Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JS7O6saharRuvCL9U_REB-wtrD0.roa
File: JS7O6saharRuvCL9U_REB-wtrD0.roa (raw, json)
Hash identifier: 0FYgFn4e/OmZcBrT4HPrz4XjnafFhGfCaBVzZaX8+1s=
Subject key identifier: 25:2E:CE:EA:C6:A1:6A:B4:6E:BC:22:FD:53:F4:44:07:EC:2D:AC:3D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0198A2021EEBADF411AC36176B41138A896F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JS7O6saharRuvCL9U_REB-wtrD0.roa
Signing time: Wed 13 Aug 2025 05:58:24 +0000
ROA not before: Wed 13 Aug 2025 05:58:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45014
IP address blocks: 84.233.136.0/24 maxlen: 24
84.233.141.0/24 maxlen: 24
84.233.142.0/24 maxlen: 24
84.233.146.0/24 maxlen: 24
84.233.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:02:1e:eb:ad:f4:11:ac:36:17:6b:41:13:8a:89:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 13 05:58:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=252eceeac6a16ab46ebc22fd53f44407ec2dac3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:d4:e1:9e:4e:cd:29:9e:23:23:16:0a:52:
2c:95:84:93:bd:40:4c:b3:3f:e5:81:e1:8b:d0:77:
24:eb:98:12:ea:d5:2b:12:d7:36:25:28:a6:ed:43:
f3:88:8e:48:89:12:e3:aa:de:dd:67:79:42:a4:e7:
b9:84:a3:bd:34:fb:92:3f:9c:0a:f7:c6:ff:2b:8b:
e7:6f:9d:15:01:91:17:27:c3:bb:d7:f0:0c:c5:04:
60:af:e2:3e:41:21:4f:41:e4:df:10:55:65:03:df:
7a:08:ba:20:53:51:19:7c:6e:e5:d3:65:61:50:6c:
b4:4f:c1:1b:87:3f:f2:ce:64:1c:4b:26:93:4a:ec:
db:2e:ad:d4:22:9c:f0:4a:ef:84:2c:90:e2:5e:b2:
04:bf:c7:73:04:c6:33:81:29:9d:79:86:9a:ed:47:
78:28:e4:04:c2:19:e7:20:d0:a5:5a:49:ad:79:61:
d2:a6:9d:f1:2a:8d:10:ec:76:d0:82:de:c5:b1:59:
f0:47:36:0a:c3:59:c9:4e:02:8a:38:4c:6e:e9:08:
74:7b:85:de:fa:5b:36:4f:e7:94:ed:81:a3:fe:12:
cd:d0:d2:b2:0a:e3:5e:93:50:4e:ec:86:69:b2:92:
d5:75:20:e0:e7:e3:7f:f4:72:48:4b:0e:57:ec:d1:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:CE:EA:C6:A1:6A:B4:6E:BC:22:FD:53:F4:44:07:EC:2D:AC:3D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JS7O6saharRuvCL9U_REB-wtrD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.233.136.0/24
84.233.141.0-84.233.142.255
84.233.146.0/24
84.233.156.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f4:c4:1d:ed:84:25:98:17:36:1f:a3:f4:9f:da:74:f6:f9:
3b:72:eb:d3:fe:4f:65:51:46:4d:e2:e8:ae:b2:85:d9:d9:49:
19:64:96:4d:ec:6c:c5:ae:1a:fa:0e:73:58:ca:03:e9:9d:07:
07:26:aa:56:6f:1a:cf:fd:0f:59:9a:29:d8:db:df:58:da:4d:
ed:ce:9f:19:31:8f:70:9f:24:bb:01:71:1c:00:d0:f4:56:79:
b9:83:9a:17:aa:67:90:fb:af:d4:87:cc:7c:c4:cb:31:cd:8f:
af:bf:d4:00:00:e7:ed:e7:fc:07:8b:c9:11:53:76:c2:df:28:
51:5e:fe:fd:ec:75:83:9e:63:64:47:ac:e4:9a:50:88:19:30:
06:14:80:b9:e2:c4:dc:17:93:5d:45:d0:a5:2b:a3:1a:53:78:
5d:fc:1d:c8:df:fd:a9:d5:17:23:fd:6d:0b:e5:6a:6c:bb:eb:
85:49:63:67:cd:ea:b4:9e:8e:a9:0c:a7:ef:0d:47:21:e3:e4:
38:1c:bf:12:08:db:25:64:cb:33:4d:5a:3d:6c:35:0b:9d:79:
78:b6:2a:4f:57:19:bb:17:05:99:9f:87:f5:df:03:e0:25:29:
05:ad:c2:b1:8a:45:ac:ef:f7:50:03:b9:dd:85:fc:ee:72:50:
66:95:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:26 2025 by rpki-client