Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Jw-3RMa0_nreBdmSOnS5acUnEgk.roa
File: Jw-3RMa0_nreBdmSOnS5acUnEgk.roa (raw, json)
Hash identifier: d1blNjr0+Xuymi8ANzyoOFBXC7kTMhL5zRoOue8VHPI=
Subject key identifier: 27:0F:B7:44:C6:B4:FE:7A:DE:05:D9:92:3A:74:B9:69:C5:27:12:09
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199B35958080E248AFB55AB4480B62B08C0
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Jw-3RMa0_nreBdmSOnS5acUnEgk.roa
Signing time: Sun 05 Oct 2025 07:50:00 +0000
ROA not before: Sun 05 Oct 2025 07:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 135.196.155.0/24 maxlen: 24
135.196.166.0/24 maxlen: 24
135.196.236.0/24 maxlen: 24
135.196.244.0/24 maxlen: 24
135.196.248.0/24 maxlen: 24
135.196.252.0/24 maxlen: 24
135.196.254.0/24 maxlen: 24
194.231.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b3:59:58:08:0e:24:8a:fb:55:ab:44:80:b6:2b:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 07:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=270fb744c6b4fe7ade05d9923a74b969c5271209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:ed:4c:cc:b7:8d:d7:4b:90:24:74:75:f6:
33:3b:0b:ca:88:6e:b2:5f:c9:54:5f:c1:4d:63:eb:
d7:5e:0a:e5:16:6b:09:66:a0:69:52:f5:e7:f6:87:
6b:3a:60:ff:db:bc:56:aa:0b:63:f0:26:74:9c:68:
bd:c2:b2:b9:c1:11:11:a3:e1:b3:94:b7:b9:1f:95:
03:a5:8d:35:5d:a8:a0:70:f5:80:5d:7c:d9:d7:c1:
b2:47:67:f7:9f:af:d6:41:11:ba:08:ed:0c:3c:93:
51:ec:fd:38:56:3c:1a:ef:fc:5c:99:14:30:be:bd:
c4:ff:9c:b9:87:e0:ff:84:13:db:3d:8e:c3:f6:af:
e9:27:72:c6:9e:54:ee:0b:5a:ec:5b:82:eb:ed:ee:
06:ab:41:b5:e9:93:20:00:9b:32:48:7d:a2:85:82:
14:09:6b:43:66:74:c6:4f:14:02:65:49:fd:1e:1c:
1f:dd:a1:49:f6:95:73:62:7e:33:05:d7:73:e6:4a:
45:d5:f8:38:1f:75:63:76:36:a7:c1:cf:2c:f0:d6:
fe:bd:94:39:75:80:0b:c5:c8:82:4b:32:26:85:4e:
11:a2:e9:75:db:65:1b:8b:b0:04:a0:3c:d1:9e:1d:
c7:b5:8f:8a:73:9a:78:6d:ac:de:d8:d7:73:37:ae:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0F:B7:44:C6:B4:FE:7A:DE:05:D9:92:3A:74:B9:69:C5:27:12:09
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Jw-3RMa0_nreBdmSOnS5acUnEgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.196.155.0/24
135.196.166.0/24
135.196.236.0/24
135.196.244.0/24
135.196.248.0/24
135.196.252.0/24
135.196.254.0/24
194.231.144.0/22
Signature Algorithm: sha256WithRSAEncryption
49:b1:b6:23:a8:c7:08:09:46:15:be:4a:8b:48:31:d9:38:bd:
10:83:b4:57:ff:c5:92:f5:1d:ad:ce:a2:cc:a3:e1:d6:0e:dc:
73:10:c0:0b:2b:d2:ae:67:99:7c:8c:2f:91:b7:88:ca:87:a9:
96:fb:a1:92:9d:63:fe:a3:57:7d:f9:5f:27:43:b6:cb:48:c9:
55:f1:cc:6e:0a:6a:ad:d9:dd:84:2d:29:2a:46:67:36:85:39:
4c:df:e6:af:24:60:d2:be:78:b2:eb:8b:2d:2c:51:db:2a:8b:
5b:cc:50:04:22:42:54:bd:27:62:63:ac:64:59:50:ae:be:0c:
8c:a6:4b:b4:ac:ab:a2:85:67:61:26:99:0b:02:c1:3b:aa:db:
86:2f:fc:26:b3:65:48:81:a9:f9:38:23:3f:d0:4d:e8:5d:eb:
bc:e1:99:a5:0d:dd:87:2f:c3:28:ce:65:0c:25:37:bf:68:e0:
14:42:19:14:10:2f:df:fa:2f:ea:69:e0:3f:9e:39:fe:b0:5c:
b1:cf:e5:5a:9a:01:81:c1:c1:01:c8:f3:d7:e0:c5:28:bd:4a:
e5:8e:eb:60:c9:d9:ba:56:f2:e2:05:00:ec:94:21:c1:ba:cb:
6d:8c:6a:a4:59:f4:71:27:92:62:ff:97:1c:82:cf:2f:b7:13:
fd:b2:21:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:26 2025 by rpki-client