Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/JEJEXnX60I5Jo-xb1R1lG7VQj0s.roa
File: JEJEXnX60I5Jo-xb1R1lG7VQj0s.roa (raw, json)
Hash identifier: l/gL9lI2eMfRXxgl8LBJmFmTtW4VYwoOIblpJwQi6UM=
Subject key identifier: 24:42:44:5E:75:FA:D0:8E:49:A3:EC:5B:D5:1D:65:1B:B5:50:8F:4B
Certificate issuer: /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial: 0196B0C5B9E09E0666DFC2DDDF4762970280
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/JEJEXnX60I5Jo-xb1R1lG7VQj0s.roa
Signing time: Thu 08 May 2025 16:41:10 +0000
ROA not before: Thu 08 May 2025 16:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35236
IP address blocks: 31.170.176.0/21 maxlen: 24
45.91.28.0/22 maxlen: 24
109.205.72.0/21 maxlen: 24
109.205.76.0/22 maxlen: 24
185.124.80.0/22 maxlen: 24
188.92.96.0/21 maxlen: 24
2a00:1238::/32 maxlen: 48
2a00:1238:3::/48 maxlen: 48
2a0e:25c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:c5:b9:e0:9e:06:66:df:c2:dd:df:47:62:97:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Validity
Not Before: May 8 16:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2442445e75fad08e49a3ec5bd51d651bb5508f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:59:36:a3:8e:c0:22:80:92:54:0a:45:b3:
9d:ac:40:4b:84:e7:c2:68:73:f2:a7:71:53:6c:dd:
b8:5a:64:25:27:36:7b:00:20:e7:b1:95:f1:91:77:
f5:d0:01:0f:3f:2d:d5:5a:aa:9b:09:a6:83:09:74:
2e:41:3e:95:e1:a3:b1:c4:38:7c:1d:92:e4:7f:b6:
ae:44:83:b1:3d:b6:61:07:17:4d:4c:11:65:6c:94:
4d:93:db:ee:d2:fa:48:8c:b7:54:f0:7b:49:67:f4:
95:55:8a:76:df:c2:8f:d8:ec:ef:5a:e0:f5:47:90:
51:d1:87:75:c4:10:fd:1f:76:1c:ba:72:51:82:3e:
9c:07:89:71:6d:25:17:4b:78:a3:4f:f5:38:e3:10:
75:e1:43:14:83:4f:36:95:cd:6c:24:57:20:e0:c2:
87:a2:b1:22:a7:97:19:d4:44:b1:50:9c:51:57:09:
21:04:fc:a0:63:e7:55:2c:21:c4:fb:67:5a:fd:25:
1d:a5:ed:16:96:46:43:7c:57:14:50:a4:c3:76:7d:
18:ba:f4:51:f6:90:ee:98:af:6d:14:85:36:5f:dd:
b3:78:bd:fa:24:f6:07:1a:a0:53:3e:72:94:5b:dd:
90:bf:90:7a:67:07:3a:e5:27:77:d4:d4:f3:25:40:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:42:44:5E:75:FA:D0:8E:49:A3:EC:5B:D5:1D:65:1B:B5:50:8F:4B
X509v3 Authority Key Identifier:
keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/JEJEXnX60I5Jo-xb1R1lG7VQj0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.176.0/21
45.91.28.0/22
109.205.72.0/21
185.124.80.0/22
188.92.96.0/21
IPv6:
2a00:1238::/32
2a0e:25c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:11:2f:49:48:29:ef:65:7e:e4:ac:ee:e5:77:ee:a5:f8:c8:
71:45:54:4d:9b:52:d8:4a:48:5e:5b:58:84:51:ec:8f:a2:f8:
16:be:9f:25:3a:11:6a:17:84:d8:d2:4f:c3:e0:fc:5c:71:01:
7e:af:cd:ff:76:a6:7d:ab:2a:af:df:e5:0e:f4:43:86:d8:43:
63:f9:37:11:a6:8c:a3:ad:8c:07:16:80:0c:3c:db:eb:dc:fa:
56:4f:b6:2a:73:3b:f2:81:23:c4:82:a9:97:47:01:62:3c:5c:
87:ab:d0:5a:24:36:0a:c8:20:3b:05:26:f3:24:41:25:4e:65:
ab:b1:dd:ef:88:11:20:ca:44:ff:cb:95:91:de:43:fc:28:71:
1b:cc:e2:23:49:52:71:cc:87:fa:51:db:45:e2:c0:b1:ce:5f:
f9:25:d8:a2:a4:d8:0b:5e:8a:1a:f3:75:81:bb:5c:82:cf:70:
bd:fb:47:cc:48:ee:8d:81:0c:f5:60:f1:20:12:4b:0e:70:c1:
26:34:b8:e9:85:7e:26:c1:90:3a:bd:9d:63:ae:f1:83:db:59:
94:a1:93:95:e0:9f:14:a3:60:05:70:91:2e:d8:7d:c3:7a:40:
7e:f4:a1:de:14:47:d1:4d:7b:99:5b:80:9c:48:f6:3b:9e:d9:
ca:81:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:49:20 2025 by rpki-client