Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/FjU0H7vPdjT4WlcuRh8u9jonq80.roa
File: FjU0H7vPdjT4WlcuRh8u9jonq80.roa (raw, json)
Hash identifier: FVDMMIfr/P3OKDJ02oDTFPsyvxmI1cgf33doeyF5iQw=
Subject key identifier: 16:35:34:1F:BB:CF:76:34:F8:5A:57:2E:46:1F:2E:F6:3A:27:AB:CD
Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial: 0198A8E9B0D2DCDC378B6F52CD246136525A
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/FjU0H7vPdjT4WlcuRh8u9jonq80.roa
Signing time: Thu 14 Aug 2025 14:09:04 +0000
ROA not before: Thu 14 Aug 2025 14:09:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 185.23.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:e9:b0:d2:dc:dc:37:8b:6f:52:cd:24:61:36:52:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
Validity
Not Before: Aug 14 14:09:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1635341fbbcf7634f85a572e461f2ef63a27abcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:ba:72:4d:c2:fc:5d:b2:7c:fd:5c:90:ed:
dd:1d:00:67:21:38:d6:b5:d8:c4:46:22:99:5c:a1:
95:96:30:31:4d:74:08:34:d0:64:84:e9:f9:b5:c5:
0b:eb:8f:b4:ae:34:e4:43:d5:c6:f2:45:90:e2:77:
9e:49:9d:84:54:47:00:2b:94:73:b1:c1:6a:05:21:
bc:66:9c:0e:86:8a:0d:6e:5a:dc:39:75:dd:98:9e:
86:34:31:b1:c3:30:2b:2f:68:8a:be:27:98:12:93:
53:9a:5b:a2:cb:4c:d7:7b:d1:ea:28:cf:68:d3:2c:
cd:c9:f5:ee:df:e4:c8:01:71:4d:d8:c4:94:4c:ee:
5c:39:4a:17:40:8d:cc:2b:cc:3c:7a:3f:df:32:87:
82:d8:f9:b0:9f:d1:cf:ba:f1:a6:9d:b0:e2:fc:b1:
cd:1e:f9:9c:1d:7d:3f:b8:d8:62:bd:1a:84:04:63:
34:9e:09:c3:99:bd:aa:a9:8a:55:ab:53:90:80:90:
55:49:52:b6:ac:b7:27:8c:47:d6:9b:2f:8a:9e:25:
f9:e3:49:1b:c0:a7:91:57:8b:84:b8:01:ec:84:1f:
0c:b8:07:e6:fe:9f:35:96:cc:b1:e2:6d:05:ed:9a:
96:72:46:1b:83:b1:51:f1:e0:14:6d:9a:d1:8a:33:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:34:1F:BB:CF:76:34:F8:5A:57:2E:46:1F:2E:F6:3A:27:AB:CD
X509v3 Authority Key Identifier:
keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/FjU0H7vPdjT4WlcuRh8u9jonq80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.144.0/22
Signature Algorithm: sha256WithRSAEncryption
78:a5:5e:26:47:96:86:dd:dd:7a:30:38:c0:e8:ce:f4:42:2d:
ec:fb:28:ee:00:7f:06:52:f4:d0:15:24:cf:bf:e9:9a:90:29:
ae:3f:19:a1:15:47:11:3c:e9:51:69:7b:54:d6:20:aa:cc:70:
69:ac:57:d4:bf:a5:d2:0a:e5:6c:a1:37:70:f6:6c:88:c7:71:
06:50:36:0c:9b:51:d2:d9:d9:27:66:af:3f:bb:d3:ae:d7:f4:
ac:5a:b8:8e:95:09:3e:09:aa:29:0e:05:c8:c0:b2:c6:16:be:
87:8c:6d:14:ef:ba:e6:39:49:ff:4f:37:56:81:cc:49:51:af:
f8:b2:29:7c:f0:3e:05:ca:c5:ad:35:a5:7a:cc:bb:dc:5f:34:
aa:41:7b:2d:7a:15:45:f8:ab:5e:1c:99:95:13:af:91:96:cd:
30:8e:e9:90:a9:ba:d3:4c:3b:f0:59:9c:8f:c1:51:92:47:ba:
eb:6e:ce:9c:c2:b7:eb:a0:37:55:21:fd:e2:42:7b:f6:58:92:
1c:59:46:f1:c0:58:41:70:94:49:4f:4e:db:3a:bb:69:a8:95:
8c:c9:a5:cd:9c:ca:d3:30:88:48:74:01:85:da:87:94:4e:e3:
50:c5:4f:51:68:60:3a:b2:75:6f:a2:9d:25:43:3d:88:6b:41:
9f:f2:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:22 2025 by rpki-client