Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tjhFfFxvmu5PSyPGyzKgEuG59mo.roa
File: tjhFfFxvmu5PSyPGyzKgEuG59mo.roa (raw, json)
Hash identifier: 3AF8UXf4VZambM8NyzbYpzHg45VNenkq0uWB7EMm7ws=
Subject key identifier: B6:38:45:7C:5C:6F:9A:EE:4F:4B:23:C6:CB:32:A0:12:E1:B9:F6:6A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019882BCFD90525C8A8352101F5C211DE6B8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tjhFfFxvmu5PSyPGyzKgEuG59mo.roa
Signing time: Thu 07 Aug 2025 04:14:40 +0000
ROA not before: Thu 07 Aug 2025 04:14:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 62.76.229.0/24 maxlen: 24
192.124.177.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:bc:fd:90:52:5c:8a:83:52:10:1f:5c:21:1d:e6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 7 04:14:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b638457c5c6f9aee4f4b23c6cb32a012e1b9f66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:52:2f:7a:46:8d:22:3a:67:14:69:35:ba:
e5:b0:0d:75:ca:1f:f3:6d:f0:cf:53:19:ee:d8:06:
39:01:b7:ed:b4:91:03:c5:32:41:23:14:8b:e8:91:
d0:7b:4a:14:52:2f:13:3c:50:7b:78:2b:80:77:7f:
d2:f8:bd:a1:9d:8f:b7:72:c3:af:4c:28:7b:4f:80:
3e:bc:d8:fe:a6:db:09:1e:39:05:18:41:11:d6:66:
a5:75:87:68:88:c7:aa:5c:40:29:20:6d:2d:0c:de:
9e:11:8e:bc:cf:04:6a:24:ee:b0:f3:a1:7a:92:c5:
b2:f6:dd:a3:94:cd:b9:a9:55:94:3a:ee:6b:a5:ec:
70:f1:f2:d1:aa:27:19:d3:bc:6d:db:a1:14:f7:ce:
38:de:80:79:2c:23:bf:f2:11:2c:b7:c3:5f:8d:88:
82:98:81:f3:02:35:d6:92:73:41:7b:84:e9:bb:27:
70:f7:47:98:c2:c0:e5:15:e3:51:cc:38:de:a3:d8:
b4:9a:27:ec:be:45:b5:e8:2b:a9:23:35:c5:b0:c0:
a7:6a:1f:85:ce:8e:45:77:2d:b3:0c:2f:18:c0:2f:
0f:fe:6e:5a:25:27:5f:db:4b:61:f9:1a:8a:22:33:
54:36:cb:42:14:43:27:30:c3:6c:d3:40:37:a4:11:
22:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:45:7C:5C:6F:9A:EE:4F:4B:23:C6:CB:32:A0:12:E1:B9:F6:6A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tjhFfFxvmu5PSyPGyzKgEuG59mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
192.124.177.0/24
194.87.122.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f6:39:cf:ad:67:ff:55:ba:22:7f:d7:40:cd:25:33:53:4d:
0f:a6:45:33:b5:ac:e8:89:b8:3e:c0:cc:13:70:41:54:5d:93:
7c:d8:ca:5e:f2:96:cd:ec:49:3b:79:a5:9b:70:b3:c3:35:ad:
42:ff:a5:bc:08:ac:a2:a7:42:94:92:67:a6:e6:89:34:ae:01:
26:75:e1:6b:32:19:29:4a:dd:5b:d9:51:9b:c4:11:10:75:95:
47:8e:5e:74:5d:c2:cc:dd:03:69:88:d0:d8:c0:9f:7c:82:34:
62:18:b9:22:4e:7f:84:8a:ff:e4:9e:2a:39:c4:89:fe:fa:3a:
7b:c5:0f:70:5a:18:67:9a:59:f2:23:b4:c5:14:c1:ab:9e:ee:
09:a5:34:d4:91:45:25:d6:5e:c3:0c:95:6a:88:60:e4:96:10:
6a:a0:a7:71:06:c8:7c:31:b5:5e:d4:a8:d2:27:bf:d5:52:00:
ca:f0:d7:32:68:04:ac:fd:19:e7:0e:ff:65:54:73:19:f7:e0:
97:b9:c4:b8:90:30:f8:a1:13:7e:58:01:c0:52:88:d0:cd:88:
c2:7f:cd:c1:ec:e3:e3:91:9a:f2:29:61:93:10:95:81:98:07:
3d:d6:92:fe:15:c7:82:96:c8:06:57:94:3d:53:ff:f0:d3:23:
d8:01:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:18:24 2025 by rpki-client