Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/JoDgj6_aYuH2h_z7acYlnllXJD8.roa
File: JoDgj6_aYuH2h_z7acYlnllXJD8.roa (raw, json)
Hash identifier: s9ZiFfWtjJJRskfMKESh5wPV+ucKeG1v2mAsgKvSMUs=
Subject key identifier: 26:80:E0:8F:AF:DA:62:E1:F6:87:FC:FB:69:C6:25:9E:59:57:24:3F
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 01986FF47753DB2D1B1AD9084E549BB7B339
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/JoDgj6_aYuH2h_z7acYlnllXJD8.roa
Signing time: Sun 03 Aug 2025 12:42:29 +0000
ROA not before: Sun 03 Aug 2025 12:42:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 87.248.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6f:f4:77:53:db:2d:1b:1a:d9:08:4e:54:9b:b7:b3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Aug 3 12:42:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2680e08fafda62e1f687fcfb69c6259e5957243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:54:78:fe:07:3d:af:fe:ef:2b:dd:a5:fb:
48:4e:48:62:06:3e:81:dc:fe:22:b2:e7:f8:90:b5:
44:38:67:1f:8f:97:4f:13:ab:24:d6:72:90:8c:01:
dd:a9:71:d6:c3:a3:b3:aa:5a:fb:bb:98:91:98:2b:
f3:db:a8:d2:4a:a5:f8:b0:fa:fb:87:de:d8:e6:04:
46:e1:1f:44:6d:14:28:49:43:04:89:5b:ec:cd:a8:
f7:5e:a2:46:41:a0:ff:fc:33:41:fe:33:16:56:39:
90:58:6c:70:3f:39:b1:ee:ac:09:3f:3a:b0:18:01:
24:f2:f5:a6:4e:c7:2c:80:57:38:85:71:03:e5:da:
40:3b:69:d3:b1:a3:98:53:6d:4f:dd:8b:40:2c:0a:
c1:bd:b1:d8:df:94:80:00:eb:fb:53:ad:97:12:67:
d1:70:c6:28:29:9b:1c:3c:c5:0b:30:dc:5b:b7:af:
c8:af:7e:9f:62:3e:0a:45:d5:64:16:7b:e6:73:9b:
5a:d5:e3:29:17:57:a8:51:9b:4a:fc:22:f0:53:ae:
14:f0:3f:dd:50:c9:f7:9f:26:a2:96:cd:18:a0:45:
eb:b3:39:42:09:ce:44:ae:d2:3b:0f:96:2e:81:9b:
a0:22:1a:79:61:63:fc:42:e1:23:f3:b5:62:81:f3:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:80:E0:8F:AF:DA:62:E1:F6:87:FC:FB:69:C6:25:9E:59:57:24:3F
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/JoDgj6_aYuH2h_z7acYlnllXJD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.132.0/24
Signature Algorithm: sha256WithRSAEncryption
08:34:f6:90:9e:89:bc:e0:d7:01:4d:2f:87:75:6f:b5:48:df:
91:a8:11:7a:c0:ab:d0:f6:7e:0f:6e:0e:f3:98:6b:6a:db:b5:
84:7e:6c:a1:d3:a5:9c:91:c7:78:2e:ed:3b:91:66:11:93:a1:
47:f2:50:bb:69:31:8e:f9:dd:80:5f:95:30:ae:51:de:85:8c:
cd:62:db:c6:8f:e6:b0:f3:5c:fe:5d:97:70:e1:b6:9e:cc:53:
53:e6:5e:b2:89:cc:52:df:a9:82:41:f0:b2:40:cb:e0:12:3e:
12:b4:b4:26:a0:84:f2:51:0a:5c:a7:94:e7:4b:2b:cf:9d:e3:
8d:07:dd:db:6b:d8:49:95:7d:f2:93:65:8e:fd:3c:b0:01:20:
16:ea:55:4b:f8:c9:d8:2d:aa:4f:8e:24:7b:fc:29:2d:51:eb:
ce:9b:4f:a6:13:44:cc:84:65:9e:0f:e8:c6:81:f1:fa:0a:db:
01:af:82:c9:ac:5d:0f:58:60:8c:1d:ed:17:e7:74:11:61:09:
26:f9:0b:cf:c5:b4:4b:e6:0a:5a:86:6a:a1:76:a3:77:08:06:
38:25:00:33:21:22:b4:3d:7a:90:ce:a8:6a:db:b0:c8:1d:98:
e7:b8:0f:a7:4a:27:99:c4:bd:58:db:a3:02:44:94:10:f0:b7:
b9:47:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:18 2025 by rpki-client