Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/0JT7tPGuP5h5ZUvLvPxi-tJv5wk.roa
File: 0JT7tPGuP5h5ZUvLvPxi-tJv5wk.roa (raw, json)
Hash identifier: BbMNBUCTeRLtRw1Vi3eOuHY/lINHO4oBENygtqlAkSk=
Subject key identifier: D0:94:FB:B4:F1:AE:3F:98:79:65:4B:CB:BC:FC:62:FA:D2:6F:E7:09
Certificate issuer: /CN=da21d02464b38aff3a31c90878d62723b9c742a6
Certificate serial: 019A05A753AA8F943B8818409002F21A5E0C
Authority key identifier: DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/0JT7tPGuP5h5ZUvLvPxi-tJv5wk.roa
Signing time: Tue 21 Oct 2025 07:24:03 +0000
ROA not before: Tue 21 Oct 2025 07:24:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 81.27.78.0/24 maxlen: 24
81.27.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:a7:53:aa:8f:94:3b:88:18:40:90:02:f2:1a:5e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da21d02464b38aff3a31c90878d62723b9c742a6
Validity
Not Before: Oct 21 07:24:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d094fbb4f1ae3f9879654bcbbcfc62fad26fe709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:1f:9d:b6:60:92:62:33:37:d0:ca:b0:6c:
6e:63:30:93:12:22:0d:b6:b7:8c:0a:15:69:f2:7b:
dd:03:27:10:0f:db:3b:32:be:00:45:00:35:94:74:
9c:f8:df:ba:a0:11:14:da:13:d7:cc:1c:2f:23:1e:
81:3e:8b:03:a3:87:58:83:5e:6e:15:58:03:e4:46:
56:2f:5f:30:11:7e:80:37:03:2e:8d:df:c8:9c:5b:
32:17:2d:d6:46:ea:65:e0:3d:3e:6e:0e:67:3f:fa:
5f:a6:87:1e:b0:07:97:1f:a7:b7:7c:e6:50:f4:58:
32:70:e2:21:fd:8b:21:fc:4f:cb:d6:da:25:df:dc:
53:ed:37:4b:d6:b4:6e:c1:52:c3:32:25:01:a1:46:
90:98:f0:22:eb:be:82:58:5a:93:4c:7f:55:e3:e1:
92:b1:35:94:02:a9:a0:f4:f3:fa:10:7b:de:0c:3f:
64:73:36:7d:88:8d:da:05:ae:93:68:d7:0b:01:45:
8a:9b:4c:e8:df:a0:26:7b:84:ab:20:68:a0:23:bf:
c6:ae:2f:ae:64:a5:10:66:33:ad:96:f5:49:ad:2f:
a7:c6:3f:ee:f6:44:b3:84:e7:af:4b:6d:f3:18:7c:
1e:8d:ee:1f:11:33:24:16:9f:0e:8a:48:9c:6c:1b:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:94:FB:B4:F1:AE:3F:98:79:65:4B:CB:BC:FC:62:FA:D2:6F:E7:09
X509v3 Authority Key Identifier:
keyid:DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/0JT7tPGuP5h5ZUvLvPxi-tJv5wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.78.0/23
Signature Algorithm: sha256WithRSAEncryption
69:78:b6:ce:4b:1b:ab:b1:bd:5b:a4:7d:68:b8:75:19:b3:48:
27:c9:7a:a9:c1:67:3a:9d:1c:b9:6b:f9:68:e2:46:c7:a9:65:
54:48:a8:0b:76:82:25:0d:a0:f4:92:b6:06:14:51:95:5c:f9:
ae:4c:a8:3b:af:c2:3e:19:fe:ac:b2:39:c3:f5:0a:25:3c:c4:
34:14:ba:4c:88:57:eb:92:22:a7:d5:4b:bc:33:92:ef:c1:39:
96:1b:2b:5e:1f:5c:09:39:54:23:79:d5:00:20:4c:2c:94:ae:
b6:bd:8f:78:f9:08:26:71:bd:17:82:36:2e:b3:18:13:30:95:
8e:86:05:65:32:cb:a2:d7:56:cf:95:58:a4:48:17:f2:da:59:
06:75:b6:4a:f7:58:43:22:e7:6c:cd:67:5e:8c:32:cf:87:b9:
56:44:ea:6d:90:f6:e1:8d:02:0d:fa:d5:44:c0:08:18:0a:52:
c2:23:96:1b:4e:b3:e3:03:79:d8:05:21:1e:82:28:72:34:bc:
04:62:6e:cd:07:67:77:bd:fa:e8:58:d9:9c:c9:1b:91:65:e0:
c6:c6:ad:f7:ed:8f:6f:3d:9d:56:99:b1:3d:17:ab:f3:89:80:
10:09:d3:68:55:68:80:dd:b5:d1:e9:c8:d9:ab:5a:6f:07:d3:
8c:64:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:25 2025 by rpki-client