Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ji_T031R5JpC7beRNkBxDFafiVw.roa
File: ji_T031R5JpC7beRNkBxDFafiVw.roa (raw, json)
Hash identifier: 1TeYXNj1EDP13nwTEBI09Lq7/ivNqTb2BlS99x0i2Hs=
Subject key identifier: 8E:2F:D3:D3:7D:51:E4:9A:42:ED:B7:91:36:40:71:0C:56:9F:89:5C
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 01995C6BF81928CC5CDC86D98BF5E2716DC6
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ji_T031R5JpC7beRNkBxDFafiVw.roa
Signing time: Thu 18 Sep 2025 10:43:23 +0000
ROA not before: Thu 18 Sep 2025 10:43:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 194.76.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:6b:f8:19:28:cc:5c:dc:86:d9:8b:f5:e2:71:6d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Sep 18 10:43:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e2fd3d37d51e49a42edb7913640710c569f895c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:6e:37:bb:37:25:65:43:8a:22:c0:29:9f:
36:06:45:ff:63:63:66:93:fb:6f:5f:e6:a2:f7:42:
52:3a:a5:75:e6:af:3b:f1:b9:a1:be:da:74:42:9e:
61:f5:c5:dc:41:3b:02:c6:47:e3:39:b4:d0:17:fc:
67:10:34:43:4b:dc:4a:6d:d5:de:81:f6:e7:70:43:
79:71:d0:b6:30:6e:75:d0:08:d3:db:67:89:73:df:
9a:68:3d:2d:89:e3:47:f1:bb:7c:5b:f4:49:37:08:
44:33:ff:95:63:0b:58:2f:b7:ec:89:84:fb:a0:0a:
98:ef:a5:30:b6:40:68:af:92:12:f4:f1:c2:a1:ad:
ac:5a:49:f7:2d:a6:5a:05:8f:61:04:49:5f:5c:91:
2f:3f:be:de:2f:e4:0a:5c:db:0c:a8:7e:e7:34:d7:
18:b7:d8:93:d3:a2:2b:1c:14:1f:da:f6:c5:c6:2f:
00:e4:0b:37:19:d8:14:fc:a7:e1:c1:cc:4a:d3:d2:
79:c3:06:aa:7c:dd:d1:96:87:dd:25:ad:57:3b:89:
3e:2b:25:ef:d6:44:af:57:b6:7b:87:7b:25:09:96:
de:47:c4:cc:31:37:50:f0:23:15:e8:db:44:9b:fc:
b8:9b:fd:2e:51:a2:cb:15:95:3e:68:1f:57:0e:fa:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2F:D3:D3:7D:51:E4:9A:42:ED:B7:91:36:40:71:0C:56:9F:89:5C
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ji_T031R5JpC7beRNkBxDFafiVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b9:80:bd:da:0d:d2:d6:2a:b7:82:04:88:70:04:56:72:87:
e6:19:f1:53:55:55:e2:1b:a0:70:02:6b:4e:b9:81:0e:da:4b:
e8:7a:74:ae:3b:5b:c8:e5:45:9c:38:a0:ab:83:dd:ab:d0:b1:
0e:0f:c1:21:58:5d:03:45:0c:3b:7e:dd:2c:e1:e7:42:59:0e:
a4:6b:9d:fc:45:38:40:4a:31:ba:f5:77:8d:43:0a:13:cb:a9:
dc:0b:ff:5f:19:17:05:2b:7f:f7:5b:98:aa:01:9f:53:37:d3:
3a:6d:cc:42:99:05:0c:f8:fc:a9:f9:c0:2b:d1:7e:ff:8e:94:
ff:f6:2a:2f:f9:b7:e6:3f:b6:fc:7c:4e:b6:e2:02:69:79:be:
f2:66:b1:3a:ce:05:9b:08:e9:ea:67:78:89:32:9f:2d:b1:47:
99:cd:17:dc:ba:de:91:3b:ed:06:b4:73:4d:ea:8f:14:95:c7:
1b:ad:4a:cd:bd:ae:57:ab:68:e6:e5:e3:61:da:ee:f4:a6:9c:
67:5c:83:a2:1e:57:f6:c3:e0:f5:e6:5c:57:b9:fc:dd:56:4d:
f2:ab:79:6a:96:e8:1d:6e:61:a3:1c:de:84:2f:43:26:1e:53:
f8:30:df:eb:ff:88:34:b8:ba:7e:42:a4:77:fa:1b:65:30:85:
cb:eb:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:02 2025 by rpki-client