Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JIRpBAPBTj1foaMLB6zQV-t5D7g.roa
File: JIRpBAPBTj1foaMLB6zQV-t5D7g.roa (raw, json)
Hash identifier: cOxFMukxR3HBmsrKvf0cZ9SsiIgaOp0bcA+qYCY+JKc=
Subject key identifier: 24:84:69:04:03:C1:4E:3D:5F:A1:A3:0B:07:AC:D0:57:EB:79:0F:B8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01993D0583D10E99B51409C99DD43E35B833
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JIRpBAPBTj1foaMLB6zQV-t5D7g.roa
Signing time: Fri 12 Sep 2025 08:23:15 +0000
ROA not before: Fri 12 Sep 2025 08:23:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203061
IP address blocks: 93.152.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:05:83:d1:0e:99:b5:14:09:c9:9d:d4:3e:35:b8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 12 08:23:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2484690403c14e3d5fa1a30b07acd057eb790fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:36:79:34:e5:1a:ba:d9:ed:20:a6:49:a9:
f3:c8:cb:23:28:32:77:cc:51:9c:83:ff:b6:8b:ba:
6b:c8:dd:a1:bd:47:97:42:6e:58:90:b4:a3:86:e8:
68:5a:fa:a0:be:6f:02:70:ef:93:31:07:d4:c9:91:
e4:9b:0e:65:b9:98:76:6c:45:c5:9b:b6:08:b4:33:
ff:59:75:fb:94:34:2b:cf:29:c1:42:b5:0f:d4:83:
48:e6:f9:dd:47:dd:e1:20:40:a9:10:ab:8e:d5:db:
59:f2:23:c3:5b:3c:7d:29:72:9f:51:46:e4:39:ed:
1c:d1:c3:1e:41:b2:f4:c4:1d:6d:44:68:29:ba:e3:
8c:36:fd:11:3c:6a:49:a4:7a:12:4e:04:5a:0d:4b:
dc:13:27:7a:c1:97:a3:3f:84:e6:6d:a5:fb:42:c9:
73:b4:04:44:42:8f:50:0a:04:55:a2:87:70:89:a5:
da:5f:59:5f:b6:8a:ab:89:e4:a7:b0:d0:1c:b7:9b:
f1:5c:be:5d:b2:6e:50:5c:a2:be:da:1f:d3:b4:52:
31:b7:80:64:30:0e:67:bc:6c:88:f2:e4:74:69:7b:
a6:be:0b:5e:0e:c9:3e:05:a2:98:c9:d4:3f:70:d3:
5a:a9:39:2b:10:b9:e4:32:3e:42:10:13:f7:9c:77:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:69:04:03:C1:4E:3D:5F:A1:A3:0B:07:AC:D0:57:EB:79:0F:B8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JIRpBAPBTj1foaMLB6zQV-t5D7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.100.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:8e:6a:f3:d0:26:43:5d:b4:ed:5a:3c:be:ed:16:c9:f2:77:
0b:a9:63:c2:21:b2:35:63:a5:66:8f:5e:24:98:77:02:7d:e2:
94:d3:40:0d:4b:0b:3b:12:dc:01:40:d1:ff:fa:b7:84:b0:51:
e5:1e:cf:4a:b2:02:f8:13:bc:c6:5b:46:45:90:da:48:99:87:
61:b1:25:32:53:46:61:65:4b:19:bf:f8:ac:46:fb:ac:4c:d3:
db:f1:20:57:f4:22:88:97:8f:56:41:42:06:50:73:d9:14:93:
9e:4f:24:62:2d:4a:ae:89:a2:eb:fc:bb:e2:b6:f4:2a:63:6d:
06:07:9b:23:da:bf:a4:81:b6:ec:90:60:3d:b7:01:b4:cc:0b:
da:13:0c:11:08:2a:b1:2a:a2:07:36:95:ea:f9:23:02:78:5f:
4b:12:37:59:8d:e3:b1:6e:53:bb:4b:0a:99:de:3f:10:bb:1d:
25:fb:7f:c4:1d:4d:49:09:7c:3c:f2:ef:93:ac:72:61:8f:73:
07:96:dd:9f:46:74:08:d5:26:de:6f:2a:51:71:0e:bc:94:f4:
4f:53:b3:07:f1:ce:42:1f:56:f8:4e:51:96:a5:46:5b:b0:74:
2f:8a:4b:e6:e7:f9:bd:03:48:94:7d:a5:6b:a5:0c:e5:de:67:
51:c2:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:53 2025 by rpki-client