Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/JPWgfoIicBY7uqLCE-abW2DSU0c.roa
File: JPWgfoIicBY7uqLCE-abW2DSU0c.roa (raw, json)
Hash identifier: A927JecYLMujCKzkMKtyVfZVMSoezFJjSy/bYsYd8SE=
Subject key identifier: 24:F5:A0:7E:82:22:70:16:3B:BA:A2:C2:13:E6:9B:5B:60:D2:53:47
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0198A33C26118390CAEDFE208489123B11B2
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/JPWgfoIicBY7uqLCE-abW2DSU0c.roa
Signing time: Wed 13 Aug 2025 11:41:24 +0000
ROA not before: Wed 13 Aug 2025 11:41:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42151
IP address blocks: 212.22.83.0/24 maxlen: 24
2a09:d002::/48 maxlen: 48
2a09:d003::/48 maxlen: 48
2a09:d004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:3c:26:11:83:90:ca:ed:fe:20:84:89:12:3b:11:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Aug 13 11:41:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24f5a07e822270163bbaa2c213e69b5b60d25347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:7f:8a:52:cf:33:51:7d:3f:21:0d:36:91:
4c:1c:db:9f:00:50:0f:b4:d4:58:59:0a:e5:71:d7:
95:27:cf:ca:0f:a3:fb:a0:47:55:87:2f:59:72:2f:
14:07:8e:21:df:7c:a3:0c:bd:13:96:f3:a2:83:3a:
6b:4a:c9:40:51:04:b2:b6:bf:67:99:98:82:06:de:
c5:dd:94:d9:99:e9:08:da:88:ce:8d:dd:5f:21:4c:
62:8e:0b:5b:d4:df:3b:63:44:9b:7a:7b:a5:69:fa:
6b:67:6d:65:c5:23:78:bf:36:37:c6:11:bf:23:3d:
49:b6:3a:26:9f:8a:15:e1:13:a7:af:45:6e:cc:89:
96:4f:41:bf:d9:7e:2b:75:f2:88:1f:c3:4d:6a:f1:
48:3f:a6:ad:4f:80:92:7d:4f:93:ed:6f:ec:2f:63:
64:4b:6d:d7:06:ea:29:bf:85:a6:77:00:b1:05:ed:
59:ed:61:f9:3e:2e:a4:e2:c7:56:fa:53:24:6c:69:
c1:08:3e:13:6a:49:70:e4:ff:bf:5e:d5:f1:90:d3:
65:de:f6:ee:1a:e1:6b:5f:40:86:a4:57:03:97:f6:
a5:00:7f:32:92:13:db:5c:ef:bb:20:9a:22:38:9f:
2d:6c:e7:94:b7:ca:e6:cc:9f:4f:f3:88:38:c2:4d:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:A0:7E:82:22:70:16:3B:BA:A2:C2:13:E6:9B:5B:60:D2:53:47
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/JPWgfoIicBY7uqLCE-abW2DSU0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.83.0/24
IPv6:
2a09:d002::/48
2a09:d003::/48
2a09:d004::/48
Signature Algorithm: sha256WithRSAEncryption
17:69:e3:37:d9:f7:03:3a:7c:d4:52:08:bf:68:8b:8f:5b:9b:
30:c8:9c:76:6d:13:32:69:6c:9a:02:92:9f:12:33:a3:ad:66:
e9:67:a7:72:b9:96:5d:97:cc:98:64:37:02:c8:78:f9:4f:1b:
95:24:04:93:b5:3a:53:2a:7c:6a:f4:26:37:22:a3:c6:87:3f:
e0:b6:d9:9e:40:32:03:b8:6e:28:48:e3:db:00:d8:0a:cd:72:
5f:88:58:5d:11:c1:b1:cb:6e:a2:f7:2f:b0:54:b9:07:2c:11:
78:6b:a2:ea:13:87:50:0f:20:4e:ae:6a:aa:45:a5:92:00:44:
b5:b4:c7:c8:c5:48:f2:2d:59:3d:6c:4c:5b:54:db:83:40:19:
13:6f:2e:77:be:f6:7b:ce:36:a0:4c:26:5d:6f:eb:18:6c:93:
6c:b6:f2:43:ac:1c:db:d0:77:e4:30:27:c6:a0:51:91:a9:14:
7d:38:d2:8d:e7:80:35:f7:18:4e:c8:ac:cd:f1:44:17:32:9e:
70:a3:f3:08:e3:4c:c6:30:4d:e9:91:fb:3a:2c:66:78:82:15:
a8:8c:f7:c6:3d:29:09:e8:17:83:49:77:2e:c1:fe:f8:c2:f0:
a2:f2:ee:49:71:0c:65:b0:dd:f4:4e:f1:9c:8e:84:6a:78:66:
ee:b0:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:21:45 2025 by rpki-client