Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/JDQj9MbTTWM28K2fRdnc3kN_2V4.roa
File: JDQj9MbTTWM28K2fRdnc3kN_2V4.roa (raw, json)
Hash identifier: kD8K4tnW+sM7R4yZ2QD5nngHRsUkDppGXIncS1P3Rag=
Subject key identifier: 24:34:23:F4:C6:D3:4D:63:36:F0:AD:9F:45:D9:DC:DE:43:7F:D9:5E
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 019A1692B069753215969FA61A7FD90B2ACD
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/JDQj9MbTTWM28K2fRdnc3kN_2V4.roa
Signing time: Fri 24 Oct 2025 14:15:03 +0000
ROA not before: Fri 24 Oct 2025 14:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207743
IP address blocks: 188.74.140.0/22 maxlen: 22
188.74.240.0/22 maxlen: 24
188.119.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:92:b0:69:75:32:15:96:9f:a6:1a:7f:d9:0b:2a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Oct 24 14:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=243423f4c6d34d6336f0ad9f45d9dcde437fd95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:8b:a6:1d:f5:5b:da:0f:9a:d7:9e:19:da:
84:35:43:5a:90:59:b6:51:54:2f:68:37:80:c7:1d:
af:7e:2b:4e:e4:6d:de:f5:c3:5c:3f:1b:ac:52:e6:
d7:2b:b6:93:66:34:95:74:bc:2f:b3:75:2f:97:5a:
87:c4:f7:70:c2:ef:a4:88:ab:70:9a:64:e4:62:2f:
bc:38:25:df:77:c9:3d:a0:85:f0:b9:59:14:89:36:
da:5a:05:6a:9b:b0:05:24:3c:b0:b8:70:fd:30:6a:
77:23:37:4d:2f:47:cf:fc:41:80:ad:62:99:e4:0a:
72:74:7e:84:15:4e:e9:7c:15:c6:b3:ec:4a:a0:76:
46:c4:2c:69:f6:fd:1c:7e:ce:84:7a:36:d9:a2:65:
c2:e4:af:3f:86:2c:d0:b3:39:c9:15:83:79:6b:1c:
53:88:93:a6:a4:b6:a5:40:f9:02:35:bf:c6:46:35:
9d:c7:aa:a5:8e:d1:c7:9f:27:c5:55:65:b2:ec:e9:
e3:f9:28:94:a3:99:31:90:8d:d1:c5:f5:5c:e8:41:
0a:2e:6f:49:53:70:87:fe:28:19:f7:31:1e:49:3e:
cb:92:48:9c:f5:25:73:cb:6d:72:8e:a4:48:ed:62:
a4:52:7d:58:c3:91:8d:63:eb:a0:a9:59:9c:0c:38:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:23:F4:C6:D3:4D:63:36:F0:AD:9F:45:D9:DC:DE:43:7F:D9:5E
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/JDQj9MbTTWM28K2fRdnc3kN_2V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.140.0/22
188.74.240.0/22
188.119.156.0/23
Signature Algorithm: sha256WithRSAEncryption
74:62:0a:c4:73:ee:3a:66:cb:38:c5:7a:0e:23:31:84:d4:28:
24:ea:30:78:c3:51:71:b0:3a:8d:14:3d:21:68:57:c2:9e:ab:
49:61:b9:9c:b3:11:07:9b:76:58:65:7c:0a:4c:e4:b6:21:a1:
2a:68:82:29:e3:95:11:a2:83:f9:40:55:75:45:4d:d6:82:82:
d6:ef:14:18:db:7d:01:34:0d:4f:9a:20:d4:bd:38:3b:2a:97:
00:40:91:32:f9:bf:01:60:71:f9:9e:3a:f0:15:96:ab:35:fd:
b6:01:b5:b5:51:79:06:a9:99:e2:16:5e:09:8c:3b:ed:84:55:
29:df:3e:77:a8:70:e5:41:5b:a9:38:0c:39:ff:39:00:dc:25:
35:00:c2:11:fe:95:1c:6c:83:d9:a9:82:86:86:ff:14:b9:18:
22:4d:32:66:10:03:9f:e3:fe:84:0b:33:2c:80:4b:7a:24:78:
d9:9e:05:84:ec:7d:dd:2c:d9:45:8f:ae:e7:67:b0:a0:cf:ce:
0d:a7:f5:b3:97:e0:aa:79:b2:1c:02:4e:37:f3:cd:5d:da:04:
81:1f:84:14:6c:3b:ad:29:38:ff:7b:e4:ab:ff:f9:43:95:07:
84:2b:de:15:83:df:64:16:b5:da:a0:9e:99:eb:c0:d9:bb:56:
e6:f7:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:18:40 2025 by rpki-client