Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JdYxNE98T8p9jDuR3RxYieve6xw.roa
File: JdYxNE98T8p9jDuR3RxYieve6xw.roa (raw, json)
Hash identifier: 0JpBtNnlzhZiW7YO5MZAdbbRlaPCwL/c25a0zEVC4Is=
Subject key identifier: 25:D6:31:34:4F:7C:4F:CA:7D:8C:3B:91:DD:1C:58:89:EB:DE:EB:1C
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019859E1D5918994AEC9D9F7F2C60C5AC6B9
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JdYxNE98T8p9jDuR3RxYieve6xw.roa
Signing time: Wed 30 Jul 2025 05:50:29 +0000
ROA not before: Wed 30 Jul 2025 05:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44812
IP address blocks: 2a09:6284::/32 maxlen: 32
2a10:4104::/32 maxlen: 32
2a12:a343::/32 maxlen: 32
2a12:a344::/32 maxlen: 32
2a13:93c3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:e1:d5:91:89:94:ae:c9:d9:f7:f2:c6:0c:5a:c6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jul 30 05:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25d631344f7c4fca7d8c3b91dd1c5889ebdeeb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:c2:2c:bc:b1:22:ff:8c:5f:d0:46:df:c8:
9e:3c:1a:85:05:a5:d1:8a:a7:01:d8:8e:97:7c:1a:
b2:53:9a:54:3a:d6:a8:69:c6:43:63:99:de:6a:69:
83:b6:67:66:62:f9:ff:c1:cf:a3:07:82:2d:61:0b:
79:55:cf:ff:1d:b8:0e:2f:a3:b2:f0:bd:3e:f9:a6:
e3:1e:8f:10:46:ac:88:5e:ad:c4:e8:16:4c:2b:dd:
82:3a:89:03:ef:7c:5b:2a:50:a1:a0:f5:62:1c:f5:
d1:e9:5e:fa:64:75:c5:3e:16:56:cc:a1:d6:7e:7d:
97:0c:d0:b1:16:0d:79:05:79:d2:1a:df:ce:bb:cb:
8b:08:4e:40:c9:5a:a9:e8:55:4b:73:a9:65:d5:8d:
59:9f:47:4d:82:77:b7:31:59:a2:9f:bd:ac:c0:18:
d3:02:e7:62:20:88:b7:47:c7:6f:cf:be:8a:f4:56:
ff:e3:07:9d:c2:83:90:e1:66:a3:a8:73:ec:49:a1:
b2:14:6f:9a:22:10:62:d9:30:b4:4a:7e:89:38:bb:
2d:aa:6d:11:7b:65:5a:34:2b:0b:b5:e1:9b:eb:7a:
4f:e5:70:d0:a8:ce:66:dc:16:47:87:11:8a:b0:85:
7c:f5:df:7d:99:11:a0:5a:7c:14:d8:d3:c5:d3:e3:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D6:31:34:4F:7C:4F:CA:7D:8C:3B:91:DD:1C:58:89:EB:DE:EB:1C
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/JdYxNE98T8p9jDuR3RxYieve6xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6284::/32
2a10:4104::/32
2a12:a343::-2a12:a344:ffff:ffff:ffff:ffff:ffff:ffff
2a13:93c3::/32
Signature Algorithm: sha256WithRSAEncryption
ab:77:a4:fe:e9:7d:49:41:d0:a7:ba:d5:ec:a1:ba:1a:54:4c:
be:54:c4:c3:89:a5:eb:cc:60:8a:60:6a:96:e3:72:8e:e4:2c:
ab:f4:9a:10:e5:46:7c:fa:a4:28:52:2e:52:e5:41:65:de:e5:
15:59:c4:2b:0e:7d:ef:c4:e9:da:c0:da:36:3f:27:13:eb:b6:
11:f6:d5:9a:26:c8:4e:5c:50:65:9a:31:cc:9a:59:50:ac:53:
73:81:ad:8e:8e:94:58:d3:60:c2:14:77:f8:b8:2d:90:41:b0:
85:45:bb:72:f9:b2:96:8b:93:f4:31:e3:5e:48:17:6f:4c:21:
6a:f3:e9:76:cf:4f:d0:90:fb:3b:73:b5:8d:56:45:0e:34:79:
3a:03:21:cb:86:ef:2a:a4:2a:c3:4d:dd:fe:81:59:0a:9a:1c:
5f:08:ed:65:50:92:c7:c4:1b:1b:29:07:f8:90:55:d2:37:7c:
4b:46:ff:a6:97:e3:2f:12:77:bb:35:c7:35:74:e7:c5:11:0c:
25:00:5c:af:d1:35:ab:3d:d5:72:91:45:5c:be:44:51:de:39:
1e:98:9e:52:a1:c5:1e:69:16:f8:94:9a:18:ac:cb:67:8c:47:
44:8a:24:60:cb:d0:61:c6:ff:34:d1:67:9f:05:7b:8a:a5:d7:
d3:f1:19:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:26 2025 by rpki-client