Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/JBF4nmB_9dA41I4-h-2ocy7VHRY.roa
File: JBF4nmB_9dA41I4-h-2ocy7VHRY.roa (raw, json)
Hash identifier: TnEvzmeVW0oV1dW+VOZZ6uxDCsLJLLDwXJNqVjj4CQA=
Subject key identifier: 24:11:78:9E:60:7F:F5:D0:38:D4:8E:3E:87:ED:A8:73:2E:D5:1D:16
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 01997067EF61B0C1C79EDC4E7329AC05DDA4
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/JBF4nmB_9dA41I4-h-2ocy7VHRY.roa
Signing time: Mon 22 Sep 2025 07:51:23 +0000
ROA not before: Mon 22 Sep 2025 07:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12429
IP address blocks: 195.186.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:67:ef:61:b0:c1:c7:9e:dc:4e:73:29:ac:05:dd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Sep 22 07:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2411789e607ff5d038d48e3e87eda8732ed51d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:cc:38:c5:7c:6d:3b:24:0d:f0:ac:c6:d5:
3b:eb:3b:5a:cf:97:ae:41:bc:41:4e:f5:ee:bd:7a:
b1:19:6c:20:1c:da:ec:43:f6:8b:c8:9a:a3:44:2e:
08:c3:d5:2a:e9:e6:b5:cd:be:eb:3c:cd:32:12:72:
d6:82:67:0f:d4:0c:9a:01:1e:5b:73:8e:36:c4:bc:
b2:2a:37:4f:a6:04:5d:3c:4b:c9:c7:34:a2:36:0e:
62:0c:ae:bc:67:47:ca:83:53:d7:5b:6c:57:9d:ed:
17:ca:ea:b9:7d:27:d5:e2:e5:5c:c9:81:f3:e6:3a:
0f:68:16:24:a1:12:64:6d:81:a8:2f:09:a9:91:cb:
c0:73:ff:a0:9c:c5:9d:a4:53:9d:f1:4d:5d:a2:6c:
3c:05:07:e3:5b:2a:1e:10:45:6a:79:c0:65:bf:3f:
8f:6a:64:ca:26:65:2c:3b:68:1a:a0:7e:3f:d6:d9:
1e:90:16:88:60:03:5c:cd:96:3d:d4:46:d7:04:70:
75:7e:9b:85:94:cd:2a:b8:13:3a:0e:03:63:d2:9e:
31:cd:6b:5f:bc:e6:90:5e:18:19:67:fd:93:bc:d8:
4d:6a:60:cd:c6:7c:0b:54:ed:11:9b:e4:4c:7b:94:
43:2d:c6:6a:4b:43:c0:b2:2d:de:14:34:28:61:9a:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:11:78:9E:60:7F:F5:D0:38:D4:8E:3E:87:ED:A8:73:2E:D5:1D:16
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/JBF4nmB_9dA41I4-h-2ocy7VHRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.186.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:e5:4c:67:10:18:f3:a2:56:b5:02:91:d0:f7:f9:db:bb:86:
67:7d:43:87:9e:56:0f:5d:3d:10:18:94:36:08:a8:0a:ee:0e:
d6:31:dc:71:2d:b0:3f:56:63:03:99:b8:c1:24:bf:58:d7:fb:
c3:39:45:c9:c8:bc:cb:d8:7d:f3:c2:db:62:ee:b6:21:ea:7a:
55:1c:54:78:5d:c5:79:f0:1f:06:48:dc:1e:a4:db:00:88:1f:
92:84:79:58:35:a7:b9:03:0e:d5:8e:90:ae:39:e9:80:27:11:
27:e3:9c:e6:7b:9d:da:28:14:f1:14:23:39:48:b1:dc:f0:a0:
39:f6:1c:ef:ad:7a:f0:e8:dc:25:d8:55:2d:00:80:c1:81:36:
64:3e:38:51:12:29:8d:d6:66:39:a7:cf:e3:00:ad:7c:ad:46:
30:b0:3b:59:9c:0f:ff:11:ef:55:52:f9:9e:db:bd:17:f9:f1:
85:3b:79:7e:df:34:c7:53:43:9d:6c:ef:81:c2:b5:56:32:1e:
4d:95:2c:f2:3e:67:eb:b2:ca:3c:25:0c:fd:1d:8c:61:9d:4e:
a2:f1:a6:55:80:d4:44:8a:41:26:be:95:a3:d5:bc:8b:3a:1e:
a6:37:25:15:1d:dd:8f:9d:4a:92:6f:77:33:ac:e7:a9:f3:49:
50:41:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:18 2025 by rpki-client