Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/JTEfgbcrr8NRTkw-w0rbLDkwOBo.roa
File: JTEfgbcrr8NRTkw-w0rbLDkwOBo.roa (raw, json)
Hash identifier: pDGrFl+zPntVOdC+wAqPCIkri5GYwFIWXTpGxCwXD/o=
Subject key identifier: 25:31:1F:81:B7:2B:AF:C3:51:4E:4C:3E:C3:4A:DB:2C:39:30:38:1A
Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial: 019980FDD4D7506AB26C2D148C0FABA33309
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/JTEfgbcrr8NRTkw-w0rbLDkwOBo.roa
Signing time: Thu 25 Sep 2025 13:09:02 +0000
ROA not before: Thu 25 Sep 2025 13:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61160
IP address blocks: 193.43.102.0/23 maxlen: 23
2a04:640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:fd:d4:d7:50:6a:b2:6c:2d:14:8c:0f:ab:a3:33:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Validity
Not Before: Sep 25 13:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25311f81b72bafc3514e4c3ec34adb2c3930381a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:55:8d:be:e2:ad:7e:80:02:c5:64:3f:69:
69:0f:95:ef:69:08:a1:a1:73:7f:d1:cd:f7:1b:ef:
8c:27:00:9e:f3:fd:e2:bf:ef:27:84:ab:28:34:c4:
b3:34:cf:07:53:b0:11:77:76:75:5a:22:49:00:a5:
60:0d:3d:11:36:db:c1:77:fa:7b:2b:6a:46:e1:f5:
cf:e0:88:39:e9:70:9b:04:29:2a:99:a2:77:e8:c7:
b1:89:33:76:05:88:9b:c8:af:a6:6d:d3:94:52:91:
3a:cd:ee:ee:d0:eb:30:04:fd:50:86:08:a1:eb:81:
96:dc:0e:81:a0:1d:31:ea:ef:d2:a3:70:91:d5:49:
70:31:39:47:4a:14:eb:1d:3a:34:0a:ce:fa:a5:7f:
0e:7c:2b:26:f4:fc:2d:f0:44:b3:a3:27:fa:1e:3e:
2e:0e:e4:d3:e5:98:69:80:33:69:22:fa:15:76:43:
ef:35:0f:53:e4:4c:cc:eb:30:05:77:14:0c:93:c2:
f6:88:7b:7f:fe:51:fa:c4:62:34:69:51:4e:f4:23:
33:36:f0:4a:4d:94:4f:71:c9:4f:79:8b:eb:38:3b:
4b:84:6b:33:e8:67:3d:69:31:f5:ac:f4:50:9c:91:
a8:69:9a:9e:cd:ff:d0:08:c0:d4:36:c3:f8:f7:f2:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:1F:81:B7:2B:AF:C3:51:4E:4C:3E:C3:4A:DB:2C:39:30:38:1A
X509v3 Authority Key Identifier:
keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/JTEfgbcrr8NRTkw-w0rbLDkwOBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.102.0/23
IPv6:
2a04:640::/29
Signature Algorithm: sha256WithRSAEncryption
75:2d:3e:ca:34:ce:10:93:a1:39:39:df:dc:9e:5e:30:81:bf:
d7:8c:6b:8e:bd:1e:29:f4:c5:99:b1:69:77:de:04:39:40:13:
e7:c2:f9:34:bf:ec:1c:95:9b:e6:d2:3d:40:0c:37:a1:75:5b:
4d:bf:1a:48:03:25:1a:02:3b:c5:dd:fa:c2:0b:32:34:63:56:
c3:6e:2c:4c:fb:48:dd:32:0e:7a:7d:8e:bf:57:88:12:8d:78:
af:4d:d2:3a:6f:02:0d:0e:c8:3a:92:18:6a:3c:c5:bc:a8:9b:
4f:07:0c:22:26:ef:92:05:f0:aa:e2:c6:79:26:e0:cf:79:25:
68:51:47:64:2b:c2:b5:17:19:65:07:11:e8:eb:28:f4:c2:9c:
fc:30:0e:5c:df:1e:44:63:a5:ea:14:50:ac:80:ac:79:1f:97:
a7:72:26:4f:ff:48:83:25:fe:b6:6a:12:a0:49:3f:83:cb:5b:
9a:41:19:9d:f3:bc:2d:82:ec:43:6f:fe:42:42:92:2e:1b:b4:
3e:e2:8d:4d:c7:44:41:ca:e0:ae:86:22:23:db:d3:7a:96:60:
4b:02:1d:b6:8e:c8:36:8b:20:29:27:b2:8f:6c:b8:e4:54:03:
91:48:16:61:c8:f5:5b:f1:0b:f3:75:d7:7c:2c:2a:60:7b:93:
b9:15:6b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:58 2025 by rpki-client