Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/JBElIeupN_wEvwcSAF5cDomvrlo.roa
File: JBElIeupN_wEvwcSAF5cDomvrlo.roa (raw, json)
Hash identifier: BT3hpqLCpVk2r0O2vUhPpQuvC1EKNbRpD65e7fDCXEA=
Subject key identifier: 24:11:25:21:EB:A9:37:FC:04:BF:07:12:00:5E:5C:0E:89:AF:AE:5A
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A1F07E91FCF8AA63C20C9BD5E4338EDC5
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/JBElIeupN_wEvwcSAF5cDomvrlo.roa
Signing time: Sun 26 Oct 2025 05:40:03 +0000
ROA not before: Sun 26 Oct 2025 05:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62768
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:07:e9:1f:cf:8a:a6:3c:20:c9:bd:5e:43:38:ed:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 26 05:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24112521eba937fc04bf0712005e5c0e89afae5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:e7:27:5b:cc:31:2d:fd:dc:82:a7:a7:07:
a8:66:9d:5a:17:25:61:2b:d2:f2:d3:c2:cf:f7:1b:
bc:c8:07:c2:60:b0:2f:08:58:73:bb:7b:bb:7f:22:
2c:e6:cd:7e:7f:1b:5a:9d:ac:f4:4d:e1:ae:6b:a7:
7a:59:c1:13:ee:48:3b:ee:97:5e:4b:85:fb:ad:59:
6e:34:b5:d2:d0:d4:9e:2d:79:07:fc:6e:f2:85:2e:
3a:a0:fa:ec:61:98:e2:d4:c9:73:93:7c:ab:1c:dd:
e3:e5:c5:18:2e:27:57:69:3e:38:e2:ed:5d:dd:82:
59:b6:31:c2:27:50:5d:61:ce:f5:e9:7b:8b:b7:b0:
94:b6:a3:d9:c5:3d:71:4b:79:eb:63:d8:c5:bc:85:
47:34:65:1d:33:f9:df:07:d5:43:f8:61:f0:1b:7f:
09:4d:37:c8:df:21:12:f7:54:0c:97:08:53:18:62:
ec:78:21:6f:5a:9c:57:4a:91:af:bd:a7:c8:e7:b7:
3b:11:8c:f4:9d:2d:f6:23:e7:b8:dc:cd:5e:52:f9:
2e:37:93:67:21:5c:2a:bb:57:1f:0d:1d:44:b8:a5:
75:66:25:77:33:a1:78:ee:92:1e:d8:d1:dd:cf:b0:
1b:5b:53:16:18:f1:69:7b:ab:4f:a3:96:b1:e8:dd:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:11:25:21:EB:A9:37:FC:04:BF:07:12:00:5E:5C:0E:89:AF:AE:5A
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/JBElIeupN_wEvwcSAF5cDomvrlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb01::/32
Signature Algorithm: sha256WithRSAEncryption
74:3e:4b:0e:11:fc:8e:dc:80:35:3d:25:e1:8d:c3:86:78:7a:
0d:ef:ae:1e:ae:82:71:b2:28:ae:30:6c:f2:4a:57:e7:27:0c:
bd:24:7a:19:8b:c8:8d:6c:01:48:38:05:34:98:de:c6:95:c2:
15:12:1d:5a:c2:a8:cb:a1:01:4c:57:9d:3e:99:1a:13:e1:39:
e8:92:43:cb:ae:fb:a6:73:f1:41:32:d4:62:85:38:89:ba:8c:
65:3c:06:ac:fc:32:bc:2c:25:ca:58:6e:3a:af:4c:29:12:2a:
03:fb:43:2b:f7:06:bc:11:24:9d:d1:f9:36:d4:63:92:ad:fa:
9b:f6:9a:43:5c:8a:aa:b3:b3:68:d6:82:b1:2a:f6:a7:ef:34:
fb:15:7e:ad:de:d4:7b:6c:99:ba:18:5c:60:f1:f8:d8:89:24:
96:22:42:bd:9e:80:14:14:44:9f:e6:ca:fb:7a:1d:6a:30:37:
f9:ef:9c:cc:29:43:69:6e:ea:c6:07:11:fd:e7:4a:3b:6c:65:
19:34:8a:8c:6f:a3:51:ea:fe:ef:a3:8b:d2:16:ba:86:2c:bc:
05:c9:45:1c:4d:c5:f6:67:d3:8a:a7:ce:63:67:63:53:60:cc:
47:ad:b0:ba:31:28:d2:43:6e:b8:93:32:94:e1:44:a1:d6:77:
14:88:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:06:09 2025 by rpki-client