Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/j-wumpm8bgZz2aXq3WW1uyM7CGA.roa
File: j-wumpm8bgZz2aXq3WW1uyM7CGA.roa (raw, json)
Hash identifier: sbRRHDlTVstpRJS8Rp0RxMYJ2O6mjuNLI+lW12IAgE4=
Subject key identifier: 8F:EC:2E:9A:99:BC:6E:06:73:D9:A5:EA:DD:65:B5:BB:23:3B:08:60
Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial: 01999A5C69B2F6F8B9CFE782590CF8CBA5A9
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/j-wumpm8bgZz2aXq3WW1uyM7CGA.roa
Signing time: Tue 30 Sep 2025 11:22:51 +0000
ROA not before: Tue 30 Sep 2025 11:22:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 185.236.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:5c:69:b2:f6:f8:b9:cf:e7:82:59:0c:f8:cb:a5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Validity
Not Before: Sep 30 11:22:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fec2e9a99bc6e0673d9a5eadd65b5bb233b0860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:40:00:f8:1a:69:68:bb:67:12:62:38:6b:
e7:94:48:99:0c:14:fc:fb:b0:32:98:03:c0:26:54:
01:ab:5e:6a:3d:59:90:42:8a:a0:b7:15:0c:4a:65:
5a:b8:af:2a:71:25:88:df:2d:38:c7:51:7b:1b:44:
50:82:9b:04:22:ee:69:d0:d9:84:6e:7c:3f:12:d4:
b5:71:7f:3d:9a:6c:7c:c0:d3:6b:b3:e2:c1:52:ed:
9e:af:5d:64:4d:4c:8a:26:57:83:0d:cf:59:2d:8c:
50:60:7c:75:54:f0:27:c2:f2:83:25:03:ee:87:11:
00:da:2b:5a:f7:07:ec:38:79:74:30:dd:42:55:b0:
ae:d0:11:ac:21:29:44:d7:cf:09:1a:65:16:db:62:
14:7a:53:6c:cd:eb:c0:09:87:f6:2d:ec:9c:f1:84:
fa:34:30:8b:ab:a3:6d:7c:69:c5:b7:32:fa:f4:d6:
b4:ec:5e:f6:cf:e8:8e:2c:b0:42:9a:29:ef:4a:e8:
b0:65:34:d1:03:12:ed:3e:48:60:bc:95:52:78:a6:
74:1b:d5:d8:c8:69:35:48:f8:5e:35:37:dd:fe:20:
3c:14:19:5f:72:db:6c:f5:27:de:c8:b4:03:94:4e:
8b:f4:c2:7b:2b:a3:9c:c9:d4:5f:7f:a9:09:fb:34:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EC:2E:9A:99:BC:6E:06:73:D9:A5:EA:DD:65:B5:BB:23:3B:08:60
X509v3 Authority Key Identifier:
keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/j-wumpm8bgZz2aXq3WW1uyM7CGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.20.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ce:f3:4c:b6:09:ac:5a:fd:75:e6:01:50:52:f8:f6:2b:a0:
8d:4f:d6:ef:60:7c:25:1d:7a:2d:3c:e1:86:e5:a3:4b:94:76:
56:72:60:a4:1e:cb:76:0c:e9:16:0c:63:56:f4:73:6b:2d:7e:
b6:3f:1c:6f:97:91:c6:5d:8f:43:09:48:9f:4c:9c:5a:29:ce:
67:9b:9b:6a:8a:21:e4:10:dd:60:36:87:48:e1:c1:1e:4e:08:
28:2c:f4:e1:8c:82:14:80:4d:ae:23:70:5f:8f:4c:f1:b7:68:
e9:f3:8a:ee:04:b3:81:e9:93:27:40:c5:8a:94:1c:32:e4:74:
90:13:e9:71:d5:97:0c:cf:b4:89:37:58:45:66:f3:10:81:8a:
f2:c5:c2:e9:57:05:e2:2c:44:a0:55:6c:08:aa:59:85:fe:4f:
46:9e:ae:c3:83:40:2d:58:6d:a3:04:89:66:4a:35:a9:77:df:
05:d2:4e:ef:bc:e9:f8:4b:17:a0:3b:30:38:9b:0d:b2:df:03:
2b:da:7f:da:92:28:26:28:45:61:44:aa:e4:20:95:39:6c:3b:
80:87:e0:ab:8e:b2:69:7b:97:e4:c3:3a:6e:b8:64:e4:6f:a4:
e0:d6:96:bb:c5:c3:43:88:b0:00:e5:c4:65:c0:83:8e:b2:62:
c8:44:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:44 2025 by rpki-client