Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/JIju3Zu3gqnn8i4w1MTEOOx7hro.roa
File: JIju3Zu3gqnn8i4w1MTEOOx7hro.roa (raw, json)
Hash identifier: dCgTEEXu0bVao+NC3O8cgRpfY5p29zC65jhR3uUto00=
Subject key identifier: 24:88:EE:DD:9B:B7:82:A9:E7:F2:2E:30:D4:C4:C4:38:EC:7B:86:BA
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0197A1802937186278145E14FA6F2BA0F1ED
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/JIju3Zu3gqnn8i4w1MTEOOx7hro.roa
Signing time: Tue 24 Jun 2025 10:33:40 +0000
ROA not before: Tue 24 Jun 2025 10:33:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60707
IP address blocks: 80.253.244.0/24 maxlen: 24
80.253.245.0/24 maxlen: 24
80.253.247.0/24 maxlen: 24
91.151.83.0/24 maxlen: 24
91.151.84.0/24 maxlen: 24
213.142.135.0/24 maxlen: 24
213.142.143.0/24 maxlen: 24
2a01:ed80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:80:29:37:18:62:78:14:5e:14:fa:6f:2b:a0:f1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Jun 24 10:33:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2488eedd9bb782a9e7f22e30d4c4c438ec7b86ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:a2:d1:b1:e1:12:a0:73:99:6d:74:10:c3:
b3:fb:a4:e1:a5:53:c2:64:92:47:84:66:19:73:16:
bc:1b:62:3f:7e:95:b8:f5:45:ea:76:e3:a8:51:d7:
14:15:33:fc:25:56:ab:2a:da:29:ad:08:04:0c:f5:
f5:be:00:88:77:44:46:d2:20:ea:f8:6d:68:89:2b:
3d:bc:bf:da:bf:29:b6:ce:21:f4:ee:78:a3:dd:80:
e5:6e:8f:1b:6a:11:9f:9f:cc:61:55:97:e0:c8:3a:
8b:e5:d2:52:86:75:8a:68:ed:c7:3a:27:b2:c7:97:
8a:11:aa:5d:75:df:94:70:52:e2:7b:08:2b:87:07:
4d:ed:65:c5:8a:64:6e:a2:c0:e0:7c:c2:e8:73:b7:
34:fb:af:1f:e1:92:f2:b1:5d:dc:d9:f4:8f:17:69:
06:b5:8c:6b:d4:2f:c6:65:fc:d9:4c:f0:14:ea:a2:
54:c6:9b:08:ba:f5:6e:85:1c:a8:a1:75:8f:65:26:
3c:54:e2:6d:97:b9:f0:49:46:3c:b2:b1:40:25:bd:
ac:9f:e2:18:79:69:f0:8b:1b:f3:02:f1:af:ca:ca:
b8:ec:7a:7a:da:7e:84:2d:f0:dd:9b:f8:b3:b0:6b:
96:e9:62:6a:a5:4c:a5:84:7e:b6:f5:c3:00:fe:74:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:EE:DD:9B:B7:82:A9:E7:F2:2E:30:D4:C4:C4:38:EC:7B:86:BA
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/JIju3Zu3gqnn8i4w1MTEOOx7hro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.244.0/23
80.253.247.0/24
91.151.83.0-91.151.84.255
213.142.135.0/24
213.142.143.0/24
IPv6:
2a01:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
63:d4:9d:1f:71:49:9a:df:9d:b1:17:eb:a0:56:71:e4:03:4c:
52:5b:3a:59:78:49:33:e5:c6:c6:68:fc:3b:db:07:85:b2:ef:
9e:7f:08:9d:3f:b3:2c:e0:52:fd:28:15:ba:f6:fa:80:26:e2:
7c:8f:38:4d:7c:63:90:b9:3c:dd:29:63:69:de:8e:cb:04:67:
8e:1e:4e:f5:a9:f9:c0:b0:04:18:9d:90:b3:84:7f:68:a4:90:
cc:65:cd:fb:76:ae:89:de:b2:3c:63:f8:24:54:1b:28:5d:81:
47:64:46:ee:8d:e0:b0:06:52:57:b1:ed:47:00:75:a5:d8:05:
1c:5e:7a:40:02:ee:d9:ad:e2:16:48:ec:93:1a:47:ce:68:a9:
33:d1:e1:f9:e9:fc:7d:7e:bb:53:4f:16:89:43:a1:e0:08:48:
ae:cc:41:54:f5:95:e6:4b:0b:3d:d3:03:3d:08:5b:96:6e:e9:
a4:70:b0:3c:44:ff:30:ec:58:2a:da:8e:5a:6a:7d:67:2c:68:
5e:47:06:c4:c4:7d:a6:77:21:7f:e7:45:eb:85:1d:37:ac:23:
85:10:db:11:9d:f5:d3:a2:89:48:4a:0f:6b:55:5e:9a:0c:80:
c4:12:a4:a1:79:c9:cb:15:fd:37:ca:35:0f:7a:57:40:65:36:
96:82:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:02:17 2025 by rpki-client