Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JDI1O8j0LnV3dwGCrXcGiGTPfKY.roa
File: JDI1O8j0LnV3dwGCrXcGiGTPfKY.roa (raw, json)
Hash identifier: 1z/epwav0wc6lanmymaQbiSApXQywQnePOhX5LTUa5o=
Subject key identifier: 24:32:35:3B:C8:F4:2E:75:77:77:01:82:AD:77:06:88:64:CF:7C:A6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0198486921E8757CCEEBDA2BAD272CE535E7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JDI1O8j0LnV3dwGCrXcGiGTPfKY.roa
Signing time: Sat 26 Jul 2025 20:25:06 +0000
ROA not before: Sat 26 Jul 2025 20:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207641
IP address blocks: 2a0e:97c0:910::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:69:21:e8:75:7c:ce:eb:da:2b:ad:27:2c:e5:35:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 26 20:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2432353bc8f42e7577770182ad77068864cf7ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:4e:ee:f8:c4:54:dc:ab:b8:e9:c5:34:7c:
c5:61:67:46:61:92:49:df:47:61:80:d6:07:54:dd:
65:db:3e:1c:29:b4:16:77:9e:f2:5c:4d:2a:0e:28:
24:6d:8e:98:56:1f:7a:14:34:82:2a:85:e9:7e:73:
a5:e9:31:7d:02:a3:0d:e6:ec:b5:d3:4a:9c:e4:44:
57:d5:c4:4f:1d:62:5a:1a:55:85:0d:97:43:b0:e9:
5c:2f:a6:8b:ce:64:73:f9:bd:0d:e2:64:ab:ec:35:
a4:87:6f:eb:97:c5:7b:80:04:a9:71:69:e7:4e:29:
24:82:ad:75:a4:08:a5:26:ad:32:39:ea:83:39:95:
d5:a9:b7:08:de:9d:0c:22:5d:48:b1:d8:ed:1d:62:
28:10:97:e1:e3:8d:a4:13:df:a7:0a:a7:88:d2:6c:
4f:4f:cc:b5:e4:87:fc:9c:bd:98:a2:64:ea:c1:0a:
68:6d:2d:b7:e4:f0:fd:48:bb:af:8e:2d:07:39:23:
01:c3:8d:ce:ed:e9:d0:da:5d:ad:cd:26:3b:dc:e7:
ad:ce:ff:23:58:ae:0e:40:a3:2c:9a:88:d1:4d:b8:
48:e8:71:cd:6e:2c:fe:ae:78:f1:3c:f9:2e:6b:53:
fe:67:ea:7b:80:85:85:35:98:9f:bc:c3:e1:b5:ec:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:32:35:3B:C8:F4:2E:75:77:77:01:82:AD:77:06:88:64:CF:7C:A6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JDI1O8j0LnV3dwGCrXcGiGTPfKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:910::/44
Signature Algorithm: sha256WithRSAEncryption
06:a8:c5:83:fa:b1:7c:33:8a:8d:0f:a9:12:c3:12:25:96:c5:
b6:32:7b:a0:a6:6b:89:1c:02:c0:8d:16:ed:5d:ed:3f:fc:be:
15:23:78:51:c4:65:47:a0:eb:5a:9d:48:46:38:7d:7f:5c:05:
72:52:fa:b1:1e:7b:c1:20:0b:77:60:cc:60:e2:f8:de:36:db:
26:0c:76:df:99:4d:7e:9f:5d:ac:e8:52:bc:d0:2b:7b:43:46:
6c:ec:52:7f:08:2f:bb:22:db:ab:44:f7:e1:46:d9:ff:9a:1a:
41:58:4e:5b:c8:9e:9d:f8:14:cb:a6:99:61:85:5e:ae:cc:81:
76:69:52:b5:66:37:45:0f:fa:84:9b:39:af:6b:38:85:23:5c:
77:db:ef:03:b0:42:4a:a2:35:98:5a:23:6f:5d:1a:2b:dd:40:
ba:17:ff:26:c2:e2:3c:db:04:d7:48:18:1c:10:e7:74:fd:6e:
d0:01:a5:74:1e:ce:79:cd:d8:98:f4:29:41:7b:ae:46:f0:85:
f0:d3:73:9c:8b:48:cf:38:15:1a:57:fe:4e:0d:00:7c:ae:11:
2e:81:46:5c:9d:df:62:62:4e:35:a4:f7:fd:73:ed:4d:e9:7c:
ae:1a:cb:9b:a2:a4:97:e9:d7:69:ac:fe:4f:4b:69:eb:af:6e:
fa:9f:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:47 2025 by rpki-client