Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/1wXfGd7qVEZvjONEGtwfeDwTcx4.roa
File: 1wXfGd7qVEZvjONEGtwfeDwTcx4.roa (raw, json)
Hash identifier: nCr0eUcSu2cm7Z30RPhN9TC54iL8KiU7u3yf2JVMH/U=
Subject key identifier: D7:05:DF:19:DE:EA:54:46:6F:8C:E3:44:1A:DC:1F:78:3C:13:73:1E
Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial: 0199EC52945347E3446D3FC148D983E5D7A2
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/1wXfGd7qVEZvjONEGtwfeDwTcx4.roa
Signing time: Thu 16 Oct 2025 09:20:58 +0000
ROA not before: Thu 16 Oct 2025 09:20:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44513
IP address blocks: 31.15.72.0/21 maxlen: 21
31.15.72.0/22 maxlen: 22
31.15.76.0/22 maxlen: 22
80.69.240.0/20 maxlen: 20
92.43.240.0/21 maxlen: 21
185.129.88.0/22 maxlen: 22
195.181.176.0/20 maxlen: 20
195.181.176.0/21 maxlen: 21
195.181.176.0/22 maxlen: 22
195.181.184.0/22 maxlen: 22
195.181.188.0/22 maxlen: 22
213.32.208.0/20 maxlen: 20
213.163.208.0/20 maxlen: 20
213.163.208.0/21 maxlen: 21
213.163.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:52:94:53:47:e3:44:6d:3f:c1:48:d9:83:e5:d7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Validity
Not Before: Oct 16 09:20:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d705df19deea54466f8ce3441adc1f783c13731e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:67:3d:de:56:c4:44:88:5d:48:88:49:56:
dd:3f:0e:7f:3e:eb:34:f7:15:e5:d7:c9:72:27:4b:
b7:3b:be:1c:a3:d7:04:c1:64:0e:26:06:29:a7:85:
ce:52:74:b5:79:71:66:d6:97:3f:ab:a3:cb:99:50:
e1:3f:e9:72:98:dc:97:8e:51:86:5b:1b:53:75:00:
74:8c:ad:e3:36:a7:01:ef:ab:c4:a1:61:43:95:78:
2b:38:8f:fd:f9:bc:20:5a:9f:53:84:57:ee:08:2a:
6b:f3:43:4c:d3:ae:86:35:a2:40:00:ff:d3:c1:2b:
03:5a:21:c7:6e:42:3e:88:9e:98:0f:12:25:60:f2:
ac:c8:13:30:48:cc:8b:4f:4b:71:39:7b:56:d0:c4:
df:53:dd:7a:b7:3a:86:50:15:93:32:f0:c5:11:f1:
75:f3:12:98:98:74:13:18:63:ba:99:94:8d:74:ac:
83:0a:61:14:81:26:c5:c1:61:cf:1c:2b:27:e3:26:
9d:96:8a:53:78:56:b2:d5:50:3b:c8:7b:f3:d9:5d:
fa:40:95:e3:94:8c:9d:fd:1e:df:ef:6a:15:55:96:
63:23:18:e2:47:f3:94:7d:c6:17:0d:69:70:1c:25:
02:aa:85:bb:68:c9:88:fd:67:7f:42:31:b7:c9:c2:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:05:DF:19:DE:EA:54:46:6F:8C:E3:44:1A:DC:1F:78:3C:13:73:1E
X509v3 Authority Key Identifier:
keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/1wXfGd7qVEZvjONEGtwfeDwTcx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.72.0/21
80.69.240.0/20
92.43.240.0/21
185.129.88.0/22
195.181.176.0/20
213.32.208.0/20
213.163.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:45:f7:a7:ce:2d:ac:09:4d:ee:4d:3a:5c:f8:22:22:4f:87:
11:34:03:89:fd:a2:89:b1:c6:c6:4b:8d:6e:87:09:69:0e:68:
c0:e5:78:2c:9b:9f:24:51:17:21:dc:d2:bb:00:72:23:77:53:
d4:ac:89:3a:ab:16:d5:21:84:57:55:92:76:c6:f8:d0:3c:e5:
29:75:28:33:e7:a8:cd:03:2e:95:95:a1:ce:eb:5f:59:7c:1f:
36:f4:43:29:f5:a7:8a:62:a0:06:85:bb:59:56:f7:68:6f:30:
8f:c6:e3:1c:10:7d:9f:a4:6c:51:a3:47:c9:59:5b:47:6d:00:
dc:8d:0e:37:80:9f:6f:3a:35:76:17:c1:b5:57:11:d8:d2:60:
8b:04:ce:ab:c7:df:1f:2c:8d:83:e5:41:e4:13:8a:6d:9f:3d:
c3:d0:93:14:53:30:c6:eb:af:45:17:33:7b:68:84:91:83:92:
91:a8:a5:ab:64:2e:42:39:68:57:dc:aa:43:96:f4:78:0b:07:
4c:4b:2e:22:f6:c8:ab:ea:07:e6:54:d7:d1:a7:03:18:75:cd:
ef:8d:34:53:3b:aa:35:cd:25:29:06:c5:f9:b5:0c:d0:f8:66:
56:0f:7d:e6:73:82:97:24:78:d8:89:9c:f1:94:6c:4f:43:a8:
7a:ae:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:31 2025 by rpki-client