Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jI5mPpbcepYcxti5lu2VJVUpZ4Y.roa
File: jI5mPpbcepYcxti5lu2VJVUpZ4Y.roa (raw, json)
Hash identifier: qtM8amkoU0ZaA4Ungf0FwSR98cZm7vyvwnc86JNAsPY=
Subject key identifier: 8C:8E:66:3E:96:DC:7A:96:1C:C6:D8:B9:96:ED:95:25:55:29:67:86
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01988553987C577C6F22019E3728C9DEDC06
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jI5mPpbcepYcxti5lu2VJVUpZ4Y.roa
Signing time: Thu 07 Aug 2025 16:18:24 +0000
ROA not before: Thu 07 Aug 2025 16:18:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204300
IP address blocks: 91.242.75.0/24 maxlen: 24
194.35.52.0/22 maxlen: 24
195.138.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:53:98:7c:57:7c:6f:22:01:9e:37:28:c9:de:dc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 7 16:18:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c8e663e96dc7a961cc6d8b996ed952555296786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:6e:01:9e:99:aa:81:6f:c6:f8:f4:4b:1e:
0b:84:28:c9:b5:5c:e0:e3:25:56:41:95:07:3a:39:
39:b0:57:e5:45:86:a4:5f:cf:28:46:a3:ee:ed:74:
25:6d:66:45:b8:da:d0:2f:67:28:71:f1:57:4a:5e:
5a:cd:e0:bb:21:85:10:74:af:54:10:f4:5f:e5:80:
b4:5a:5c:98:d2:06:dc:62:df:0a:99:0d:08:cf:03:
b1:79:ec:4a:6f:11:69:9f:ee:ac:91:89:96:f0:95:
05:4f:99:e6:cd:43:d2:a2:36:28:d2:ce:f1:93:9c:
70:0b:c8:72:f0:f4:9f:27:25:00:cd:2b:1a:a3:fb:
40:a1:82:d5:eb:b1:26:ae:4f:f1:41:e5:9f:2f:d0:
1f:2b:a8:e8:64:fb:fc:bd:dd:2a:3d:04:a5:8c:b9:
c0:b5:39:b8:99:33:53:32:e2:35:7d:7a:ec:fa:61:
b8:a3:4c:08:44:79:c5:58:d6:f1:a5:aa:45:9b:e4:
48:b2:f6:ca:2a:b3:61:9e:a1:c3:00:29:e0:00:66:
2a:85:9f:9a:76:67:04:4d:fe:e7:eb:23:c8:08:23:
32:c7:31:e1:8c:73:60:d7:7b:7b:03:48:8a:9c:bd:
ec:d9:30:ca:a9:bc:36:ec:55:4e:06:4d:a7:dd:ae:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8E:66:3E:96:DC:7A:96:1C:C6:D8:B9:96:ED:95:25:55:29:67:86
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jI5mPpbcepYcxti5lu2VJVUpZ4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.75.0/24
194.35.52.0/22
195.138.118.0/24
Signature Algorithm: sha256WithRSAEncryption
91:08:7f:65:e2:1a:95:f9:2b:ee:0c:92:1b:91:fa:56:86:5f:
7c:54:e2:86:ac:8f:95:02:e1:be:cf:1c:39:6b:28:ca:83:dd:
c9:a2:78:33:db:a9:69:1d:74:44:52:eb:04:38:5d:29:b6:67:
82:bb:03:34:44:8b:1c:75:67:ad:ef:3d:93:a3:c4:46:fb:74:
90:66:8e:62:da:83:28:9f:d6:59:ad:3d:50:7b:e4:72:9b:08:
df:db:3f:cd:ec:6b:91:ad:f4:ba:10:f5:38:be:b3:55:a5:99:
b1:73:44:74:38:5c:d2:c2:26:2c:8c:d2:c2:dd:2b:46:b7:2c:
44:28:7f:3a:44:dd:d9:96:97:10:64:5e:24:98:7a:bd:e8:69:
63:be:f9:2b:79:ab:69:53:ad:d9:a4:b6:26:d2:39:7b:6e:a9:
bf:dd:fb:80:e9:03:33:92:a9:6c:13:21:83:2e:18:35:e1:10:
3c:dc:02:e0:74:66:b0:1b:d3:f2:d2:b3:bf:df:87:25:e7:46:
4a:36:0b:63:be:c5:72:ae:17:00:bd:1d:ee:11:58:9d:a3:e5:
d0:1d:a2:84:6d:3b:d2:db:fc:83:e7:3c:be:ca:93:a5:4b:2b:
dd:83:ec:57:ae:56:c3:5f:61:3a:42:6b:f2:64:cb:fc:7d:97:
87:d6:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:40 2025 by rpki-client