Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/jazd_sDkuEJsPouRMKWYSplW4JA.roa
File: jazd_sDkuEJsPouRMKWYSplW4JA.roa (raw, json)
Hash identifier: lJqelurOOYzLhv1ncckBta0UihDNfRX5VVhF47Vr6lw=
Subject key identifier: 8D:AC:DD:FE:C0:E4:B8:42:6C:3E:8B:91:30:A5:98:4A:99:56:E0:90
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019952E88A4DE99D1949FF983FF2A8EC8E4F
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/jazd_sDkuEJsPouRMKWYSplW4JA.roa
Signing time: Tue 16 Sep 2025 14:23:15 +0000
ROA not before: Tue 16 Sep 2025 14:23:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 31.98.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:e8:8a:4d:e9:9d:19:49:ff:98:3f:f2:a8:ec:8e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Sep 16 14:23:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dacddfec0e4b8426c3e8b9130a5984a9956e090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:6d:d4:7d:53:d4:6d:c2:59:28:e2:70:22:
22:cd:c7:bf:e8:b5:ca:46:14:3b:ee:be:72:0c:f6:
45:97:fd:e7:dc:a9:69:63:0b:5f:1e:e3:c4:33:06:
ec:04:60:53:9a:d9:e4:d1:ed:6d:1b:f8:b9:d6:6e:
f1:f0:4d:ed:5d:68:64:98:b1:8b:25:56:e9:cf:54:
a9:0a:29:c5:ab:2d:5e:f2:0f:31:01:0a:77:92:32:
36:a2:4c:b0:16:18:a0:14:e1:9b:0f:91:c6:e9:7d:
49:11:26:2c:e5:0d:d9:81:59:92:28:3b:22:03:a8:
a0:51:65:2b:bc:b1:42:4c:38:6f:7b:da:26:f0:a5:
19:4e:e4:0f:f4:21:fa:f4:47:81:c6:6e:40:74:d1:
07:f7:13:4c:95:af:77:74:ab:5e:20:f6:f1:d7:ba:
92:18:c2:3d:66:ee:d0:00:e1:06:1e:2b:57:9d:4e:
6e:55:35:74:1b:bb:33:01:53:a9:fb:42:02:47:bf:
c0:db:52:74:d1:d5:24:15:66:a7:11:66:2b:27:ff:
5e:16:1f:0d:03:63:fb:97:37:32:e6:42:b2:6c:ba:
e4:3a:0e:0b:1a:9a:c7:00:61:cb:9d:60:a2:08:dc:
f0:a6:fd:cc:2e:88:c6:34:cb:dc:3d:dc:ad:e9:4d:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AC:DD:FE:C0:E4:B8:42:6C:3E:8B:91:30:A5:98:4A:99:56:E0:90
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/jazd_sDkuEJsPouRMKWYSplW4JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.98.0.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:b5:f0:39:19:b6:5b:75:23:6a:3a:59:fd:ca:cb:b6:bb:e8:
a0:a9:73:be:87:6e:a6:0c:0b:af:8e:39:58:bb:f8:b4:99:fb:
8b:03:af:6b:a6:f5:9f:86:7a:d7:43:c5:6b:19:fa:4f:a8:ee:
91:46:c2:28:51:a4:2d:68:14:28:8f:a5:3f:2e:61:ac:8e:31:
fa:99:7b:c4:9e:3f:f2:eb:5d:fc:1e:e9:9b:d3:e0:ea:69:a8:
4c:c4:f8:97:6b:ec:de:7e:26:48:7f:ea:47:81:ee:14:44:ca:
3c:d2:27:3f:20:e2:02:22:93:4b:ae:39:46:3b:33:53:a0:dc:
1b:3f:a8:88:b6:12:7d:13:f4:5d:a7:8b:bf:48:fa:8a:4c:e3:
d6:23:36:6c:9c:32:ff:ee:52:3c:38:9d:be:44:14:3f:3b:40:
ab:63:f5:5a:4a:d0:5b:97:7b:c4:96:c0:bf:14:0a:e9:9d:b7:
af:21:a0:8a:eb:23:eb:af:38:2f:f9:0b:2b:e1:b5:fd:a4:21:
cf:ee:0c:23:b1:2a:ba:d0:ec:ac:8b:d4:41:e8:1f:32:d8:e0:
a8:2f:24:8d:6c:21:b8:93:4b:d3:ac:2c:8c:c1:87:ca:19:ee:
41:55:db:2b:ed:1c:eb:1a:d9:52:74:82:8a:14:56:2c:8b:d0:
3c:6c:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:11 2025 by rpki-client