da:f5:dc:17:
a8:a3:b6:33:b2:6d:d7:9f:8b:73:5b:47:b1:94:a9:51:9b:49:
d9:26:53:63:33:23:8d:e4:85:0b:0d:d6:cc:c6:3e:64:3f:31:
d4:96:99:63:19:0e:66:f7:5e:b9:5f:79:22:3f:80:95:c4:d3:
4b:e1:da:b9:2d:e9:45:e6:48:11:32:45:24:23:0a:b8:9f:42:
c4:a3:e9:18:f1:8e:d4:c0:3e:ac:d8:30:8d:b4:65:ac:f3:0c:
71:d2:7b:ea:bc:0f:41:b1:4f:7d:ca:8a:ed:66:f9:31:e1:90:
6e:55:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:10:30 2025 by rpki-client