Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jtJpQfCEW5kexlqi9UADs04nT10.roa
File: jtJpQfCEW5kexlqi9UADs04nT10.roa (raw, json)
Hash identifier: no/u9E2yRWyS1BQ/kh0yysSdwOTzfKK7w+/i4v+yLXU=
Subject key identifier: 8E:D2:69:41:F0:84:5B:99:1E:C6:5A:A2:F5:40:03:B3:4E:27:4F:5D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0198D5D2E53F3E85DCF8EF599BFFF5F12ED5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jtJpQfCEW5kexlqi9UADs04nT10.roa
Signing time: Sat 23 Aug 2025 07:27:04 +0000
ROA not before: Sat 23 Aug 2025 07:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61002
IP address blocks: 80.96.107.0/24 maxlen: 24
80.97.55.0/24 maxlen: 24
85.120.44.0/23 maxlen: 23
85.122.44.0/24 maxlen: 24
217.156.28.0/24 maxlen: 24
217.156.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:d2:e5:3f:3e:85:dc:f8:ef:59:9b:ff:f5:f1:2e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 23 07:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ed26941f0845b991ec65aa2f54003b34e274f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:e4:8e:a5:c5:e0:2e:1b:d8:48:d1:5c:c2:
e2:88:b7:e9:3b:14:c9:d1:32:0f:27:38:60:b1:39:
ac:86:4d:d2:90:60:bd:f1:dd:ee:9b:74:d9:9b:e0:
20:a3:c9:a6:a3:89:ac:fb:ff:62:9b:7f:1e:64:ae:
96:20:e6:b3:69:6c:6b:af:6a:b3:37:01:39:bf:c3:
16:15:68:98:4c:b7:20:3e:4c:3b:61:f2:96:cb:ed:
65:91:96:93:2f:0d:98:9f:51:9e:d7:4a:0f:8f:59:
8e:3b:db:bd:bb:f5:79:18:25:9c:df:ab:cd:40:69:
ce:b0:9b:e4:c0:bc:5e:13:ca:55:b5:7f:5b:01:f7:
32:c2:72:11:31:c4:80:93:99:0f:1f:51:44:2c:7f:
a6:ee:e2:98:03:8f:69:d9:5e:f8:89:f8:16:02:fd:
21:84:c3:f4:e9:7d:91:e4:9d:1b:5a:d1:4c:e1:64:
13:02:96:9f:b7:ff:64:a0:3b:b0:52:de:a2:80:9b:
aa:7c:3b:a9:15:b9:71:35:61:a7:4b:a6:1e:77:b3:
0a:2a:25:9b:4b:bd:8c:34:0b:2c:3b:e8:29:3a:0e:
9c:3c:c4:f1:f8:b1:b5:ac:b2:bf:70:d1:e6:8e:cb:
af:be:2d:d0:92:bc:ac:6d:1b:a7:9c:e6:98:92:cd:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D2:69:41:F0:84:5B:99:1E:C6:5A:A2:F5:40:03:B3:4E:27:4F:5D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jtJpQfCEW5kexlqi9UADs04nT10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.107.0/24
80.97.55.0/24
85.120.44.0/23
85.122.44.0/24
217.156.28.0/24
217.156.108.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:fd:83:57:6f:89:1f:ca:10:7c:19:4e:00:1c:50:d3:84:62:
55:28:04:ef:de:74:c1:ff:e3:80:8c:e6:d2:60:00:34:56:f9:
dc:b1:56:a7:30:cb:01:17:ac:56:ba:78:a3:78:1a:77:84:f2:
38:b1:ea:2c:4f:14:8a:70:4c:25:9e:05:34:76:99:84:3f:b9:
f0:2d:cd:90:3b:81:ef:fc:c1:c5:87:a1:dd:6d:11:0c:ee:80:
94:39:2e:4c:89:10:e7:c6:df:ab:de:f3:ef:44:b2:b1:38:f6:
a0:2d:95:f7:aa:01:2f:20:bf:6c:e4:f0:e7:0d:15:5b:a4:d3:
53:45:2a:de:8e:63:d1:08:4a:6c:11:0a:91:1a:fc:70:83:6c:
f3:2c:e9:03:21:62:e8:19:33:ca:5d:7e:6b:14:db:0f:0d:ae:
27:0b:1c:e8:42:f4:04:2e:87:0f:b3:50:d5:5b:fa:1a:46:0b:
66:41:c5:dd:09:c9:5e:5f:35:0c:47:05:fc:b4:53:58:53:e1:
21:bc:3b:d7:14:c4:33:a2:a7:1e:ff:70:69:ef:8f:81:7c:ab:
c6:5e:b3:bd:73:8b:c7:96:8e:76:68:39:7e:9c:97:5a:1c:18:
57:14:88:57:aa:6f:23:33:95:e2:96:5f:5a:de:e2:f1:f1:1c:
90:fa:a0:16
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZjV0uU/PoXc+O9Zm//18S7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwODIzMDcyNzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWQyNjk0MWYwODQ1Yjk5MWVjNjVhYTJmNTQwMDNiMzRlMjc0ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8rkjqXF4C4b2EjRXMLiiLfpOxTJ
0TIPJzhgsTmshk3SkGC98d3um3TZm+Ago8mmo4ms+/9im38eZK6WIOazaWxrr2qz
NwE5v8MWFWiYTLcgPkw7YfKWy+1lkZaTLw2Yn1Ge10oPj1mOO9u9u/V5GCWc36vN
QGnOsJvkwLxeE8pVtX9bAfcywnIRMcSAk5kPH1FELH+m7uKYA49p2V74ifgWAv0h
hMP06X2R5J0bWtFM4WQTApaft/9koDuwUt6igJuqfDupFblxNWGnS6Yed7MKKiWb
S72MNAssO+gpOg6cPMTx+LG1rLK/cNHmjsuvvi3QkrysbRunnOaYks2nIwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFI7SaUHwhFuZHsZaovVAA7NOJ09dMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvanRKcFFmQ0VXNWtleGxxaTlVQURzMDRuVDEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAUGBrAwQA
UGE3AwQBVXgsAwQAVXosAwQA2ZwcAwQB2ZxsMA0GCSqGSIb3DQEBCwUAA4IBAQCu
/YNXb4kfyhB8GU4AHFDThGJVKATv3nTB/+OAjObSYAA0VvncsVanMMsBF6xWunij
eBp3hPI4seosTxSKcEwlngU0dpmEP7nwLc2QO4Hv/MHFh6HdbREM7oCUOS5MiRDn
xt+r3vPvRLKxOPagLZX3qgEvIL9s5PDnDRVbpNNTRSrejmPRCEpsEQqRGvxwg2zz
LOkDIWLoGTPKXX5rFNsPDa4nCxzoQvQELocPs1DVW/oaRgtmQcXdCcleXzUMRwX8
tFNYU+EhvDvXFMQzoqce/3Bp74+BfKvGXrO9c4vHlo52aDl+nJdaHBhXFIhXqm8j
M5Xill9a3uLx8RyQ+qAW
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:50 2025 by rpki-client