Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/jZCTuDYNLnCGsAPDwWIixMbLxV4.roa
File: jZCTuDYNLnCGsAPDwWIixMbLxV4.roa (raw, json)
Hash identifier: V9apneKgCADjYV+Y9jMV35PL/ZewdT33ExfgNVHPedw=
Subject key identifier: 8D:90:93:B8:36:0D:2E:70:86:B0:03:C3:C1:62:22:C4:C6:CB:C5:5E
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 01987991673FA89B73C20B105C02812AD973
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/jZCTuDYNLnCGsAPDwWIixMbLxV4.roa
Signing time: Tue 05 Aug 2025 09:30:29 +0000
ROA not before: Tue 05 Aug 2025 09:30:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214125
IP address blocks: 91.207.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:91:67:3f:a8:9b:73:c2:0b:10:5c:02:81:2a:d9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Aug 5 09:30:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d9093b8360d2e7086b003c3c16222c4c6cbc55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:7a:1d:bc:d8:d9:9e:b5:48:c3:4c:79:d2:
75:82:4a:3d:ab:6e:34:f1:0c:11:8a:08:73:38:e3:
6d:22:2a:ca:4d:d5:e8:61:8f:5c:b3:35:12:5b:db:
1c:36:e3:c1:6f:28:c5:a0:f9:49:d0:cf:3d:cb:cf:
5b:fd:66:8c:7a:85:7f:8a:66:70:f7:d6:97:cd:40:
51:ab:fd:5d:16:e9:7a:f5:f1:56:31:f9:ac:89:71:
c0:3d:0c:ce:44:36:dc:a7:58:51:1f:b2:b8:32:09:
fa:a2:07:10:21:58:60:ae:e1:9b:23:79:8c:89:ed:
bc:bd:c1:65:b6:d7:c0:1a:db:bd:76:62:d3:e7:b8:
53:fb:85:bc:db:ed:d0:42:21:e0:c3:19:63:dd:5c:
ae:13:9a:84:a4:35:69:01:90:de:8a:01:42:72:69:
6f:d3:a4:00:52:b9:29:54:22:51:e4:af:f0:6a:ea:
11:2d:79:e7:9b:dc:f6:ab:05:96:df:3c:00:d5:77:
b6:ce:69:9f:14:41:10:e2:29:97:36:c7:3e:b1:a2:
1a:30:9c:53:a3:0f:54:71:0f:a5:0a:78:92:d5:1b:
fd:3b:44:5c:30:bf:13:40:c3:12:e2:ee:50:7c:df:
8f:90:6e:44:d6:34:f8:57:08:26:c0:93:b5:79:cb:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:90:93:B8:36:0D:2E:70:86:B0:03:C3:C1:62:22:C4:C6:CB:C5:5E
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/jZCTuDYNLnCGsAPDwWIixMbLxV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:7f:75:54:13:20:ae:11:01:67:63:9f:76:47:93:38:57:66:
89:56:5a:22:9a:fc:73:c4:ad:d9:f7:c3:77:df:48:47:b9:25:
47:49:f7:fb:35:1a:a8:ea:a3:ad:ed:8f:81:eb:ec:0e:33:dd:
b6:c6:71:39:c9:18:99:9e:df:05:bd:8b:60:31:2b:a9:5b:3d:
92:e3:31:fc:ad:93:de:99:df:d1:e5:c6:80:92:aa:81:8a:63:
da:34:ca:78:80:c3:33:2d:6e:1c:ee:a9:7f:f6:fe:e8:1c:2d:
27:e6:b7:d1:49:3f:3d:6c:00:32:b3:e0:63:df:6b:fd:9f:08:
28:4f:d0:aa:53:bc:6f:7f:2e:f8:94:9e:f9:85:08:d2:b3:ef:
75:a4:19:37:5f:68:96:6f:62:5b:46:81:b1:83:0a:e7:f0:84:
35:60:0e:73:e6:73:07:e5:7e:0e:01:b3:0b:b2:34:2f:dc:a4:
8e:11:91:aa:c5:48:7d:c4:83:13:30:63:5f:32:7a:46:60:62:
ec:47:2c:7a:f1:cb:5f:a2:d6:25:5c:46:bc:db:0f:f0:74:9a:
dd:78:d3:e9:e7:24:03:88:58:29:bd:ce:0a:ee:4d:9d:1e:c1:
11:7b:2e:bd:13:83:b1:78:29:cf:88:18:54:65:d7:25:22:96:
75:ac:94:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:27 2025 by rpki-client