Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/JoUfo8H1U_tX7-0dKDqJaymZsXY.roa
File: JoUfo8H1U_tX7-0dKDqJaymZsXY.roa (raw, json)
Hash identifier: A9+Iuh6JRa8bCENv4yMaHkzJCpWN/TEw/VICLDubzQE=
Subject key identifier: 26:85:1F:A3:C1:F5:53:FB:57:EF:ED:1D:28:3A:89:6B:29:99:B1:76
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019A24A807FB27898C744C6D905B4E1BC3FA
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/JoUfo8H1U_tX7-0dKDqJaymZsXY.roa
Signing time: Mon 27 Oct 2025 07:53:03 +0000
ROA not before: Mon 27 Oct 2025 07:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.122.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:a8:07:fb:27:89:8c:74:4c:6d:90:5b:4e:1b:c3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Oct 27 07:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26851fa3c1f553fb57efed1d283a896b2999b176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:07:43:e7:e0:55:ce:c0:c4:a9:f4:93:07:
75:85:05:fe:db:fb:c2:1b:eb:15:1b:21:56:3a:11:
c4:c5:0d:2e:35:cb:97:5e:f2:42:3d:ec:ff:73:fb:
ae:6e:fc:73:58:e9:6c:53:c9:a7:d7:67:3b:5a:14:
4b:df:1a:e9:d5:7e:23:a3:83:2a:ed:c8:ce:ae:c7:
46:d4:69:46:2a:55:f7:a2:1b:b0:19:a8:7b:15:2c:
30:cb:65:ae:ce:c7:c6:25:c5:33:e4:47:f3:83:98:
9a:24:5b:46:01:ab:e1:e4:4a:41:9c:05:73:6b:e4:
68:09:de:b1:54:87:48:a4:2e:64:c7:b9:20:68:73:
28:52:b1:f2:74:a9:c9:1a:38:75:12:c2:79:e1:a5:
af:c5:1f:87:19:5b:68:7a:61:20:c3:d7:5f:37:a2:
e3:92:3f:a5:99:39:16:85:f2:5a:b2:98:85:00:19:
42:43:cb:f8:cd:51:70:87:ce:d2:57:02:88:9e:7e:
4b:85:c3:6d:67:d1:ab:bf:23:04:49:81:ae:be:8b:
81:0c:b3:61:e2:91:88:3a:8d:35:27:a7:7f:be:21:
22:14:63:b8:ea:a2:24:e1:fc:ac:5d:38:fe:e2:8a:
c5:02:78:e0:4e:f3:0d:ff:f1:22:c2:59:73:7a:9d:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:1F:A3:C1:F5:53:FB:57:EF:ED:1D:28:3A:89:6B:29:99:B1:76
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/JoUfo8H1U_tX7-0dKDqJaymZsXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.61.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d2:90:8e:4f:dd:c5:0b:db:cd:64:41:1b:ab:f3:e4:97:33:
ea:1c:49:e9:e7:4e:bc:be:af:89:1b:ed:51:ee:d3:93:1d:ce:
b4:d2:cf:70:9c:97:02:6b:3e:9e:f4:06:c4:87:f4:6f:aa:d1:
ad:f6:20:00:bf:74:49:7a:57:6a:81:ec:d0:40:6d:5b:14:41:
35:90:2a:22:f3:c6:70:41:30:78:65:44:90:9e:0a:68:06:44:
3e:20:39:64:3a:a9:a8:91:40:5f:27:30:df:63:a0:ba:80:b3:
b1:85:bf:e3:eb:09:9e:6f:b0:12:1f:71:57:a1:2a:e3:d0:1f:
c4:b4:ad:1b:55:a5:1a:75:d5:4d:6c:16:5e:18:df:10:22:67:
20:dd:41:7c:71:33:de:11:0b:da:3a:00:ea:23:d3:a4:51:ba:
58:84:c8:e0:8b:c7:cc:a7:59:ff:38:cb:37:b9:be:0c:ef:9f:
c8:76:c4:a8:47:05:a6:3f:44:4f:f2:03:dc:70:56:b0:08:98:
c2:a7:cc:17:ce:41:08:05:53:fb:24:b3:48:bb:bf:55:dd:b9:
cd:ba:1f:b4:fd:c1:f9:6a:34:07:f8:30:00:fc:ef:2a:85:83:
80:31:67:ed:50:ef:fd:52:91:a6:cf:38:f9:e1:31:ea:c5:8a:
76:4b:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:39:49 2025 by rpki-client