Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/jCupyTailD4J3l_LQLBvtP05gjk.roa
File: jCupyTailD4J3l_LQLBvtP05gjk.roa (raw, json)
Hash identifier: D5HBTRbrPgt5UiMToMLoELxSS8TE8kgjWsHI9+xY4kE=
Subject key identifier: 8C:2B:A9:C9:36:A2:94:3E:09:DE:5F:CB:40:B0:6F:B4:FD:39:82:39
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01978227386704292D78D8D923CB4149F566
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/jCupyTailD4J3l_LQLBvtP05gjk.roa
Signing time: Wed 18 Jun 2025 08:28:17 +0000
ROA not before: Wed 18 Jun 2025 08:28:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22516
IP address blocks: 89.187.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:27:38:67:04:29:2d:78:d8:d9:23:cb:41:49:f5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jun 18 08:28:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c2ba9c936a2943e09de5fcb40b06fb4fd398239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:a8:0a:6c:8d:65:20:22:b7:22:65:59:97:
90:ec:bd:23:da:0f:e7:5c:11:57:ee:61:fe:57:92:
ad:eb:28:0e:ff:47:e3:4d:a9:94:96:37:34:1d:fa:
11:8d:cc:ba:6f:08:41:ea:8d:f0:92:b3:77:c2:eb:
69:20:10:b1:e2:3b:64:0b:de:5a:a0:46:cb:25:93:
0a:42:4a:81:81:fc:26:72:77:f0:eb:1a:05:23:08:
ab:aa:17:93:63:ea:ce:31:17:fd:8c:d8:c7:2b:51:
ef:80:d7:99:b7:73:ed:0e:f3:3b:a0:4d:ef:78:90:
f2:0c:d4:d9:49:8f:ca:9b:8e:a0:e5:4e:ac:7c:c8:
92:44:7f:1a:3b:51:f5:11:0d:b6:17:c6:4a:55:31:
6e:e6:71:e3:57:c8:0b:61:e6:0a:04:77:a0:3b:11:
52:d7:0d:63:4c:d3:6e:32:5a:0c:58:3c:2f:ce:98:
31:34:ff:37:29:ea:ce:06:bb:98:3f:3d:bd:d6:87:
af:35:5d:48:c6:8b:32:2a:ac:2e:99:63:b4:24:90:
64:fd:cb:d7:78:7d:6f:4b:7b:19:ea:4f:dd:1f:24:
20:10:0b:f3:14:69:7e:b0:38:32:19:d9:e5:b6:87:
22:3a:6c:97:9c:37:0c:72:18:5f:93:bd:f8:9b:d4:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2B:A9:C9:36:A2:94:3E:09:DE:5F:CB:40:B0:6F:B4:FD:39:82:39
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/jCupyTailD4J3l_LQLBvtP05gjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:d8:97:d3:32:3b:07:1d:e5:6a:cb:a7:77:3d:88:a1:28:d8:
12:e8:c8:36:1c:c0:88:43:74:f9:e0:97:df:a6:8c:ef:6f:37:
d7:a9:a7:32:e1:c7:30:71:24:53:b8:6c:18:13:08:f2:7d:ed:
e8:18:a9:19:78:24:09:aa:d7:35:a5:b1:81:ac:fb:7e:8f:58:
0c:4b:1e:6e:eb:05:ed:6f:5c:16:3e:c9:92:25:d4:a2:3d:d1:
30:f3:33:29:20:eb:06:60:55:79:09:4d:9e:e9:74:d6:8a:49:
38:36:06:6f:5c:1a:42:48:4d:8d:1b:bd:2e:e1:31:eb:67:88:
73:36:8b:d8:4e:2a:7c:93:40:e3:f3:81:ab:cb:fa:01:c7:99:
8c:22:96:d1:6d:d3:cb:f5:12:3d:10:e1:4d:14:c7:dc:9c:06:
7e:a0:12:36:7f:59:60:a0:8e:de:f3:0b:a6:4d:32:f6:f2:96:
c5:e9:64:cc:a0:a0:82:58:68:b2:52:bc:4b:d2:f3:6a:4c:4f:
87:79:a8:91:fe:53:a9:d5:3e:f1:b7:69:f4:77:d6:30:57:9a:
a6:6e:59:4d:61:6f:41:95:81:63:ba:b1:ef:37:ad:04:b4:b1:
c4:bd:19:18:10:00:6a:63:5c:ea:74:eb:af:1a:05:64:f8:17:
33:b4:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:58:44 2025 by rpki-client