Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JP-S2o0I_nUtLAOKPN3MfRIN6RY.roa
File: JP-S2o0I_nUtLAOKPN3MfRIN6RY.roa (raw, json)
Hash identifier: JfTdIpHmF4T1dIihVESOhyJNGp+NKyB+FhmpQnwIZKg=
Subject key identifier: 24:FF:92:DA:8D:08:FE:75:2D:2C:03:8A:3C:DD:CC:7D:12:0D:E9:16
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0198D053B827A8A2D65FD8073773103C8F34
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JP-S2o0I_nUtLAOKPN3MfRIN6RY.roa
Signing time: Fri 22 Aug 2025 05:50:04 +0000
ROA not before: Fri 22 Aug 2025 05:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 88.223.42.0/24 maxlen: 24
88.223.43.0/24 maxlen: 24
88.223.44.0/24 maxlen: 24
88.223.45.0/24 maxlen: 24
88.223.46.0/24 maxlen: 24
88.223.168.0/24 maxlen: 24
88.223.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:53:b8:27:a8:a2:d6:5f:d8:07:37:73:10:3c:8f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 22 05:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24ff92da8d08fe752d2c038a3cddcc7d120de916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:49:c4:f5:0a:c7:6d:fc:87:fa:6f:7b:6b:
ce:80:4f:ee:fa:93:97:ea:b1:e9:60:b7:8c:be:57:
54:4d:d0:b5:56:33:fd:7e:df:15:e6:0b:a9:ef:c1:
ec:e2:5e:e0:ea:92:e3:0d:ef:83:ad:46:7f:89:a3:
c1:55:23:89:d3:1c:29:dd:ec:95:06:83:5c:88:87:
73:d8:64:d9:cf:0f:21:ca:2e:11:d7:bc:ac:ec:22:
2a:33:7e:d7:b7:27:21:4b:c1:19:16:a5:2a:0b:0f:
a1:2a:05:27:55:79:41:92:8c:b0:af:26:c3:be:7f:
16:06:96:63:05:bb:4a:e7:36:ce:e7:30:90:b4:c7:
53:6e:44:28:ef:c4:5d:ab:ed:c1:64:39:57:c8:c1:
fc:1a:81:80:98:9b:87:a5:4a:1f:8b:52:ba:23:0b:
59:ce:56:69:2a:f8:00:21:51:69:67:c7:8e:03:c4:
49:e0:b2:c0:4d:e0:25:c8:91:39:68:ac:d3:7f:1b:
ca:30:e9:50:d1:8a:5e:44:1a:08:f7:c8:59:43:fc:
aa:09:10:1f:0f:b4:29:c6:08:8f:3c:60:be:e6:51:
f0:de:1a:6d:cb:b2:cd:e6:9d:25:87:47:2b:fb:e5:
ce:f3:66:95:3f:91:31:70:86:54:ec:5c:d4:f0:e0:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FF:92:DA:8D:08:FE:75:2D:2C:03:8A:3C:DD:CC:7D:12:0D:E9:16
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JP-S2o0I_nUtLAOKPN3MfRIN6RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.223.42.0-88.223.46.255
88.223.168.0/23
Signature Algorithm: sha256WithRSAEncryption
88:98:8b:6f:1a:cf:b1:34:bb:3a:44:05:b2:c6:d8:32:3d:3e:
c0:f0:f7:bc:6f:3d:31:10:45:e0:92:b4:ef:c4:4b:1f:2c:84:
51:1c:77:66:c9:61:85:d2:bb:9e:21:df:3f:1a:c9:b2:a2:20:
74:f6:64:11:e1:52:60:71:0d:a3:81:a1:0c:13:ab:04:04:88:
0b:53:5d:a9:5c:89:fe:9d:ba:8c:1a:cb:0f:ae:dd:ed:61:33:
20:f2:5d:6b:6f:e4:a3:27:9d:e1:b5:5d:c3:39:09:53:d4:15:
a5:e9:05:c2:6f:d0:cc:3c:50:b6:03:9f:98:b8:c4:f7:29:15:
2d:04:dd:82:96:db:b8:7c:e5:84:a9:92:f2:d0:b6:ec:c4:d3:
49:63:40:4a:28:a3:d9:6d:4a:9a:3d:ce:2e:0d:1b:68:5c:18:
ec:9b:62:2f:f9:d0:68:2c:0e:32:2e:ab:04:7d:43:1d:e9:5b:
8d:cc:44:84:91:e5:ab:8b:f0:d4:66:e4:b3:a0:07:d7:41:9d:
ff:ee:83:5e:95:8a:10:d4:40:7b:02:4b:4d:de:b6:6d:30:b1:
50:b8:3d:df:2c:7d:66:77:1d:de:61:eb:6f:26:18:95:ad:68:
26:41:c6:ef:6b:f4:fb:2d:0b:75:53:4f:f1:c9:b1:d6:05:07:
b2:af:41:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:20 2025 by rpki-client