Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/jvpoTrK8_4-54LFnamVFN0Rvxkw.roa
File: jvpoTrK8_4-54LFnamVFN0Rvxkw.roa (raw, json)
Hash identifier: 9sm18Po8k3lNOXS81IduJpV4VijHut9tPDKg3wbowQo=
Subject key identifier: 8E:FA:68:4E:B2:BC:FF:8F:B9:E0:B1:67:6A:65:45:37:44:6F:C6:4C
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 0199F94120A9CEBF5AE89E1F886219CB56B2
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/jvpoTrK8_4-54LFnamVFN0Rvxkw.roa
Signing time: Sat 18 Oct 2025 21:36:58 +0000
ROA not before: Sat 18 Oct 2025 21:36:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 109.175.210.0/24 maxlen: 24
109.205.193.0/24 maxlen: 24
2a01:fb00::/32 maxlen: 34
2a01:fb00::/33 maxlen: 34
2a01:fb00::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f9:41:20:a9:ce:bf:5a:e8:9e:1f:88:62:19:cb:56:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 18 21:36:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8efa684eb2bcff8fb9e0b1676a654537446fc64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:9a:b9:fb:d0:2d:d0:45:7d:ff:94:d0:83:
26:63:b5:c3:87:78:c7:16:f6:09:32:87:1e:ae:88:
74:98:a0:be:aa:91:c0:82:7e:7b:ca:07:83:ce:70:
45:b9:23:c3:20:30:14:54:d7:80:11:76:45:55:76:
4b:36:bf:01:1c:10:d9:fa:1e:a3:b6:b3:ad:a8:a9:
47:e7:3c:97:43:73:52:e4:f6:50:73:06:7b:64:6b:
50:d9:76:81:98:a7:28:50:54:1f:18:11:60:55:79:
e1:98:29:c3:fd:f9:15:e8:df:3c:ec:58:32:d3:f1:
24:6e:b2:f6:cb:9a:69:11:6b:5d:22:49:a5:cc:3b:
6d:1d:6e:ce:b2:26:02:70:3f:af:c4:65:87:00:94:
24:97:93:26:59:02:ea:19:3b:0c:07:e7:c8:82:64:
fe:f2:72:b8:4e:de:3c:d1:2a:97:55:84:c1:b8:a0:
bb:d9:b5:a7:97:ec:71:1e:7d:ef:1a:39:42:8a:2f:
2c:5a:79:54:ff:7e:fc:e8:f4:f7:6d:10:95:03:9b:
ee:79:16:53:61:b7:c2:04:5b:0e:3b:36:33:c9:79:
f1:5d:50:41:1d:5a:6c:f2:ea:d3:0b:93:cc:7d:02:
95:4e:7e:85:5e:e4:f6:cf:a8:d7:52:aa:ef:97:c9:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:68:4E:B2:BC:FF:8F:B9:E0:B1:67:6A:65:45:37:44:6F:C6:4C
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/jvpoTrK8_4-54LFnamVFN0Rvxkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.210.0/24
109.205.193.0/24
IPv6:
2a01:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
31:ad:7a:4c:0a:e0:46:67:57:e0:9a:5e:8f:fa:d6:26:f4:75:
d3:e4:c9:86:a3:b5:b4:83:e1:cf:51:8a:b3:61:29:cf:b7:a2:
ad:9d:2c:9c:85:2b:39:71:a0:a9:0c:29:e5:08:ae:f5:a1:55:
ae:cb:d1:9f:0d:1a:e7:ec:f4:89:24:d2:c2:92:df:3d:f6:50:
f2:39:b9:9e:b4:04:8e:ab:58:d6:53:7c:ec:71:f5:ff:f9:ad:
3d:18:0a:63:e1:0b:8e:b6:25:ba:33:4c:52:7b:41:62:78:36:
91:f4:ac:fc:c7:ac:c6:4f:2c:31:02:9b:9b:c4:fa:d0:65:12:
ee:96:6f:04:ed:12:2d:fd:eb:cd:45:14:44:5d:0d:6a:fd:8d:
5a:37:f0:37:c7:a5:08:82:a3:80:60:d9:6a:eb:40:fa:0e:e9:
dd:2d:94:d5:65:a5:07:e6:16:f8:28:bb:e7:93:fa:0a:e7:97:
59:5c:4b:6b:ba:9c:19:46:6b:4a:63:b1:ac:f8:23:86:44:62:
fa:aa:c2:c1:be:1a:e2:38:58:af:7c:f5:34:99:4e:95:cf:79:
07:df:af:1c:87:3b:c6:e7:c6:17:6d:bd:c7:22:2c:98:db:76:
2a:ab:42:9c:f6:e0:22:b0:4d:8c:0b:f2:2a:ac:b6:74:10:af:
e1:9e:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:20 2025 by rpki-client