Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/djrv_KaGCDUK_H0rgzzTkvu3xjk.roa
File: djrv_KaGCDUK_H0rgzzTkvu3xjk.roa (raw, json)
Hash identifier: Q78jKZVQp91Q5Wd8YBTF+3592+S1nmxVdme1CKTgnIM=
Subject key identifier: 76:3A:EF:FC:A6:86:08:35:0A:FC:7D:2B:83:3C:D3:92:FB:B7:C6:39
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 019A3439E32AD82A100B336E3EEEA6A9C158
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/djrv_KaGCDUK_H0rgzzTkvu3xjk.roa
Signing time: Thu 30 Oct 2025 08:26:40 +0000
ROA not before: Thu 30 Oct 2025 08:26:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49813
IP address blocks: 5.63.128.0/21 maxlen: 21
5.63.131.0/24 maxlen: 24
5.63.132.0/22 maxlen: 24
5.63.134.0/24 maxlen: 24
109.105.128.0/20 maxlen: 24
109.105.129.0/24 maxlen: 24
109.105.133.0/24 maxlen: 24
109.105.135.0/24 maxlen: 24
109.105.137.0/24 maxlen: 24
109.105.138.0/24 maxlen: 24
109.105.139.0/24 maxlen: 24
109.105.140.0/24 maxlen: 24
109.105.144.0/21 maxlen: 24
109.105.144.0/23 maxlen: 24
109.105.144.0/24 maxlen: 24
109.105.146.0/24 maxlen: 24
109.105.147.0/24 maxlen: 24
109.105.148.0/24 maxlen: 24
109.105.150.0/24 maxlen: 24
109.105.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:39:e3:2a:d8:2a:10:0b:33:6e:3e:ee:a6:a9:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Oct 30 08:26:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=763aeffca68608350afc7d2b833cd392fbb7c639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:8b:4d:97:dc:e2:a0:99:27:55:60:4c:87:
08:00:ce:5e:7d:ca:10:0e:6a:76:c8:1f:2c:54:7b:
68:07:80:24:be:aa:35:56:e1:13:4f:bc:b1:8a:c3:
ef:9c:4a:ea:46:e4:4f:4f:22:d6:0a:8a:ad:3e:0d:
09:63:52:60:70:bc:e4:e2:7b:e8:40:97:8c:b5:fe:
bd:f7:6f:f8:c4:73:68:3f:f9:27:d5:df:a7:ef:da:
49:6e:68:84:4d:4f:3d:09:c4:63:ed:07:f1:49:3f:
69:ee:08:15:35:d9:91:d3:13:45:aa:38:4e:db:73:
0f:e4:89:56:62:c1:bb:02:a5:2b:b8:66:d2:87:7c:
81:19:f2:9e:cd:50:e3:8c:d0:eb:b9:ee:a0:96:c8:
55:d2:d7:12:ca:72:f7:74:9a:24:7e:7e:30:0a:b5:
9a:69:b9:cc:41:86:5f:ba:0a:e6:80:cc:26:ed:77:
ea:30:e0:12:d2:fe:88:1f:f8:3b:97:58:42:1c:a6:
cd:c5:65:27:73:7a:d0:b8:7e:00:3b:cb:4f:54:28:
3b:40:c3:7f:59:0d:a4:d0:85:3b:d4:5b:dd:a1:4f:
65:bf:90:50:a9:cf:71:45:b7:bc:31:bf:a0:aa:89:
1a:65:7d:31:e9:12:d3:b9:b5:13:9d:8b:93:9c:25:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3A:EF:FC:A6:86:08:35:0A:FC:7D:2B:83:3C:D3:92:FB:B7:C6:39
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/djrv_KaGCDUK_H0rgzzTkvu3xjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.128.0/21
109.105.128.0-109.105.151.255
Signature Algorithm: sha256WithRSAEncryption
8b:1d:a4:55:7d:8a:85:24:c0:a5:ab:8e:56:c7:9a:8e:56:62:
ec:ca:36:83:70:5b:2e:2e:91:a9:c2:d5:8a:0b:0c:07:48:f3:
60:db:db:fd:41:eb:6d:65:f5:73:29:1f:61:ae:80:fb:9f:4d:
86:fd:84:0d:da:f0:72:ea:56:6e:c5:47:84:ee:3f:73:89:6f:
2a:e3:be:81:84:c5:90:7a:8c:2f:6e:68:69:82:6b:03:fd:f5:
36:46:f2:a0:b2:64:4c:84:ad:60:bf:35:71:3d:be:28:21:db:
86:11:0e:e6:07:c2:27:61:b4:bf:84:5d:2d:d2:b9:5c:12:c9:
c5:6c:0d:2f:de:8c:5c:14:f9:f3:e3:3f:2b:fe:58:06:0f:57:
b6:e1:af:ef:76:5a:f8:f4:a1:df:96:a5:79:ba:db:09:ee:d6:
1d:d3:75:41:96:11:ac:51:77:36:8a:37:a6:95:a7:30:52:06:
44:c2:8b:e8:99:7a:c0:64:d2:d8:18:65:0b:bb:97:bb:00:1a:
37:c2:2e:4d:1f:46:0c:91:92:28:66:28:7b:5d:0c:5f:fb:3e:
12:c6:78:65:25:4f:a6:8a:48:c6:ac:a2:01:e0:7e:cc:4d:10:
b6:f5:b3:99:1f:04:04:07:07:d8:ae:e2:de:ac:c4:24:41:0c:
c8:3c:19:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:01:26 2025 by rpki-client