Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/jLBq3eWfrjAeCUYJYPlMik3CyCA.roa
File: jLBq3eWfrjAeCUYJYPlMik3CyCA.roa (raw, json)
Hash identifier: shLgdM9JMAJdBql+hB0dDGv20zA36Y6MRPoMvam25rM=
Subject key identifier: 8C:B0:6A:DD:E5:9F:AE:30:1E:09:46:09:60:F9:4C:8A:4D:C2:C8:20
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019A4DCF010D3A0372FA93A8F54CE9413BBD
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/jLBq3eWfrjAeCUYJYPlMik3CyCA.roa
Signing time: Tue 04 Nov 2025 07:40:03 +0000
ROA not before: Tue 04 Nov 2025 07:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 2.58.99.0/24 maxlen: 24
91.240.33.0/24 maxlen: 24
109.196.104.0/24 maxlen: 24
109.196.106.0/24 maxlen: 24
109.196.107.0/24 maxlen: 24
109.196.108.0/24 maxlen: 24
109.196.109.0/24 maxlen: 24
109.196.111.0/24 maxlen: 24
176.101.57.0/24 maxlen: 24
176.101.58.0/24 maxlen: 24
176.101.61.0/24 maxlen: 24
176.101.62.0/24 maxlen: 24
176.101.63.0/24 maxlen: 24
213.109.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:cf:01:0d:3a:03:72:fa:93:a8:f5:4c:e9:41:3b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 4 07:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cb06adde59fae301e09460960f94c8a4dc2c820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:dc:d1:2d:3b:d9:85:74:a3:6a:29:ca:8b:
4e:1e:2c:d2:0a:df:e2:68:ce:2c:d5:30:44:8e:37:
25:09:12:71:35:88:c2:0d:d3:05:f1:f3:6f:8e:60:
96:96:25:00:bf:3a:15:44:b9:3e:d4:86:fb:34:9d:
02:36:84:1a:23:f3:dc:d6:10:3a:5a:1b:35:d3:36:
bd:c4:f0:ab:97:fc:45:91:04:53:da:5a:9d:b9:35:
fd:2a:4b:8c:10:ea:ea:7e:13:fe:ea:db:de:1c:85:
bd:4f:7e:38:e7:7e:4d:e7:2a:ec:88:92:43:be:1d:
0b:b7:b0:ce:7c:e3:c2:e3:53:b9:62:e9:0d:a5:42:
83:a8:d0:9b:8e:5c:9e:98:35:b7:0c:87:c8:59:cd:
8f:ff:c4:6d:42:82:0f:37:d2:ad:35:a7:db:ba:40:
46:02:0b:22:89:cc:b3:4b:83:01:4c:52:39:06:41:
69:4b:ec:2a:dd:1c:d2:74:bd:f2:be:fe:72:e9:35:
b1:63:e4:95:8c:68:14:08:18:97:45:e2:92:6c:ce:
96:af:53:5f:3e:20:62:3d:3a:c9:49:67:9b:8b:74:
ec:de:6d:1d:b5:d5:77:a7:fa:98:9f:e2:6b:73:9a:
92:87:b4:45:c4:40:fe:89:5a:d1:df:fa:30:04:11:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:6A:DD:E5:9F:AE:30:1E:09:46:09:60:F9:4C:8A:4D:C2:C8:20
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/jLBq3eWfrjAeCUYJYPlMik3CyCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.99.0/24
91.240.33.0/24
109.196.104.0/24
109.196.106.0-109.196.109.255
109.196.111.0/24
176.101.57.0-176.101.58.255
176.101.61.0-176.101.63.255
213.109.111.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ec:77:8d:a6:21:79:48:d1:9f:2d:9e:a1:26:14:e2:24:46:
1a:ad:fe:f0:e4:31:6c:49:5c:13:65:e6:7f:dd:ec:77:e0:72:
83:f7:5f:b4:60:d1:d9:0d:32:9a:e0:d9:f8:d8:5e:e1:4f:03:
95:3f:a6:a1:d3:d1:0e:11:ec:91:3f:7f:94:ed:27:e4:a9:25:
86:81:84:39:12:60:65:60:e6:16:9f:1d:36:f4:02:4e:f0:41:
25:44:e3:97:a6:ee:7c:00:06:a7:9e:5a:bc:d8:67:2f:93:f6:
c0:9d:f6:e7:a5:88:a6:47:e0:0b:e0:71:4e:2e:d2:36:bb:6f:
1c:f7:04:87:4e:7f:32:03:b5:d3:fe:cc:20:8a:62:ac:ed:66:
b4:28:8c:83:b2:0e:7e:22:8d:e2:6d:33:b1:fa:20:3e:f4:ec:
36:e0:d7:32:a4:9a:24:22:79:9b:be:13:1e:be:f2:40:44:ce:
dc:c8:09:92:f5:25:93:e4:c4:d7:0b:1a:c6:0f:16:49:3d:15:
f9:bf:71:77:15:05:7b:f3:16:cb:38:10:6f:dc:11:99:78:5e:
82:b9:25:ec:f5:bc:c6:ed:eb:ff:fb:ea:cc:4e:cc:8f:3e:69:
d3:f5:b9:49:ce:9b:51:19:85:1c:49:0c:fe:7c:ca:a8:e5:a9:
9e:a0:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:29 2025 by rpki-client