Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/Jr5RAc3S9ZL7N_fsuc25OAldX6E.roa
File: Jr5RAc3S9ZL7N_fsuc25OAldX6E.roa (raw, json)
Hash identifier: oMd9BjbTxWkPAoInz3Fa6PiV+ng+9Qy9ir6qmZmHb/c=
Subject key identifier: 26:BE:51:01:CD:D2:F5:92:FB:37:F7:EC:B9:CD:B9:38:09:5D:5F:A1
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 019875B00E66AF23AF376DABC9F3E979AFD2
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/Jr5RAc3S9ZL7N_fsuc25OAldX6E.roa
Signing time: Mon 04 Aug 2025 15:25:28 +0000
ROA not before: Mon 04 Aug 2025 15:25:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204601
IP address blocks: 45.88.78.0/24 maxlen: 24
81.91.176.0/24 maxlen: 24
81.91.177.0/24 maxlen: 24
81.91.178.0/24 maxlen: 24
95.215.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:b0:0e:66:af:23:af:37:6d:ab:c9:f3:e9:79:af:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Aug 4 15:25:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26be5101cdd2f592fb37f7ecb9cdb938095d5fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:e5:a0:a9:fb:20:bb:d0:7b:16:80:1a:89:
04:0a:f8:55:3f:51:8f:09:16:ad:dc:b2:ce:8d:9d:
06:e2:8b:47:c0:a6:8e:b0:b7:cb:86:5a:0b:cf:1b:
e3:a1:20:59:d5:8a:02:84:53:8a:9b:1d:b3:24:5b:
37:20:f9:c4:11:11:1d:94:96:75:bc:9e:e1:ee:b7:
1e:79:b4:41:5b:6f:a7:4a:95:3c:b7:e7:a4:cb:b9:
61:e3:15:62:b0:0d:d8:47:70:13:dc:20:49:7c:45:
7f:76:05:96:79:bb:c4:df:e5:2e:e0:ea:0f:44:6e:
d6:a5:a3:6b:28:87:95:58:be:19:2a:00:33:e4:28:
df:ce:ce:34:77:17:95:36:53:e2:de:fc:21:29:06:
e8:64:75:86:dd:18:d6:e7:fd:22:d8:f6:8b:31:fa:
e0:e2:c5:69:4f:44:db:bb:e2:18:d2:e4:41:b9:cb:
3c:97:92:fd:8d:03:8b:05:87:77:84:58:25:c6:df:
80:cb:28:3d:76:ee:e6:d3:76:fd:e7:c9:ce:44:5d:
27:5c:d2:61:38:f7:7b:07:ca:c1:6b:c2:76:09:29:
3f:e7:f1:6d:27:b4:7f:6d:6f:5c:74:b1:19:ac:8d:
68:61:04:d1:50:8b:60:c8:37:00:b3:c2:07:ba:ef:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BE:51:01:CD:D2:F5:92:FB:37:F7:EC:B9:CD:B9:38:09:5D:5F:A1
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/Jr5RAc3S9ZL7N_fsuc25OAldX6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.78.0/24
81.91.176.0-81.91.178.255
95.215.205.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1d:db:0c:73:7d:7c:c2:35:e1:4f:8c:6e:7c:e4:6a:8f:7a:
e6:03:9e:c5:de:2e:75:9c:af:50:9e:a1:bd:e6:44:0c:ec:54:
e4:e2:ce:3f:30:f1:b3:bb:f9:1f:e6:9a:97:95:59:31:46:63:
63:77:ea:30:a3:51:c5:a8:1a:10:62:de:1d:8d:da:8d:ff:35:
c6:e5:6d:9f:54:b7:e1:eb:eb:79:87:5a:93:24:08:bc:49:38:
80:09:5e:99:f5:b4:3d:f8:a0:cf:61:d4:78:af:ab:c2:63:da:
b3:86:13:58:e7:90:2f:66:62:1a:9b:a9:b3:b7:ef:e8:e1:f6:
f9:55:b1:ce:4d:40:55:cc:bd:f1:63:6e:f5:31:fe:26:2e:83:
46:4a:76:2f:3b:05:8c:e4:43:e3:b5:72:07:20:f6:76:75:dd:
65:59:46:31:96:f7:59:6b:e4:25:fd:3d:96:89:d1:ca:a2:9c:
43:24:e3:94:81:55:7a:a2:62:25:2d:ad:45:1b:e4:a6:14:c4:
15:09:3f:39:3c:60:dd:6e:fe:2a:51:4d:ae:5e:f3:bf:8b:84:
ce:c4:43:06:dc:93:47:59:54:bd:74:0a:e1:a2:ee:91:20:18:
f6:0e:74:8f:8c:7b:99:a4:2c:e9:d1:93:fe:8e:b4:0c:25:a7:
b3:d3:94:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:13:09 2025 by rpki-client