Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jd_R7dyRdAWM6Q0i4lL2DIJD7ic.roa
File: jd_R7dyRdAWM6Q0i4lL2DIJD7ic.roa (raw, json)
Hash identifier: M0KAAm1B9H2+lfkZLpM6f0yCtU3BkSPWV+ZttCxXKJc=
Subject key identifier: 8D:DF:D1:ED:DC:91:74:05:8C:E9:0D:22:E2:52:F6:0C:82:43:EE:27
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198D1EA3830A84CE6B8600A3D8AC889AF4B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jd_R7dyRdAWM6Q0i4lL2DIJD7ic.roa
Signing time: Fri 22 Aug 2025 13:14:04 +0000
ROA not before: Fri 22 Aug 2025 13:14:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205896
IP address blocks: 178.253.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:ea:38:30:a8:4c:e6:b8:60:0a:3d:8a:c8:89:af:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 22 13:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ddfd1eddc9174058ce90d22e252f60c8243ee27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:1b:76:77:19:37:dc:90:4f:06:ce:a6:08:
2f:f5:c9:e9:89:26:eb:ea:4b:21:ac:2e:dc:7e:6d:
e0:6e:d3:b4:ca:5e:6a:f6:0b:74:9c:16:71:d9:46:
12:8e:6d:22:fa:e1:21:ff:a9:f8:fd:79:bc:a8:1b:
12:1b:87:10:59:c2:93:6e:b1:5a:14:58:1d:e2:5c:
81:1a:d9:62:7f:8c:ae:45:3a:2f:b3:dd:28:3e:d6:
83:bf:57:2c:88:ab:7d:e2:8f:8b:df:3f:ec:5f:e9:
9b:77:af:df:0a:20:ea:86:9a:fb:5f:f2:a7:a6:5b:
2b:99:0e:41:61:65:84:0d:4c:87:ad:b7:82:3d:2d:
cd:69:eb:b1:3f:01:8e:05:ef:7c:78:d4:60:fa:b1:
c9:47:da:d2:e6:07:b4:49:a8:3a:26:e4:ef:95:68:
23:d5:f4:77:47:27:b8:34:9a:a0:ca:f0:64:1d:36:
6e:c4:f1:2f:b9:f0:4d:5d:8b:d5:da:dc:ec:81:df:
73:7d:50:54:8e:c4:7e:ee:b1:04:15:d4:c6:1d:90:
75:1a:91:d3:b3:e8:25:de:60:97:f3:33:df:b2:ce:
28:18:ca:89:a2:80:52:44:b2:e1:23:92:6f:67:37:
8b:91:85:1d:ef:c5:fc:42:07:e7:e7:23:5a:bd:f5:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DF:D1:ED:DC:91:74:05:8C:E9:0D:22:E2:52:F6:0C:82:43:EE:27
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jd_R7dyRdAWM6Q0i4lL2DIJD7ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:30:5a:7f:a7:4a:7a:48:2c:ce:a0:77:fd:45:6e:5c:36:d2:
14:66:a1:ea:33:5e:29:e5:20:f3:ef:53:27:05:3f:9b:7a:62:
f4:c0:3e:de:e0:51:77:8d:4d:ed:b7:46:71:3d:17:e3:e0:af:
3b:78:e0:16:fc:11:d1:f5:6e:16:dd:56:35:62:b4:63:44:45:
33:bc:54:c3:39:8c:c1:b5:ec:1f:5a:c8:db:20:50:14:76:3b:
72:b7:93:ba:12:58:c1:25:e0:f6:42:4d:17:3e:42:76:b9:27:
bb:ea:4d:e7:7a:4b:54:98:4b:7f:29:c9:33:b2:1f:09:a2:47:
d1:c1:70:e5:07:d8:9b:68:a4:54:86:b2:7a:68:ce:fc:99:eb:
4f:ab:1e:e3:3e:83:24:dd:b7:be:59:38:12:8c:40:2d:8b:fc:
7b:4b:31:59:ba:d9:86:b7:52:74:da:09:0e:68:82:a8:fb:8a:
fb:12:67:b0:a5:75:99:ca:62:c2:2b:c4:3a:2b:90:fa:8b:66:
d6:ed:f9:7b:bf:b2:55:d7:0a:b6:e8:cc:9f:75:a2:d6:e8:b6:
22:93:8e:3c:8c:34:fb:db:a9:c6:38:06:88:87:a0:5d:fe:8b:
81:cd:61:76:04:dd:1d:d5:7c:fe:fc:f2:76:77:8b:fa:f6:2c:
ec:c5:53:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:45 2025 by rpki-client