Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/J8OgK6YIDY4_wow6LOJWl2UwPMw.roa
File: J8OgK6YIDY4_wow6LOJWl2UwPMw.roa (raw, json)
Hash identifier: ehaTtO6bdlhf0UUT+6tJJXKQ0CyD4JoJHUd/4QXn6/c=
Subject key identifier: 27:C3:A0:2B:A6:08:0D:8E:3F:C2:8C:3A:2C:E2:56:97:65:30:3C:CC
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 01995BA2AD41E00BD6225FE8DFD61B905C55
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/J8OgK6YIDY4_wow6LOJWl2UwPMw.roa
Signing time: Thu 18 Sep 2025 07:03:31 +0000
ROA not before: Thu 18 Sep 2025 07:03:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8522
IP address blocks: 139.91.0.0/16 maxlen: 16
139.91.16.0/24 maxlen: 24
139.91.247.0/24 maxlen: 24
139.91.250.0/24 maxlen: 24
139.91.251.0/24 maxlen: 24
139.91.252.0/24 maxlen: 24
139.91.253.0/24 maxlen: 24
192.67.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:a2:ad:41:e0:0b:d6:22:5f:e8:df:d6:1b:90:5c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Sep 18 07:03:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27c3a02ba6080d8e3fc28c3a2ce2569765303ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:26:0d:b8:c7:3f:45:1c:cb:5d:ea:35:27:
1d:ca:cf:71:22:38:20:58:cd:b7:8f:18:57:1a:55:
12:7e:56:b3:5c:09:8e:85:5d:0b:ab:e9:7f:d5:93:
83:a4:86:10:22:a0:cf:c2:96:6c:64:a6:da:b9:bf:
a3:49:f6:e8:76:47:56:a6:2b:7f:77:e5:61:7c:ad:
16:04:c3:df:40:4e:b2:7d:1e:4a:bd:97:e5:01:86:
9c:1a:2d:75:e5:38:12:76:c7:42:3d:d5:4e:35:e2:
d2:10:5b:71:e0:ca:86:94:c0:d0:fc:93:68:55:f3:
44:47:79:a5:3f:5c:54:28:67:3b:4f:fe:ec:46:67:
00:10:2e:56:fc:94:52:69:31:fc:58:d2:12:09:e1:
62:11:76:fe:c1:d4:fa:79:b0:14:5c:3c:72:4f:26:
cd:7b:12:ca:13:80:65:e7:d2:32:be:70:8c:76:dd:
ec:dc:01:91:c0:ec:2a:bc:db:94:89:fc:cd:72:0e:
d0:ec:72:d2:64:eb:2b:e7:c3:a3:c3:fd:38:33:f1:
db:3f:69:de:45:69:e7:fd:fe:84:60:88:a6:06:ce:
ba:8b:6c:98:bb:e2:91:c3:22:b5:f6:fe:22:6e:5e:
50:ab:a9:3f:7e:71:86:47:82:90:7e:38:69:14:f6:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:A0:2B:A6:08:0D:8E:3F:C2:8C:3A:2C:E2:56:97:65:30:3C:CC
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/J8OgK6YIDY4_wow6LOJWl2UwPMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.91.0.0/16
192.67.249.0/24
Signature Algorithm: sha256WithRSAEncryption
92:04:57:c4:3b:55:b0:b0:fc:c1:4c:38:cd:27:47:83:3c:b9:
cf:c2:70:3f:67:2c:1b:40:3c:42:9f:5f:ba:52:62:37:f7:64:
ae:8b:b3:5e:05:87:6f:4b:1e:32:58:b1:5a:c5:47:c0:a9:d4:
eb:c8:8c:04:65:3e:51:40:b6:16:a6:01:b7:c7:9b:a5:32:a5:
58:75:bf:64:4e:5c:94:39:ce:b8:88:4e:e1:c4:db:a7:8b:9c:
db:71:4f:ae:a3:0c:38:f5:99:f8:d4:46:c6:b1:b2:06:30:44:
a4:2f:78:31:e5:02:d5:d0:cb:6b:7e:08:b8:bb:c4:52:e3:8d:
ce:06:e2:44:91:b0:cb:3b:8c:d7:35:30:c5:60:fd:d3:12:0e:
00:d9:e4:52:81:df:06:dc:9f:92:f1:eb:01:c0:3e:68:ce:b2:
dc:4a:c9:89:bb:42:b4:84:f5:9a:2c:bc:13:77:ae:6f:56:80:
de:c0:15:0e:0f:f9:cd:5e:c2:86:c7:e0:7e:c9:e8:7c:6f:b6:
ae:92:9c:55:2a:2c:4b:fc:61:31:8a:95:a9:6c:31:53:39:bf:
68:97:f5:a2:58:29:a0:f9:55:30:56:e9:6e:25:5a:0d:51:ea:
66:18:40:d7:a1:d6:f7:1b:e9:44:c0:84:c1:ee:49:39:96:f7:
c9:5e:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:50 2025 by rpki-client