Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/JM31mtO5D2YgJ4vv854uYIYUqZM.roa
File: JM31mtO5D2YgJ4vv854uYIYUqZM.roa (raw, json)
Hash identifier: BpH5iTmkS7Cb31Ji5qcbFt49GmCtp8bFyAoPiv8gypY=
Subject key identifier: 24:CD:F5:9A:D3:B9:0F:66:20:27:8B:EF:F3:9E:2E:60:86:14:A9:93
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019A4E0B6DEDF5E50D216C4CEA5775D9FA33
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/JM31mtO5D2YgJ4vv854uYIYUqZM.roa
Signing time: Tue 04 Nov 2025 08:46:03 +0000
ROA not before: Tue 04 Nov 2025 08:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 43.251.0.0/22 maxlen: 22
45.6.44.0/22 maxlen: 22
45.120.220.0/22 maxlen: 22
62.106.67.0/24 maxlen: 24
80.174.128.0/17 maxlen: 17
83.143.168.0/21 maxlen: 21
93.95.16.0/21 maxlen: 21
128.0.40.0/24 maxlen: 24
202.58.108.0/22 maxlen: 22
212.86.96.0/24 maxlen: 24
212.86.98.0/24 maxlen: 24
212.86.106.0/24 maxlen: 24
212.118.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:0b:6d:ed:f5:e5:0d:21:6c:4c:ea:57:75:d9:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Nov 4 08:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24cdf59ad3b90f6620278beff39e2e608614a993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:be:a4:72:4d:ed:8a:ab:f5:3b:5b:34:e7:
aa:6a:12:3c:18:ac:bb:00:04:3b:cc:d3:2d:00:22:
33:95:14:3b:01:15:78:2c:d8:a8:b4:53:ac:23:41:
a2:ef:3c:e4:c0:26:b2:38:9f:5a:87:38:95:89:da:
08:2d:85:91:65:13:98:d3:7e:bd:6d:87:d5:8f:91:
00:33:19:d9:47:81:09:a5:04:ea:52:43:e5:26:23:
e9:e8:1d:12:28:cd:94:e1:ba:52:ef:45:03:ac:ac:
9c:95:4e:85:7d:03:de:34:37:a8:22:73:c2:c2:ee:
2a:3e:80:cd:10:fc:9e:9f:c1:aa:74:a5:4c:79:f4:
f2:af:64:c3:4c:6a:79:83:41:f3:66:00:c4:f2:e8:
49:bc:81:dc:0d:b1:d5:af:b3:18:db:c6:28:15:0b:
7a:cc:91:60:5b:ea:e6:9d:01:a4:71:db:1e:6e:5c:
4e:41:f9:e6:ad:e4:07:d5:32:aa:59:6e:d5:3c:48:
f4:6e:de:18:f1:e1:83:29:5d:34:87:88:b3:4b:8b:
f4:33:51:9a:73:fe:db:eb:3d:a0:86:ea:1c:f9:a8:
b0:00:9a:45:7b:33:b4:aa:63:44:dd:32:20:fd:4c:
2b:ee:7a:3d:b3:4c:c4:ff:01:3b:46:58:fc:0b:97:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CD:F5:9A:D3:B9:0F:66:20:27:8B:EF:F3:9E:2E:60:86:14:A9:93
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/JM31mtO5D2YgJ4vv854uYIYUqZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.251.0.0/22
45.6.44.0/22
45.120.220.0/22
62.106.67.0/24
80.174.128.0/17
83.143.168.0/21
93.95.16.0/21
128.0.40.0/24
202.58.108.0/22
212.86.96.0/24
212.86.98.0/24
212.86.106.0/24
212.118.61.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:b7:0d:7a:64:a8:fd:74:50:a7:53:1b:31:e1:54:8e:89:a5:
b9:d7:64:11:88:d3:99:c5:fd:0a:2a:26:2b:2a:08:ff:fd:48:
d5:81:75:c7:ff:7a:79:da:71:c0:3c:da:1b:de:ff:29:29:87:
2d:bf:2c:27:0c:f5:c0:c4:7d:5b:75:7c:b9:df:d1:2d:1e:f5:
b0:53:f0:60:0b:80:19:e5:d9:c3:43:64:14:d4:0b:ca:78:a3:
45:8f:d1:5c:cd:00:58:a3:22:0e:03:ed:be:f6:9f:56:16:5c:
4d:35:76:24:59:aa:e3:e3:c5:df:76:85:a9:a8:c0:83:0f:32:
8f:33:e8:aa:4f:44:84:a3:56:45:ed:7c:85:b4:d6:ff:96:81:
0f:aa:e9:3d:e1:a2:bc:ba:78:46:a9:96:6b:05:37:09:13:9a:
11:2c:08:c7:55:91:fc:05:28:c9:d4:aa:a0:a7:04:24:73:c0:
4a:79:a6:a7:fd:80:5f:de:86:d1:9c:6c:75:f2:68:7e:1a:27:
34:90:d3:31:be:a1:05:ea:5e:ac:9f:85:4a:45:c4:a7:63:76:
cb:9f:78:51:32:91:67:fa:07:44:3d:56:de:3e:e0:de:7e:d7:
d5:83:2a:e3:53:7a:90:89:0d:63:2b:b6:13:a4:fe:dc:09:54:
1b:8a:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:39:48 2025 by rpki-client