Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/JepVTVOXgV6-PNcYm4B25-og_Bw.roa
File: JepVTVOXgV6-PNcYm4B25-og_Bw.roa (raw, json)
Hash identifier: VKqDemplzQ4s9jiGQQ+ztyQv75PYRo6TWHvEcx19U2s=
Subject key identifier: 25:EA:55:4D:53:97:81:5E:BE:3C:D7:18:9B:80:76:E7:EA:20:FC:1C
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 01985FC4C9B63E0A209A902E18874F7A9F01
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/JepVTVOXgV6-PNcYm4B25-og_Bw.roa
Signing time: Thu 31 Jul 2025 09:16:28 +0000
ROA not before: Thu 31 Jul 2025 09:16:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201143
IP address blocks: 194.92.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:c4:c9:b6:3e:0a:20:9a:90:2e:18:87:4f:7a:9f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Jul 31 09:16:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ea554d5397815ebe3cd7189b8076e7ea20fc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:a4:a6:1f:f6:14:36:d7:1c:6d:d1:85:74:
38:c3:85:83:c3:dc:ca:28:7d:13:1c:23:b1:20:ab:
21:ff:8c:bc:6a:5d:78:2f:f7:2e:30:39:f6:7c:97:
79:56:2a:32:da:42:8c:12:4b:5d:15:73:d5:be:80:
4d:f4:49:e2:e4:64:6f:bc:cf:1a:bc:6b:fb:6a:dc:
52:39:b8:49:89:f2:a2:20:e2:0c:50:57:51:22:f8:
53:78:1f:f4:db:18:75:68:2a:39:e4:fb:2c:9c:64:
79:6a:9b:9e:cb:c5:86:c6:70:3e:42:70:d6:4a:b3:
e5:8b:6b:bd:f0:5d:68:cb:3d:8e:ec:96:10:8e:2d:
c0:cc:71:ee:0a:44:e4:ec:79:01:16:ae:74:62:5c:
7a:a0:a5:66:43:0e:42:50:eb:d6:2a:0f:08:0e:79:
56:dd:87:f5:25:89:2a:63:d6:36:68:d4:0a:fe:48:
1c:ad:1d:6f:d3:35:24:08:4c:78:f4:9a:19:9d:6f:
39:71:09:e9:6d:10:4e:f5:8e:5c:2f:09:71:bb:86:
9f:8e:6e:d2:d0:dd:ba:74:ce:7f:f8:d1:31:27:f9:
6c:48:b3:7d:ef:54:c7:cd:53:0c:70:36:af:c8:35:
7d:bf:d8:12:f2:d9:49:11:d1:67:86:cb:bd:08:11:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EA:55:4D:53:97:81:5E:BE:3C:D7:18:9B:80:76:E7:EA:20:FC:1C
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/JepVTVOXgV6-PNcYm4B25-og_Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.98.0/24
Signature Algorithm: sha256WithRSAEncryption
01:03:67:1a:6d:5c:65:8e:d6:3a:b5:f9:a1:d4:dc:92:b6:37:
4c:42:7f:93:c3:90:13:f6:0e:a7:e5:44:76:85:1f:e6:2b:2e:
6c:91:aa:20:62:bb:d4:e3:56:0d:59:59:17:ca:f3:74:d0:e3:
e8:fe:c8:5b:b8:5d:0f:f9:6f:15:22:69:b6:4e:f6:09:d2:b5:
39:29:86:e6:92:29:28:fd:6a:15:81:b1:86:75:38:38:0c:c1:
fb:b2:47:f6:a2:3e:27:04:68:db:43:d3:38:b8:ce:9f:48:c9:
d6:5a:39:97:55:49:55:76:70:39:8e:7d:6d:48:36:c9:b7:81:
d4:6c:61:7d:97:f6:bc:15:98:86:72:c8:d6:00:62:b3:86:2a:
90:28:9c:ea:b1:d2:5a:f4:48:d7:e8:af:29:a7:b1:41:be:db:
32:24:99:bc:b3:46:b3:3e:cc:df:70:3d:11:ee:35:02:72:ea:
2d:b8:f3:fe:fd:3b:37:f0:48:36:76:03:66:89:eb:d4:20:96:
3a:77:54:27:3d:84:7c:aa:aa:55:e3:e0:ad:5e:07:9c:b0:8f:
c1:eb:44:a3:3a:66:2a:b9:53:4f:e3:9b:95:93:79:05:75:2e:
f6:b5:58:de:4a:0b:ac:f3:04:3c:19:b2:9e:25:35:88:db:93:
b5:23:95:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:10 2025 by rpki-client