Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/jwC74-F5iREL188mldERk81FXug.roa
File: jwC74-F5iREL188mldERk81FXug.roa (raw, json)
Hash identifier: ddYPoTatj6nI/eSrzriO9qo6/69S19UgdJCWsEfW64k=
Subject key identifier: 8F:00:BB:E3:E1:79:89:11:0B:D7:CF:26:95:D1:11:93:CD:45:5E:E8
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01988A212487B6E43A3F98AD8D5F648585A1
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/jwC74-F5iREL188mldERk81FXug.roa
Signing time: Fri 08 Aug 2025 14:41:24 +0000
ROA not before: Fri 08 Aug 2025 14:41:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 2a0c:2844::/32 maxlen: 32
2a11:2c40::/29 maxlen: 29
2a12:2cc6::/32 maxlen: 32
2a12:3bc0::/32 maxlen: 32
2a12:3bc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:21:24:87:b6:e4:3a:3f:98:ad:8d:5f:64:85:85:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Aug 8 14:41:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f00bbe3e17989110bd7cf2695d11193cd455ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:e5:3c:1e:d8:13:50:33:bd:cf:49:d6:31:
2a:e4:dc:e8:9c:9c:49:0c:b3:c7:4e:d5:73:ed:16:
d6:90:22:41:b9:e3:6b:93:48:31:24:c2:9b:5f:19:
8a:73:bb:dc:b1:f2:fe:80:b1:33:58:a0:73:45:08:
64:79:60:ae:28:8d:79:77:fa:8d:62:90:fc:cc:f8:
9e:a8:aa:df:00:39:7a:fc:51:d5:1d:33:ef:1e:21:
63:fa:0d:b2:13:bc:4f:11:80:f6:84:20:a4:7b:8e:
65:91:c0:a6:8f:4d:b9:1b:94:0f:7c:be:1a:5e:f1:
24:cc:2b:4a:60:53:10:8b:cc:ae:25:ec:1b:19:cc:
7d:12:96:51:b6:6b:62:19:90:8c:ec:6b:b1:b5:38:
0d:74:42:7b:0f:3b:ac:fd:91:77:04:55:53:16:f7:
49:17:a3:65:45:5f:ee:41:87:47:c5:f8:ee:f0:b9:
7d:64:02:3a:22:53:7d:c7:f7:74:09:ae:20:f1:e8:
dc:16:da:a9:d8:bc:77:85:1f:d1:14:d2:1f:22:a6:
28:77:78:17:6d:ef:56:69:09:44:cc:ee:a5:a7:ef:
a8:88:c9:90:36:eb:c6:7e:2a:7e:6f:1f:53:00:8a:
48:12:54:74:3c:ce:c6:2e:26:46:03:6e:7c:29:d9:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:BB:E3:E1:79:89:11:0B:D7:CF:26:95:D1:11:93:CD:45:5E:E8
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/jwC74-F5iREL188mldERk81FXug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:2844::/32
2a11:2c40::/29
2a12:2cc6::/32
2a12:3bc0::/31
Signature Algorithm: sha256WithRSAEncryption
ed:7e:1a:4e:ca:17:40:2d:6a:cd:d1:8a:8d:e6:a5:cd:5a:86:
f4:f9:e9:71:bc:84:3b:a4:f2:bc:9a:07:a5:7e:f5:0d:03:7d:
75:2e:ef:1e:c1:c1:23:e4:68:12:47:88:19:3a:f9:a2:96:f9:
2b:5f:b6:3e:f4:aa:3f:6f:27:95:86:78:44:7a:c4:6b:33:50:
fa:3f:86:f6:5d:9c:8a:4d:69:cf:3c:76:c5:1e:76:12:c3:3b:
05:8c:bc:33:59:b3:fe:29:9e:d2:bf:7a:24:26:28:f7:9a:85:
7f:63:e8:7e:b2:ee:1e:d3:34:21:16:78:bf:96:a8:1e:72:30:
43:30:10:c4:b5:c4:d0:88:7b:a7:2b:6b:7b:5a:97:2a:2c:ec:
a9:1e:47:c0:33:64:34:09:6a:c2:0e:f9:3f:c2:cf:03:fb:ac:
bf:12:4e:84:84:9c:38:e8:25:00:23:15:24:41:83:5b:bc:ed:
87:28:1f:f6:e2:d4:70:e2:f4:56:9e:f0:ea:15:db:a8:c7:79:
56:29:2d:5c:c1:11:5a:cc:e9:94:c9:20:7f:b1:3f:51:88:e5:
fe:82:4d:d9:07:e8:ce:84:a5:d7:57:b0:7a:d5:e2:d4:33:2c:
43:0f:cd:b4:ec:3b:6e:16:26:04:ad:7f:0f:4f:16:15:10:96:
45:c4:3f:00
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZiKISSHtuQ6P5itjV9khYWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl
N2IwYmUwHhcNMjUwODA4MTQ0MTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjAwYmJlM2UxNzk4OTExMGJkN2NmMjY5NWQxMTE5M2NkNDU1ZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDblPB7YE1Azvc9J1jEq5NzonJxJ
DLPHTtVz7RbWkCJBueNrk0gxJMKbXxmKc7vcsfL+gLEzWKBzRQhkeWCuKI15d/qN
YpD8zPieqKrfADl6/FHVHTPvHiFj+g2yE7xPEYD2hCCke45lkcCmj025G5QPfL4a
XvEkzCtKYFMQi8yuJewbGcx9EpZRtmtiGZCM7GuxtTgNdEJ7Dzus/ZF3BFVTFvdJ
F6NlRV/uQYdHxfju8Ll9ZAI6IlN9x/d0Ca4g8ejcFtqp2Lx3hR/RFNIfIqYod3gX
be9WaQlEzO6lp++oiMmQNuvGfip+bx9TAIpIElR0PM7GLiZGA258Kdl2BwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFI8Au+PheYkRC9fPJpXREZPNRV7oMB8GA1UdIwQY
MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt
NDFiYjIxYWMyODAxLzEvandDNzQtRjVpUkVMMTg4bWxkRVJrODFGWHVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx
LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKgwoRAMF
AyoRLEADBQAqEizGAwUBKhI7wDANBgkqhkiG9w0BAQsFAAOCAQEA7X4aTsoXQC1q
zdGKjealzVqG9PnpcbyEO6TyvJoHpX71DQN9dS7vHsHBI+RoEkeIGTr5opb5K1+2
PvSqP28nlYZ4RHrEazNQ+j+G9l2cik1pzzx2xR52EsM7BYy8M1mz/ime0r96JCYo
95qFf2PofrLuHtM0IRZ4v5aoHnIwQzAQxLXE0Ih7pytre1qXKizsqR5HwDNkNAlq
wg75P8LPA/usvxJOhIScOOglACMVJEGDW7zthygf9uLUcOL0Vp7w6hXbqMd5Vikt
XMERWszplMkgf7E/UYjl/oJN2QfozoSl11ewetXi1DMsQw/NtOw7bhYmBK1/D08W
FRCWRcQ/AA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:01:15 2025 by rpki-client