Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/JbdRe6gspuyUr7bBz3mmmXkbJJY.roa
File: JbdRe6gspuyUr7bBz3mmmXkbJJY.roa (raw, json)
Hash identifier: I/jfwNL3kM1nQFIjLIY24u2gVbQr34Ht1pkoJISzpKU=
Subject key identifier: 25:B7:51:7B:A8:2C:A6:EC:94:AF:B6:C1:CF:79:A6:99:79:1B:24:96
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 019A3EFA502E54A9565CBEEC320D4D411B5F
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/JbdRe6gspuyUr7bBz3mmmXkbJJY.roa
Signing time: Sat 01 Nov 2025 10:33:03 +0000
ROA not before: Sat 01 Nov 2025 10:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41275
IP address blocks: 5.35.112.0/22 maxlen: 22
5.35.112.0/23 maxlen: 23
5.35.113.0/24 maxlen: 24
5.35.114.0/23 maxlen: 23
62.217.184.0/21 maxlen: 21
84.22.132.0/22 maxlen: 22
85.198.104.0/23 maxlen: 23
89.169.48.0/22 maxlen: 22
89.169.48.0/23 maxlen: 23
89.169.50.0/23 maxlen: 23
89.207.216.0/21 maxlen: 21
89.207.216.0/22 maxlen: 22
89.207.216.0/24 maxlen: 24
89.207.217.0/24 maxlen: 24
89.207.220.0/22 maxlen: 22
89.207.221.0/24 maxlen: 24
93.157.244.0/22 maxlen: 22
93.157.247.0/24 maxlen: 24
95.130.128.0/22 maxlen: 22
95.131.144.0/21 maxlen: 21
95.131.144.0/22 maxlen: 22
95.131.144.0/24 maxlen: 24
95.131.148.0/22 maxlen: 22
185.43.198.0/23 maxlen: 23
185.136.76.0/22 maxlen: 22
185.136.76.0/23 maxlen: 23
185.136.78.0/23 maxlen: 23
185.155.17.0/24 maxlen: 24
185.155.18.0/23 maxlen: 23
217.150.200.0/23 maxlen: 23
217.150.200.0/24 maxlen: 24
217.150.201.0/24 maxlen: 24
2a02:5fe0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:fa:50:2e:54:a9:56:5c:be:ec:32:0d:4d:41:1b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Nov 1 10:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25b7517ba82ca6ec94afb6c1cf79a699791b2496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:e4:1e:ac:2e:2a:58:fa:2e:9b:cb:10:42:
e2:94:14:2c:dc:40:f5:8b:35:88:37:92:e7:0e:1b:
a3:e1:d6:47:dc:a0:11:19:7e:24:a3:e5:36:75:2f:
db:bc:2a:97:f3:62:f2:c2:cb:f8:31:aa:0c:c7:4b:
92:53:a4:b5:87:fa:73:29:5e:05:ed:da:e9:12:fc:
15:30:14:aa:53:47:ad:b1:96:52:e3:b4:2b:ca:50:
bb:f1:73:dc:08:51:c6:cd:44:7f:e6:41:aa:58:f6:
02:0c:82:2c:f1:9c:2f:bc:92:61:ed:85:7a:e6:75:
56:ee:cc:57:c7:3c:aa:ca:13:f6:42:df:ba:b3:0f:
6c:e0:d6:5c:f4:04:c0:49:5b:e3:f4:f8:ed:4d:16:
46:69:7f:f2:98:70:8d:ce:9d:a6:ea:13:f9:40:2a:
95:4d:41:33:d0:27:3f:48:b3:08:bc:30:8f:8b:84:
23:35:29:4d:07:a2:0f:99:b4:d6:53:77:11:cb:6f:
7b:b6:f2:e4:cd:34:91:bd:5c:f6:d1:22:3b:bc:b6:
f3:20:79:e5:ee:5c:62:76:a7:c8:7d:bf:98:96:8a:
4a:f1:34:99:83:29:ec:2e:15:88:db:d1:68:47:88:
fc:62:ae:00:02:72:93:79:4e:2c:eb:04:55:b7:c0:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:51:7B:A8:2C:A6:EC:94:AF:B6:C1:CF:79:A6:99:79:1B:24:96
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/JbdRe6gspuyUr7bBz3mmmXkbJJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.112.0/22
62.217.184.0/21
84.22.132.0/22
85.198.104.0/23
89.169.48.0/22
89.207.216.0/21
93.157.244.0/22
95.130.128.0/22
95.131.144.0/21
185.43.198.0/23
185.136.76.0/22
185.155.17.0-185.155.19.255
217.150.200.0/23
IPv6:
2a02:5fe0::/29
Signature Algorithm: sha256WithRSAEncryption
74:ec:13:85:ef:b8:79:ff:37:72:fe:34:66:bb:fa:78:76:a5:
63:6e:a5:ab:8e:71:8f:67:5d:43:41:18:eb:f7:a9:cd:63:18:
7c:71:83:f4:3a:9c:3d:2b:fa:ec:7d:29:f1:7f:72:ca:eb:ec:
9e:4e:e6:e4:48:56:44:c8:31:b0:09:76:83:48:1b:ed:26:7e:
e3:f9:51:32:da:4b:61:86:e9:0e:ec:6f:44:5b:bb:65:dc:0a:
42:fa:c3:3b:62:e6:dc:14:3c:fc:77:26:1e:d3:ed:e5:f7:45:
a1:a2:b7:e9:54:aa:e2:03:c4:28:6b:0c:12:ae:41:77:37:a1:
38:54:e3:dc:b8:0d:5e:69:ea:be:c6:11:e8:3f:30:68:83:a3:
bc:03:f3:62:62:d7:3c:2e:2f:f9:ae:ea:a4:5a:f7:ac:d2:5a:
ab:ca:32:cb:f6:8e:f0:33:ba:42:56:1d:68:0d:3b:22:c9:ef:
ed:de:a6:83:cf:4e:e6:b1:cf:ae:6b:24:20:70:aa:0a:fd:79:
d9:bc:0b:67:f9:35:ff:02:c4:80:1e:dd:2d:d9:e0:63:78:91:
3e:ac:df:a3:92:fd:33:26:20:a7:a1:40:e0:4f:ab:87:dd:a8:
83:a2:7f:a9:a2:d0:06:bb:42:71:e8:18:d3:3d:33:8e:83:5d:
3a:2f:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:49:38 2025 by rpki-client