
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/jahgwortntlQHohzLAQ0tN4yHMw.roa
File: jahgwortntlQHohzLAQ0tN4yHMw.roa (raw, json)
Hash identifier: awaLuIiyqPNJzkHQQmDP4aHVUxcrbbrVGi6oXMKNBUI=
Subject key identifier: 8D:A8:60:C2:8A:ED:9E:D9:50:1E:88:73:2C:04:34:B4:DE:32:1C:CC
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 0199BD7BF681DA5F84F8651513B2B846EA8D
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/jahgwortntlQHohzLAQ0tN4yHMw.roa
Signing time: Tue 07 Oct 2025 07:04:01 +0000
ROA not before: Tue 07 Oct 2025 07:04:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62113
IP address blocks: 185.38.24.0/24 maxlen: 24
2a00:fbe0::/32 maxlen: 32
2a00:fbe1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:7b:f6:81:da:5f:84:f8:65:15:13:b2:b8:46:ea:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Oct 7 07:04:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8da860c28aed9ed9501e88732c0434b4de321ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:2a:83:0a:c2:a3:19:68:13:33:56:88:ed:
d1:5a:54:2d:7e:76:cd:e0:1a:30:c7:71:98:a0:07:
68:99:e2:1e:8a:34:db:09:46:43:b7:7d:90:69:18:
06:cf:b7:db:42:cb:a0:6c:b4:81:6d:93:04:9c:07:
df:4b:2e:5a:07:33:a2:31:3c:d0:b9:b6:44:9b:a2:
a5:e0:07:44:03:57:b6:7a:72:53:00:57:4b:a4:b4:
35:82:b7:23:eb:e0:6a:41:db:b1:26:24:5b:53:4a:
52:62:21:11:66:e3:74:8b:f7:b1:32:fa:47:ff:6c:
b7:32:a6:09:63:10:2b:3c:3b:21:46:b4:83:22:30:
82:2f:63:be:7a:23:18:92:56:ec:f4:b3:fe:dd:d9:
11:90:fc:d9:9d:6e:69:69:3b:0c:60:bb:e7:51:dc:
b1:c3:b3:ef:84:b5:15:6e:d2:a7:a4:73:be:6c:20:
cb:85:28:d3:15:b6:64:e9:b9:59:2c:28:35:6b:ca:
eb:44:5d:4e:1e:82:a6:00:70:a0:ae:3b:ab:31:36:
01:03:e0:48:68:02:cc:3c:44:41:02:d9:f3:18:18:
72:ff:f2:b2:ee:8e:c7:5b:07:c5:cb:46:6d:39:00:
19:e8:29:ba:13:fc:f5:00:4c:55:95:cd:76:55:7d:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A8:60:C2:8A:ED:9E:D9:50:1E:88:73:2C:04:34:B4:DE:32:1C:CC
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/jahgwortntlQHohzLAQ0tN4yHMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.24.0/24
IPv6:
2a00:fbe0::/31
Signature Algorithm: sha256WithRSAEncryption
25:18:a1:ab:c8:d4:64:fa:74:ad:93:e1:5f:d1:bd:5f:ec:11:
a2:0a:9f:fa:ab:aa:a0:79:47:f7:2f:75:7a:9a:06:79:9f:66:
f4:14:03:11:14:d7:f9:54:d9:ff:dc:a1:b9:14:4a:2d:21:f3:
92:99:16:71:e0:1f:36:df:58:db:6e:20:81:3c:63:ca:7c:13:
1f:08:b6:b8:77:56:82:17:ac:81:92:88:f0:68:c4:33:a3:bb:
8c:c7:4e:1a:2d:76:61:17:d6:ac:49:c4:83:84:c5:f2:97:1a:
58:27:d4:7a:a4:48:98:c0:fa:c7:73:f5:c0:58:1f:1c:5d:1a:
19:7f:a1:18:f3:86:10:f2:4e:83:c1:58:51:c0:26:69:63:26:
c5:d6:60:8b:1c:27:b8:d9:33:14:11:d7:62:ac:2d:64:c7:d3:
bc:ef:df:b0:b3:a3:8e:85:18:a4:8b:3c:b6:65:5e:8d:4c:e9:
ff:23:cd:80:bb:6c:32:37:bd:00:38:a9:8d:e9:49:22:0b:75:
68:c8:47:94:88:7f:b1:20:74:62:52:e1:55:49:c4:d6:64:59:
b9:c0:09:54:b3:e1:b3:81:f0:dd:a9:6c:39:96:22:39:74:5f:
e0:94:be:77:3a:2a:51:74:ae:c9:75:16:f3:4c:57:14:88:42:
e9:20:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:11 2025 by rpki-client