Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/JW4kRugqt635A2p0yVFbouvlFrk.roa
File: JW4kRugqt635A2p0yVFbouvlFrk.roa (raw, json)
Hash identifier: F7Tb2tMCqpte9z2Znsgt88ISQ5Y45ILTiJtG4XvB7zc=
Subject key identifier: 25:6E:24:46:E8:2A:B7:AD:F9:03:6A:74:C9:51:5B:A2:EB:E5:16:B9
Certificate issuer: /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Certificate serial: 019A55A143A90D290D6AF9CC4E4493685388
Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/JW4kRugqt635A2p0yVFbouvlFrk.roa
Signing time: Wed 05 Nov 2025 20:07:03 +0000
ROA not before: Wed 05 Nov 2025 20:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211600
IP address blocks: 46.243.72.0/24 maxlen: 24
46.243.74.0/23 maxlen: 23
91.195.150.0/24 maxlen: 24
91.195.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:a1:43:a9:0d:29:0d:6a:f9:cc:4e:44:93:68:53:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Validity
Not Before: Nov 5 20:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=256e2446e82ab7adf9036a74c9515ba2ebe516b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:19:a1:54:fc:3d:b5:1d:11:5a:74:bd:22:
08:48:86:71:2e:d6:0d:f8:34:d6:97:78:85:24:6c:
51:f1:3a:1e:32:a2:78:f2:06:1f:8a:77:2f:52:91:
09:de:4d:c0:25:29:ae:1a:fa:31:74:db:90:24:36:
77:0b:e6:14:fc:c6:13:66:2b:1a:fa:55:8c:43:1c:
6c:ef:8c:c4:ec:ec:49:5d:2b:06:1b:0c:95:03:53:
a2:ff:24:4c:50:73:bd:58:fa:18:90:1c:d6:02:5d:
bd:37:40:18:6f:f1:c8:8c:5b:04:f3:6b:eb:80:b6:
cc:53:09:d6:d2:d2:70:14:36:e8:80:e3:4b:e0:94:
2d:b6:3b:7d:5a:81:a7:fb:20:e2:37:46:b8:ca:98:
79:31:d2:d4:9f:ab:a4:b0:ad:12:9a:e0:29:39:74:
5b:e7:c3:ec:c9:3b:a9:21:20:4d:6f:b1:2c:1e:e5:
40:e9:8c:34:ca:84:e5:ba:44:b5:22:78:61:15:8a:
f8:b2:f8:ff:cf:0c:ea:65:ea:f4:36:52:03:ee:09:
c5:44:48:9b:fc:ff:75:3d:09:4e:0a:86:58:b6:27:
39:4a:39:da:82:8a:ff:c4:e4:c2:92:e9:91:70:4d:
f2:3a:12:9f:74:c5:a0:16:96:3d:07:03:8f:4e:70:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6E:24:46:E8:2A:B7:AD:F9:03:6A:74:C9:51:5B:A2:EB:E5:16:B9
X509v3 Authority Key Identifier:
keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/JW4kRugqt635A2p0yVFbouvlFrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.72.0/24
46.243.74.0/23
91.195.150.0/23
Signature Algorithm: sha256WithRSAEncryption
59:79:2f:f6:33:58:c7:41:5f:51:22:ce:4a:fa:5a:40:0c:e3:
92:01:9c:e1:a8:8d:8f:69:23:0a:e5:04:28:e7:3e:67:ca:32:
c5:aa:f2:cc:06:5b:4b:88:d1:b2:8c:71:20:92:a4:08:61:f9:
70:b0:5e:e1:f6:69:44:28:97:60:ab:d7:99:28:f4:96:db:eb:
53:73:b0:32:6b:ca:17:e9:19:b5:2f:39:8a:2a:de:aa:6f:71:
84:a5:3d:6c:93:ab:24:af:6a:65:dd:2a:31:72:cd:a4:4f:e4:
3f:84:05:b9:7d:16:3a:c1:df:06:12:4a:e5:ce:3e:21:ac:25:
f7:45:11:b9:5f:ff:5c:1b:77:ba:77:1d:a2:61:1f:f8:10:06:
01:ed:8b:15:dd:0d:67:5e:69:77:ee:90:a5:09:ca:96:37:17:
d0:3b:55:18:ed:cb:9e:04:2c:54:3e:3e:cc:4c:f2:5d:a4:ca:
a2:2c:e6:6f:a0:db:dc:b5:d2:23:cc:aa:68:84:ad:30:f6:10:
cb:ae:ee:e8:83:7a:9d:8f:0c:c4:f5:19:f1:5f:81:4b:df:f6:
c6:4c:40:97:90:8c:3f:a2:fa:6a:a8:f9:48:53:c3:06:fb:1d:
1a:c0:26:a5:17:e9:f9:40:47:f2:b6:93:8c:0b:de:dd:31:b5:
03:c0:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:28:23 2025 by rpki-client