Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/J_7nGvX3BZw4FXXIO0TsrEmgd2Y.roa
File: J_7nGvX3BZw4FXXIO0TsrEmgd2Y.roa (raw, json)
Hash identifier: jqcFlSNVRG3Aj3N9s1+X70XYoSNVkY4OIWxwZDb7oHY=
Subject key identifier: 27:FE:E7:1A:F5:F7:05:9C:38:15:75:C8:3B:44:EC:AC:49:A0:77:66
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 0199340392F7FCE5C054B18FD0435A0B537A
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/J_7nGvX3BZw4FXXIO0TsrEmgd2Y.roa
Signing time: Wed 10 Sep 2025 14:24:33 +0000
ROA not before: Wed 10 Sep 2025 14:24:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206049
IP address blocks: 91.241.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:03:92:f7:fc:e5:c0:54:b1:8f:d0:43:5a:0b:53:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Sep 10 14:24:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27fee71af5f7059c381575c83b44ecac49a07766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:d4:38:3d:20:b0:8e:bf:0a:19:ac:f2:40:
d5:36:ca:05:c2:ab:75:73:cd:76:4d:13:1a:36:36:
1e:8f:6e:67:ea:b1:66:50:20:2c:1c:b0:d9:45:5f:
ec:7c:de:c4:85:7d:c5:37:c3:ce:ec:47:88:a7:2d:
6d:21:26:ef:75:26:d0:2a:84:5d:2c:dd:ef:3c:61:
16:1c:cd:ae:7a:b0:01:92:1c:9c:dc:e5:a5:6e:5e:
11:c3:aa:7d:62:43:05:04:d1:ee:ff:b0:4b:50:b1:
20:4c:06:15:ff:0a:dd:21:3f:92:43:81:f8:56:c9:
65:17:af:90:f3:7e:21:a7:b4:fb:4a:13:ed:d5:bd:
d1:fe:19:fa:92:01:dc:17:62:15:3b:2c:24:29:60:
7c:82:dd:f8:07:ca:dd:dc:b5:7d:7f:4c:74:cb:8b:
52:87:25:14:9d:03:4e:be:fc:8d:bd:b9:86:00:d7:
b5:10:48:aa:42:ee:e5:e7:e0:3b:ac:67:8e:a8:0d:
36:a8:d4:4f:0c:53:25:5b:15:cd:2f:13:76:31:c0:
8d:b3:7e:1a:19:e4:d8:47:3e:20:f8:eb:bd:6f:d9:
62:d0:fc:a6:44:c2:09:f7:ae:ad:c2:b4:49:eb:a6:
a5:21:5b:12:20:d3:01:9f:b0:98:a0:63:f6:7a:3c:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FE:E7:1A:F5:F7:05:9C:38:15:75:C8:3B:44:EC:AC:49:A0:77:66
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/J_7nGvX3BZw4FXXIO0TsrEmgd2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.0.0/23
Signature Algorithm: sha256WithRSAEncryption
63:39:65:fc:6e:21:5c:a4:70:b4:94:43:c2:b3:8f:76:3c:15:
13:9f:63:bd:f6:af:b5:03:79:33:da:60:36:73:a0:21:76:5a:
9b:d5:81:42:e2:a9:7f:7d:c4:1a:46:02:54:c4:fa:83:ad:b1:
a7:70:28:3d:61:9b:87:b7:77:4f:77:17:4e:e7:e0:9f:2f:52:
23:8e:ad:1e:a1:da:f5:9e:73:0a:75:3e:63:ff:9c:c0:8f:82:
1f:04:63:d6:a4:67:71:1a:20:30:3c:d1:64:72:62:aa:0f:d2:
9f:62:4a:43:e1:27:ef:09:21:77:5c:82:ad:9a:24:10:3a:6b:
0c:4c:d0:21:be:7f:95:77:94:0b:82:54:b3:36:70:af:c2:fe:
ee:60:fe:eb:fa:da:c4:86:18:63:d8:40:69:90:c3:3c:c9:4f:
ee:44:d2:1a:64:5f:8a:da:e8:51:a5:4c:78:dc:6f:59:b2:19:
e3:18:45:4a:03:15:68:6c:ae:70:37:ad:a8:17:47:ad:75:95:
67:65:53:a6:68:ae:98:e2:5b:fe:02:65:1f:38:7c:ee:cb:2c:
96:63:27:b9:34:38:7b:43:03:6e:8b:34:9c:e0:4b:13:5d:b8:
e7:a6:4f:ff:65:ef:ed:03:a6:8f:71:e7:58:5d:87:91:fe:fe:
da:c2:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:52 2025 by rpki-client