
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TjIeNrcmRKVLIOGDgcjcXImdPiU.roa
File: TjIeNrcmRKVLIOGDgcjcXImdPiU.roa (raw, json)
Hash identifier: s5fTBtNwl1HnrbKa/leELUKQRb08rHVq9WcbWzHff2g=
Subject key identifier: 4E:32:1E:36:B7:26:44:A5:4B:20:E1:83:81:C8:DC:5C:89:9D:3E:25
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019861D24F42D663D1F489783971FD3B12C2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TjIeNrcmRKVLIOGDgcjcXImdPiU.roa
Signing time: Thu 31 Jul 2025 18:50:29 +0000
ROA not before: Thu 31 Jul 2025 18:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 64.188.108.0/22 maxlen: 24
64.188.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:d2:4f:42:d6:63:d1:f4:89:78:39:71:fd:3b:12:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 31 18:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e321e36b72644a54b20e18381c8dc5c899d3e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:a5:b1:ee:e3:16:df:d2:25:57:40:a6:dd:
ed:ae:b9:65:f3:93:7c:d3:1b:b3:e2:17:00:5e:ab:
75:ed:95:dd:50:b3:f6:2b:7a:9f:23:c5:ef:44:78:
a5:f1:24:a8:f4:17:ba:05:d8:e2:a5:ec:05:7d:b8:
f0:6b:c7:da:fe:16:c5:05:70:f7:73:91:8f:5c:78:
02:8d:74:79:c5:70:b7:58:2f:07:7c:da:26:66:8e:
12:1e:45:5a:64:63:e4:fd:38:09:80:8a:28:a0:7d:
e7:94:2d:8b:a2:6e:e7:4d:df:51:d6:7f:ce:1a:61:
a1:9f:9e:42:02:fa:57:ef:bc:a7:e5:da:c0:52:ce:
66:28:66:b9:28:36:88:2c:c9:6d:b5:81:91:c6:c4:
9a:1e:fa:3e:2d:27:9e:6e:0c:03:c7:d4:14:b5:4a:
39:9b:70:0b:5f:2a:17:d9:e2:70:6b:55:9e:4b:cb:
ef:97:fe:49:12:c5:bb:8a:c7:f0:ed:33:5c:6f:30:
71:f9:5d:bf:9e:bf:89:d4:2a:13:0b:83:c7:44:ec:
c4:62:21:62:c2:fd:e7:3e:f5:c7:49:67:a1:07:e8:
b5:ce:5f:db:58:15:e5:f0:3a:08:fc:e1:48:18:6a:
a2:a6:88:ac:ba:20:62:8e:f9:b7:46:e7:27:0b:2b:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:32:1E:36:B7:26:44:A5:4B:20:E1:83:81:C8:DC:5C:89:9D:3E:25
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TjIeNrcmRKVLIOGDgcjcXImdPiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.108.0/22
64.188.116.0/22
Signature Algorithm: sha256WithRSAEncryption
96:8d:03:71:24:02:4b:64:35:81:3a:c9:56:db:b2:a6:62:cd:
a3:97:c9:77:0a:9c:3d:57:cc:02:e6:01:d2:18:b9:0b:66:df:
a0:90:f9:ac:72:3b:97:d4:65:c2:a5:95:c1:3f:73:d2:c7:79:
a9:6b:65:61:64:52:87:2e:e7:ce:28:69:b6:8a:6c:fc:23:f6:
c8:10:72:00:c7:e6:d8:51:95:55:a2:56:5a:6b:59:06:4a:0e:
13:91:f8:e6:34:c5:ea:1e:f9:0f:48:31:66:68:5c:88:b8:15:
8a:47:9b:20:78:1f:38:fb:c8:b8:70:97:8b:15:9b:36:a2:73:
40:49:98:42:35:20:f7:9a:f1:48:8c:e1:de:9e:4b:4c:df:31:
21:25:d6:7c:0c:e3:d7:9b:46:50:65:1b:a6:ce:0d:86:83:d5:
97:6b:80:cf:f8:41:d3:74:bc:d7:58:6e:c1:7e:25:1b:cb:3e:
14:97:48:4f:5c:1c:ce:e1:8d:6c:83:35:d4:18:e2:c3:60:98:
8c:6b:47:08:07:23:6f:63:58:a7:06:69:3c:5c:7c:99:44:52:
ec:28:8b:05:52:91:02:94:d6:5b:c9:b2:cb:c5:3d:31:9f:89:
61:5e:2b:a3:23:64:46:3d:4c:71:4a:ec:81:3b:cc:4a:92:ec:
b7:f4:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:25 2025 by rpki-client