Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/jz_nLNjclPhHfjX0vuLb_wLkJFk.roa
File: jz_nLNjclPhHfjX0vuLb_wLkJFk.roa (raw, json)
Hash identifier: ejCaTzxTuDUF4epGs5iKALLv+G7+zeIf8Gj3NXfSijY=
Subject key identifier: 8F:3F:E7:2C:D8:DC:94:F8:47:7E:35:F4:BE:E2:DB:FF:02:E4:24:59
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019A4D3CDEE52878C8DB985CAA21CF09328B
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/jz_nLNjclPhHfjX0vuLb_wLkJFk.roa
Signing time: Tue 04 Nov 2025 05:00:26 +0000
ROA not before: Tue 04 Nov 2025 05:00:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 9.142.0.0/16 maxlen: 16
9.142.64.0/20 maxlen: 20
9.142.128.0/19 maxlen: 19
9.142.160.0/19 maxlen: 19
9.142.224.0/20 maxlen: 20
138.226.32.0/20 maxlen: 20
138.226.80.0/21 maxlen: 21
138.226.120.0/21 maxlen: 21
138.226.128.0/18 maxlen: 18
138.226.200.0/21 maxlen: 21
158.120.49.0/24 maxlen: 24
158.120.51.0/24 maxlen: 24
158.120.53.0/24 maxlen: 24
158.120.55.0/24 maxlen: 24
158.120.57.0/24 maxlen: 24
158.120.59.0/24 maxlen: 24
158.120.61.0/24 maxlen: 24
158.120.63.0/24 maxlen: 24
192.46.184.0/21 maxlen: 21
192.46.184.0/22 maxlen: 22
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
192.53.64.0/22 maxlen: 22
192.53.68.0/22 maxlen: 22
192.53.136.0/22 maxlen: 22
192.53.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:de:e5:28:78:c8:db:98:5c:aa:21:cf:09:32:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Nov 4 05:00:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f3fe72cd8dc94f8477e35f4bee2dbff02e42459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:40:98:96:82:68:cb:36:c5:6d:ed:3f:0b:
ff:a0:53:1e:84:a1:1f:4c:3b:5c:34:c1:55:b9:2f:
5b:df:4e:67:6b:7e:dc:14:62:86:3e:e8:95:f6:24:
73:82:51:67:cd:6e:cd:02:56:c2:43:fe:68:2c:b3:
7e:bf:24:15:fa:9a:d3:49:46:3d:04:cb:9c:80:aa:
08:f3:0d:7b:75:90:2d:d8:95:4d:6e:ad:eb:0c:8e:
13:75:58:1c:ad:f4:ee:28:a4:ca:c6:8d:25:2d:22:
e7:30:72:9f:05:1f:a8:33:a0:53:9e:b0:a9:25:47:
dd:ff:10:66:83:18:51:a9:f1:5c:ef:71:9a:31:8a:
a5:3c:f4:5e:9a:94:cf:da:4a:65:17:85:0a:2d:f3:
b1:a2:0b:c2:3b:d0:93:fa:30:59:d6:77:0b:7e:aa:
97:37:5e:27:76:2a:27:1c:85:33:6f:c2:cd:25:e5:
ce:58:76:4f:7e:8e:63:b2:46:9c:88:d5:41:dc:a4:
72:9a:16:77:81:33:c9:01:de:31:ef:5a:bb:f4:21:
85:b4:5d:7b:8f:80:e3:29:eb:d5:ac:dd:f7:da:53:
57:af:48:ee:e4:47:a0:20:62:61:75:2f:43:58:50:
59:50:03:22:e2:2a:c0:0a:b1:e8:7d:76:4c:b2:b8:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3F:E7:2C:D8:DC:94:F8:47:7E:35:F4:BE:E2:DB:FF:02:E4:24:59
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/jz_nLNjclPhHfjX0vuLb_wLkJFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.0.0/16
138.226.32.0/20
138.226.80.0/21
138.226.120.0-138.226.191.255
138.226.200.0/21
158.120.49.0/24
158.120.51.0/24
158.120.53.0/24
158.120.55.0/24
158.120.57.0/24
158.120.59.0/24
158.120.61.0/24
158.120.63.0/24
192.46.184.0/21
192.46.200.0/22
192.53.64.0/21
192.53.136.0/21
Signature Algorithm: sha256WithRSAEncryption
49:7b:25:72:2b:33:c5:ff:d1:a0:80:e9:b6:37:93:d3:66:95:
88:4e:97:e7:da:b3:13:93:20:7b:19:7b:ad:e7:40:2d:57:47:
02:bf:c0:5a:eb:d9:3a:68:36:f1:e2:cb:cd:18:bd:00:32:ef:
de:e2:6e:15:58:27:a4:eb:f0:c9:ca:9c:bf:b4:cc:80:19:a6:
68:64:ba:5c:40:de:55:f7:c4:8d:54:40:4a:e4:f0:16:c5:68:
19:fe:27:ed:ec:5c:c6:1d:3b:94:09:8a:b3:a3:2c:bb:0f:8b:
a7:48:3c:06:c1:aa:42:de:fe:73:26:74:1b:fa:3e:40:6b:11:
dc:5d:ce:30:04:d8:35:d2:10:ce:57:da:6b:86:bc:35:12:b0:
35:32:ea:64:ef:60:6f:77:40:13:ee:6c:78:a9:3b:af:a4:e3:
1d:92:6b:72:01:c8:12:f9:d9:10:21:6f:62:40:3c:26:1c:71:
fc:06:02:d1:c8:41:fa:e1:fd:e5:8f:2d:7c:aa:6c:3d:e7:4f:
b7:8b:6d:27:fd:e5:ba:98:b4:77:63:24:c9:e2:27:0a:6f:3e:
24:7f:4d:d4:7a:c1:fa:23:14:a8:d8:68:34:55:3f:a5:f8:60:
b6:d1:d1:81:b1:f3:d5:e0:b2:db:fe:26:ec:b1:7d:81:cc:ae:
15:a5:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:34:20 2025 by rpki-client