Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/JhOM2pckb8nFdq5Y2DwyyvABDcw.roa
File: JhOM2pckb8nFdq5Y2DwyyvABDcw.roa (raw, json)
Hash identifier: /pw012qMM2N9wpV1EMngiWd9fhFOR9+5XLur4rjuVfs=
Subject key identifier: 26:13:8C:DA:97:24:6F:C9:C5:76:AE:58:D8:3C:32:CA:F0:01:0D:CC
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 0197824E96CA16A50A46B7D2F450970A59A3
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/JhOM2pckb8nFdq5Y2DwyyvABDcw.roa
Signing time: Wed 18 Jun 2025 09:11:17 +0000
ROA not before: Wed 18 Jun 2025 09:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197981
IP address blocks: 176.67.88.0/21 maxlen: 25
185.103.64.0/22 maxlen: 24
2a00:89c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:4e:96:ca:16:a5:0a:46:b7:d2:f4:50:97:0a:59:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Jun 18 09:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26138cda97246fc9c576ae58d83c32caf0010dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:57:17:05:bf:c9:ab:db:0c:45:7b:fb:3b:
d8:a0:87:f4:1a:1d:8c:ea:aa:4a:8c:73:4c:c0:be:
97:c6:23:23:12:5c:c1:16:d8:74:01:ab:21:73:4d:
93:3d:50:2f:4f:a7:d6:4d:6d:cc:b7:e4:7e:c9:34:
41:79:3f:28:81:f1:90:d8:76:14:56:45:a2:4f:50:
91:d6:a1:e1:d8:2f:24:11:3c:f6:41:76:9f:12:ad:
f4:ad:a5:45:5d:7d:71:03:64:a9:ee:bf:1d:3a:01:
11:40:f4:ab:7a:c0:62:6b:ff:2f:fc:72:c2:fe:de:
8b:df:04:04:b4:3f:8b:19:e2:d0:ed:9f:6f:71:b6:
33:3a:d8:62:0e:59:e1:d3:d7:5f:4c:02:7a:7c:53:
d5:4e:0c:f8:6e:85:3c:34:d0:fa:1b:14:ce:5b:68:
1b:41:8d:cb:bd:ce:b1:9b:a7:95:d4:ea:4c:f3:b5:
4f:31:8d:0b:59:53:fa:86:2f:ea:85:2f:64:d1:34:
50:b0:2d:3e:ca:76:2a:3c:1d:7a:5e:d9:cd:28:b0:
93:f1:fa:91:64:fd:cd:ba:e0:1a:66:05:97:f5:cc:
7d:16:3c:72:42:3f:56:ae:15:20:ac:8a:20:c3:03:
92:c1:5c:cb:07:27:02:f1:27:18:ba:31:23:46:aa:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:13:8C:DA:97:24:6F:C9:C5:76:AE:58:D8:3C:32:CA:F0:01:0D:CC
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/JhOM2pckb8nFdq5Y2DwyyvABDcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.88.0/21
185.103.64.0/22
IPv6:
2a00:89c0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:19:6c:5e:d9:7f:41:38:8b:22:5b:ba:53:ae:68:9f:68:8c:
d9:19:d1:bf:80:a0:0d:5e:64:b0:16:04:b8:78:5e:da:31:9f:
df:c7:b1:0f:b1:b1:57:6e:8c:a4:ce:44:07:48:5c:ad:a2:0a:
5b:48:00:7a:29:dd:91:3b:2a:cd:a8:ee:aa:2a:ff:e9:29:29:
ef:66:9a:e1:83:63:7d:85:e6:41:76:96:b5:cd:4e:de:63:c3:
9c:d5:9a:0b:d3:73:2a:e1:44:92:0a:7b:44:80:43:ee:b6:82:
95:11:15:e3:c9:83:0b:07:6c:e2:06:a4:41:23:9a:8f:cc:6c:
44:cd:80:e5:11:96:78:0d:35:53:f2:56:53:77:63:3e:61:63:
55:c1:06:db:a0:fe:a3:28:ee:8f:d5:7a:7a:66:de:32:93:12:
65:26:36:d1:cf:71:3b:80:71:4f:a3:30:a2:33:53:a1:7b:a3:
9d:b2:33:8b:95:a5:84:b1:6d:c7:21:37:15:fb:24:bb:82:74:
ee:1b:43:39:a2:59:1a:f4:1d:98:71:36:1c:55:7a:db:c1:35:
02:b6:f2:8e:db:ed:da:e3:d4:ce:dc:15:b0:97:fb:93:7d:68:
33:c4:ba:2b:a3:4f:82:74:52:d1:c7:8f:74:ec:3a:8d:0d:b2:
05:f5:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:16:01 2025 by rpki-client