Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/jmeiInx0nEsihwIdGGNm3usrgc0.roa
File: jmeiInx0nEsihwIdGGNm3usrgc0.roa (raw, json)
Hash identifier: HIHGyMxCWWiFOlHJLpUl7M1kqXVyovzv+xvL003KCq0=
Subject key identifier: 8E:67:A2:22:7C:74:9C:4B:22:87:02:1D:18:63:66:DE:EB:2B:81:CD
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 0198AD87A36206134D5504F7AA791EF7489F
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/jmeiInx0nEsihwIdGGNm3usrgc0.roa
Signing time: Fri 15 Aug 2025 11:40:04 +0000
ROA not before: Fri 15 Aug 2025 11:40:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48014
IP address blocks: 31.41.33.0/24 maxlen: 24
2001:3783::/32 maxlen: 32
2001:3787::/32 maxlen: 32
2a12:4040::/29 maxlen: 29
2a12:4045::/32 maxlen: 32
2a12:4047::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:87:a3:62:06:13:4d:55:04:f7:aa:79:1e:f7:48:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Aug 15 11:40:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e67a2227c749c4b2287021d186366deeb2b81cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:2c:a1:a5:fe:6d:06:cf:d5:8a:c6:3e:3a:
10:0e:93:81:20:4c:e5:4b:62:05:db:32:1b:12:b9:
51:92:00:f2:ee:88:e2:59:26:0b:6a:2a:08:22:3a:
50:a9:17:ae:80:28:96:47:67:e8:a5:c9:f0:84:44:
ec:37:16:56:4c:3e:71:89:dc:44:a1:73:f3:72:15:
55:41:cd:b3:8a:8b:d9:6d:5a:32:7e:f2:d3:9d:3e:
66:ad:c9:fd:d2:74:dd:0d:c8:28:91:f3:74:67:41:
c6:e6:73:74:04:cd:ee:2f:9b:9c:4f:79:c2:f6:aa:
17:d2:80:f5:4c:28:9d:5e:88:19:9d:bd:cc:2f:86:
ac:3c:a8:0d:08:3a:07:29:dd:3e:c7:6b:17:f9:70:
09:75:dc:78:b2:ea:21:fc:0c:25:ce:8f:8d:4a:28:
15:8a:77:87:f5:d9:b0:49:1c:6f:2a:df:2a:5b:c2:
99:e1:d6:d7:02:be:65:32:85:d5:3e:70:21:c3:ac:
c3:37:81:a7:83:78:4d:c2:d4:85:47:97:ad:00:f7:
fd:2b:29:fc:39:d9:e5:0d:87:c2:98:a9:07:5b:42:
f8:0e:15:c8:8a:e1:8b:86:a7:c5:84:82:3e:e1:83:
2e:9b:ba:5b:ed:0e:50:d2:45:af:00:f5:44:19:fe:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:67:A2:22:7C:74:9C:4B:22:87:02:1D:18:63:66:DE:EB:2B:81:CD
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/jmeiInx0nEsihwIdGGNm3usrgc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.33.0/24
IPv6:
2001:3783::/32
2001:3787::/32
2a12:4040::/29
Signature Algorithm: sha256WithRSAEncryption
70:a7:fc:eb:67:0e:26:9e:40:ce:9d:ee:8b:be:d5:d6:e5:86:
a0:94:2d:27:e4:da:78:72:b7:56:f9:a5:fc:53:db:9b:bd:6e:
4d:ef:4e:82:54:15:ad:7b:9e:12:14:b4:64:d2:5e:50:02:52:
fd:8d:c8:72:10:20:8d:56:ae:56:4c:03:d9:89:39:0b:c4:2c:
45:e2:5d:c6:36:ec:a5:b5:3a:73:a7:65:2d:c0:0f:23:e0:3f:
9d:0e:37:6c:c5:75:08:d4:5b:f7:86:0c:96:f8:37:3e:aa:1f:
e9:de:02:59:c0:e1:87:cd:7a:a3:5f:ea:5f:17:ab:db:e6:41:
9e:ae:f1:cc:64:9f:0b:24:6c:72:7d:d9:a6:9b:57:83:d6:48:
ba:a3:4f:d0:9b:c8:62:55:7e:1f:c6:ef:d0:ab:19:9b:27:c9:
60:96:59:e0:6f:df:18:c0:06:d9:db:99:0a:4c:fd:91:83:58:
ea:78:15:9f:bb:ae:f1:91:ad:b4:b3:1a:8b:44:7c:f8:b1:fb:
32:0a:f6:ab:f5:cc:4f:af:75:13:c7:68:5d:d1:27:dc:a8:58:
69:9d:10:95:ef:b4:64:b4:e4:09:2f:fe:ae:01:59:7d:ac:e7:
45:26:6f:42:59:f8:17:cd:9f:99:cb:4e:99:f3:f6:f4:6f:94:
f4:8e:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:53:01 2025 by rpki-client