Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/YzWNeQoNIDqjyGCk746jvrBM23k.roa
File: YzWNeQoNIDqjyGCk746jvrBM23k.roa (raw, json)
Hash identifier: zjvc7yggWtt0zDSCwKp/MBGW7ImHpfGU+2REQ6ZUwRI=
Subject key identifier: 63:35:8D:79:0A:0D:20:3A:A3:C8:60:A4:EF:8E:A3:BE:B0:4C:DB:79
Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial: 019A2A35D8016B5789B30803C46DD3591FFC
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/YzWNeQoNIDqjyGCk746jvrBM23k.roa
Signing time: Tue 28 Oct 2025 09:46:02 +0000
ROA not before: Tue 28 Oct 2025 09:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44513
IP address blocks: 31.15.72.0/21 maxlen: 21
31.15.72.0/22 maxlen: 22
31.15.76.0/22 maxlen: 22
31.15.76.0/24 maxlen: 24
80.69.240.0/20 maxlen: 20
92.43.240.0/21 maxlen: 21
185.129.88.0/22 maxlen: 22
195.181.176.0/20 maxlen: 20
195.181.176.0/21 maxlen: 21
195.181.176.0/22 maxlen: 22
195.181.184.0/22 maxlen: 22
195.181.188.0/22 maxlen: 22
213.32.208.0/20 maxlen: 20
213.163.208.0/20 maxlen: 20
213.163.208.0/21 maxlen: 21
213.163.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:35:d8:01:6b:57:89:b3:08:03:c4:6d:d3:59:1f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Validity
Not Before: Oct 28 09:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63358d790a0d203aa3c860a4ef8ea3beb04cdb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:20:c2:53:4b:14:a0:f5:69:73:fe:e7:7c:
51:33:4a:ef:a5:1e:c7:fb:5e:f0:38:0a:bb:92:44:
73:b7:53:8e:7d:71:23:48:d0:31:e8:f3:f4:89:df:
31:af:03:51:25:0e:0a:a5:9f:5a:10:de:42:bf:34:
a8:6b:cc:0f:49:8a:d9:dc:14:7b:54:17:d0:a4:c4:
5f:82:10:7c:27:c5:22:5f:92:f8:32:a4:be:41:9d:
29:2f:26:05:3f:bb:51:0c:60:2c:d3:1f:dd:36:13:
af:57:22:de:32:70:fa:92:69:db:26:44:3e:9b:d2:
31:31:13:41:4f:f7:1e:db:27:4f:45:f0:6b:14:22:
24:a1:da:c8:cd:6b:3b:b4:20:94:93:ee:08:c6:d2:
ac:26:15:39:e4:f8:d6:29:01:9e:81:14:d3:b7:ca:
dc:ee:be:7f:43:54:85:e9:c4:5b:03:e6:8c:d4:c9:
95:6b:5d:40:fb:50:cf:0e:12:70:e2:b4:3b:aa:e7:
8e:c0:46:a5:19:ca:fd:0d:1c:d3:f0:88:5f:67:52:
b8:37:23:9e:51:57:85:4c:ce:8b:7e:3b:1c:fc:cd:
e6:c0:b2:04:ad:98:25:f2:21:35:18:3f:5b:fd:49:
23:c9:79:3b:9a:eb:22:8b:f2:6d:7b:97:59:d1:68:
8b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:8D:79:0A:0D:20:3A:A3:C8:60:A4:EF:8E:A3:BE:B0:4C:DB:79
X509v3 Authority Key Identifier:
keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/YzWNeQoNIDqjyGCk746jvrBM23k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.72.0/21
80.69.240.0/20
92.43.240.0/21
185.129.88.0/22
195.181.176.0/20
213.32.208.0/20
213.163.208.0/20
Signature Algorithm: sha256WithRSAEncryption
71:c6:e4:98:95:bc:94:64:73:3d:4f:fd:44:41:ff:24:97:0a:
cc:5b:94:04:5a:cf:15:5d:5e:d8:7e:8f:96:c4:14:a8:a6:02:
75:d3:e0:f6:2e:a1:f5:d5:78:c7:7b:76:74:95:f1:60:4f:86:
83:00:58:e6:e8:4c:b1:b1:ec:d6:ff:9c:e2:d5:b1:ca:59:ef:
9f:fc:f3:5f:36:aa:2c:be:b6:8a:48:46:21:64:fb:5d:a1:28:
e7:2f:ba:cf:c5:68:31:55:31:ec:77:33:24:5a:1c:64:c1:1a:
bd:7d:4c:c1:33:ab:7c:d7:41:47:87:fd:7c:3c:d3:61:dc:94:
1a:83:67:13:86:a3:46:31:73:0a:2e:34:66:2e:f1:0f:7c:6f:
88:f7:25:14:60:bc:d8:7d:b6:83:c7:4b:93:d7:2a:74:2a:7d:
28:d8:8a:d9:b1:10:10:11:c0:14:3f:e1:c4:41:c5:42:47:9f:
8f:8b:cf:7a:5d:ea:de:9b:05:60:81:3e:51:7d:70:a2:97:d8:
29:90:ef:e5:c1:be:07:7f:61:cd:9b:03:4f:83:d9:cb:a9:27:
e7:eb:8a:f3:95:ec:b4:75:fb:b6:f0:7c:d7:2a:7e:78:f3:0c:
72:cb:f2:4e:ad:de:85:3d:68:84:ae:ca:f6:ab:28:ca:7e:75:
81:48:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:48 2025 by rpki-client