Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/JqCwXNSsIA5GmOAqVij5xtyCNdo.roa
File: JqCwXNSsIA5GmOAqVij5xtyCNdo.roa (raw, json)
Hash identifier: QdmrseC1ST0f5saIZ/JDQWioFap1TFhdMiZ17k2Nqbw=
Subject key identifier: 26:A0:B0:5C:D4:AC:20:0E:46:98:E0:2A:56:28:F9:C6:DC:82:35:DA
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 0198BD90DC7EC7BFB034B6B846D4B1F0D000
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/JqCwXNSsIA5GmOAqVij5xtyCNdo.roa
Signing time: Mon 18 Aug 2025 14:24:04 +0000
ROA not before: Mon 18 Aug 2025 14:24:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 217.173.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:90:dc:7e:c7:bf:b0:34:b6:b8:46:d4:b1:f0:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Aug 18 14:24:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26a0b05cd4ac200e4698e02a5628f9c6dc8235da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:ab:d3:87:97:bc:e3:50:50:43:be:c7:44:
5e:63:88:a4:29:cb:44:b8:67:a8:55:5b:b0:d5:56:
d3:9d:d7:43:73:35:2a:fa:43:2b:51:00:7f:7d:34:
57:87:bb:02:41:98:b1:86:a7:74:62:5f:88:d1:84:
ed:02:3a:0b:14:d0:be:dd:27:1e:a4:3f:44:71:8a:
b9:e0:92:83:94:a9:29:7d:c0:bd:6c:1d:12:af:7e:
65:51:a7:5c:b5:c5:15:fc:0c:94:f1:f5:8d:97:07:
52:ea:1c:a0:a6:7d:5b:6d:b2:17:e1:7f:87:34:d6:
74:2e:2d:33:32:cd:7d:41:3a:b2:de:87:6f:ed:23:
4c:6a:2e:45:68:f8:58:c8:be:34:5e:83:c1:4a:d4:
98:23:d6:ce:d6:ea:f3:0c:c3:60:0c:00:fb:4f:2a:
ef:d6:8d:88:09:c8:f0:0c:fd:6a:79:84:5a:f6:4f:
5d:96:ea:7a:3c:01:e1:16:9a:ce:2b:84:e6:04:28:
25:e4:e5:be:c5:2e:06:11:7d:f9:ce:99:db:e4:8d:
cb:81:aa:ac:6e:44:21:03:9f:84:7a:c6:b8:65:77:
e3:a8:01:6c:bc:f7:b6:e7:cb:2d:35:10:a6:c4:64:
29:ae:0d:55:5a:57:6c:61:5d:cf:40:0f:6e:ef:d7:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A0:B0:5C:D4:AC:20:0E:46:98:E0:2A:56:28:F9:C6:DC:82:35:DA
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/JqCwXNSsIA5GmOAqVij5xtyCNdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.159.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:fe:5f:64:5b:30:70:13:e0:fa:bc:e4:c9:43:b2:dd:5c:6d:
0f:c8:f7:76:ce:8f:7a:7e:00:67:98:19:91:88:6a:f4:80:3b:
16:b8:77:62:e3:d2:0d:ca:fb:04:81:76:be:5e:ca:06:c2:60:
23:c8:13:66:69:ea:a0:b1:58:56:a8:65:26:1d:62:90:c1:bf:
fb:2d:a4:c6:c7:45:4e:d9:d5:4d:2f:28:d3:e3:4b:eb:36:1f:
1a:e9:72:30:ce:ce:08:4b:56:71:73:0f:83:ed:4d:b6:ba:7f:
fc:a8:71:9d:17:70:e6:17:0e:52:d8:48:d2:39:96:f0:40:97:
40:a8:56:7b:4c:ba:66:10:1e:8b:29:00:db:97:c4:c5:72:17:
5b:86:a5:34:0b:81:d7:9e:08:24:51:07:26:9f:33:0d:8f:b4:
6b:79:4f:ef:52:f6:d3:dd:93:74:e3:d2:eb:c8:29:bf:81:39:
20:c1:0f:73:02:1f:dc:77:43:58:b6:6d:a8:b2:ef:ea:57:ff:
d3:b7:58:a0:49:3b:b8:59:00:ee:db:5c:d2:27:3c:dd:e9:ed:
29:ca:97:5d:8b:63:8a:ff:3b:4e:45:82:ba:8b:d3:ca:6d:e9:
3e:45:ea:1e:2e:7d:e7:7c:34:3e:53:46:5a:06:16:d6:72:ad:
6d:75:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:06 2025 by rpki-client