Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/JiAa07vPm_-Pb33la8lIiEVcVsk.roa
File: JiAa07vPm_-Pb33la8lIiEVcVsk.roa (raw, json)
Hash identifier: LTCDMolpBsWj5ww+QHR47bnfnmdoJo1c8oI26KgxQVA=
Subject key identifier: 26:20:1A:D3:BB:CF:9B:FF:8F:6F:7D:E5:6B:C9:48:88:45:5C:56:C9
Certificate issuer: /CN=a7be57f26a2c107b1a756b831715ebd07a87fb93
Certificate serial: 01993DA212232CD619E9E6E7FBFCFCB43798
Authority key identifier: A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/JiAa07vPm_-Pb33la8lIiEVcVsk.roa
Signing time: Fri 12 Sep 2025 11:14:15 +0000
ROA not before: Fri 12 Sep 2025 11:14:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205035
IP address blocks: 185.52.16.0/24 maxlen: 24
185.207.224.0/24 maxlen: 24
213.236.2.0/24 maxlen: 24
2a0f:6e40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:a2:12:23:2c:d6:19:e9:e6:e7:fb:fc:fc:b4:37:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7be57f26a2c107b1a756b831715ebd07a87fb93
Validity
Not Before: Sep 12 11:14:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26201ad3bbcf9bff8f6f7de56bc94888455c56c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:b2:a4:2f:d5:c5:bc:e2:1f:74:e0:42:39:
c8:8f:ae:d7:72:0a:f5:20:9e:96:32:c1:3e:fe:31:
88:cd:67:82:a6:81:98:d7:31:cf:6c:2b:59:e1:26:
e7:46:c3:ae:0a:58:7d:0b:24:4a:32:28:fc:92:2b:
ea:c9:9a:96:84:85:a1:ad:8b:7a:77:e5:32:26:6c:
7d:03:f7:04:24:15:15:eb:b7:6e:c2:f9:e7:2f:6e:
8d:96:7e:0a:20:d4:65:a2:44:f9:66:8c:59:f1:a7:
c1:22:63:1e:50:3c:1d:2a:fa:97:86:49:74:8c:0f:
f3:7b:a0:2d:f7:42:d0:5b:50:5d:7c:03:09:c0:73:
52:93:7d:d2:c3:39:8a:7b:34:97:1d:12:d3:0a:98:
ca:3f:9e:ea:83:30:d2:f7:aa:d4:2e:42:9a:14:86:
a1:32:f9:a7:5c:6a:70:ff:08:08:d7:46:4e:74:63:
27:75:28:d8:60:48:fa:79:fd:ef:a9:e8:2d:c3:db:
0d:9d:fd:6d:61:05:4d:d8:2c:a6:e5:70:b4:95:4f:
9d:26:b4:05:1a:38:c5:fc:7c:87:83:9d:64:12:25:
f6:0d:5b:18:96:73:b4:2f:88:cd:ad:98:f5:14:e1:
dd:3d:4c:db:0b:65:44:d3:46:a4:34:60:2a:21:3d:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:20:1A:D3:BB:CF:9B:FF:8F:6F:7D:E5:6B:C9:48:88:45:5C:56:C9
X509v3 Authority Key Identifier:
keyid:A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/JiAa07vPm_-Pb33la8lIiEVcVsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.16.0/24
185.207.224.0/24
213.236.2.0/24
IPv6:
2a0f:6e40::/29
Signature Algorithm: sha256WithRSAEncryption
48:f1:97:71:5d:94:49:83:58:99:9b:3b:cd:c5:34:29:64:4e:
3f:0d:24:72:9d:4c:dd:0b:8c:1c:73:d9:5e:1e:e0:61:93:cc:
d3:3c:77:0f:b4:ee:46:7a:87:2f:aa:75:24:a0:23:ec:68:33:
e5:30:fc:57:f4:23:1c:0c:55:fc:b3:94:5d:83:01:8b:d9:3d:
86:c4:b2:1f:5a:9f:12:67:e8:4c:e0:6e:fc:37:e3:71:f1:0e:
d8:8c:19:c1:30:02:b2:42:4e:0b:4c:90:45:01:5b:67:5f:e3:
80:b1:46:34:ef:60:f2:1b:5c:d4:f7:82:2a:69:10:a8:30:6c:
be:d3:b3:cf:cd:c3:bd:79:b7:16:89:95:6f:8d:be:ac:6e:04:
43:b1:87:31:cc:68:ec:14:a1:4a:5e:77:d2:3f:e0:e2:0d:32:
6d:20:87:ca:7b:18:1d:83:cc:de:bc:e2:43:7a:7c:4b:0f:81:
8f:03:85:fd:55:a8:e5:1b:36:6c:3e:31:7e:31:b6:cd:40:68:
92:af:98:94:21:07:c5:3c:27:d0:b4:bc:c3:18:77:9d:bf:f1:
f2:ee:6e:db:52:75:19:63:d2:47:63:47:58:a9:6b:f0:20:38:
95:e7:df:9c:40:6f:57:f8:8d:05:16:87:64:09:f5:45:87:ae:
cb:25:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:22 2025 by rpki-client