Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/jl_U5tQcWg-AOln1BbaOOsQpgDE.roa
File: jl_U5tQcWg-AOln1BbaOOsQpgDE.roa (raw, json)
Hash identifier: obls0zZWUlT9RsakMuLVL04WjIlZ+gyW7XJnGAxT2Ts=
Subject key identifier: 8E:5F:D4:E6:D4:1C:5A:0F:80:3A:59:F5:05:B6:8E:3A:C4:29:80:31
Certificate issuer: /CN=ed5ddc8db57120bf18c4a845f65fc2ed60e6adba
Certificate serial: 019F23683B9EF8F97776C1B8D4FDC0D0EEB1
Authority key identifier: ED:5D:DC:8D:B5:71:20:BF:18:C4:A8:45:F6:5F:C2:ED:60:E6:AD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7V3cjbVxIL8YxKhF9l_C7WDmrbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/jl_U5tQcWg-AOln1BbaOOsQpgDE.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48930
IP address blocks: 195.88.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/7V3cjbVxIL8YxKhF9l_C7WDmrbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/7V3cjbVxIL8YxKhF9l_C7WDmrbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7V3cjbVxIL8YxKhF9l_C7WDmrbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3b:9e:f8:f9:77:76:c1:b8:d4:fd:c0:d0:ee:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5ddc8db57120bf18c4a845f65fc2ed60e6adba
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e5fd4e6d41c5a0f803a59f505b68e3ac4298031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:98:97:ff:94:b4:fe:24:4f:8a:5e:1d:7d:
0c:72:78:07:9d:d2:10:93:f8:40:ce:22:fd:2b:18:
12:9a:c4:59:78:63:97:7f:25:9e:28:a2:30:b2:a2:
7a:59:d3:82:84:6a:1f:2b:c9:23:c8:4e:64:b7:d0:
ca:35:f9:51:82:e6:e0:cd:e8:07:3d:2d:62:f3:9a:
6f:f9:52:20:60:a6:f9:20:75:4d:ed:a0:93:73:86:
e9:34:14:4c:47:e5:ed:be:8f:b6:ce:a8:73:40:2b:
12:a7:4c:c0:2f:7b:34:28:97:8e:10:25:97:66:79:
85:c6:bb:71:4b:f7:42:56:84:07:f3:b7:ce:94:16:
68:bb:75:79:25:90:2d:fa:f4:1a:ff:d2:c1:8e:e5:
6f:7f:53:71:2b:3e:81:65:ea:e7:18:6e:59:3e:6c:
28:56:df:34:b6:64:1f:68:43:48:3d:c2:e8:29:02:
b1:fc:e1:a6:4f:21:8f:40:28:71:04:17:ee:28:2b:
14:26:eb:b8:6e:7d:76:4d:0d:9b:64:4f:8c:fb:e7:
c8:88:d2:65:f2:d9:7a:50:12:f2:30:76:de:e2:a1:
ce:70:b8:b0:c1:33:72:b1:6f:46:34:03:ff:1f:6c:
87:c9:ae:e5:29:d2:72:5e:a8:04:8d:b6:84:df:99:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:D4:E6:D4:1C:5A:0F:80:3A:59:F5:05:B6:8E:3A:C4:29:80:31
X509v3 Authority Key Identifier:
keyid:ED:5D:DC:8D:B5:71:20:BF:18:C4:A8:45:F6:5F:C2:ED:60:E6:AD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V3cjbVxIL8YxKhF9l_C7WDmrbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/jl_U5tQcWg-AOln1BbaOOsQpgDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/7V3cjbVxIL8YxKhF9l_C7WDmrbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.98.0/23
Signature Algorithm: sha256WithRSAEncryption
06:be:b9:87:ca:3c:58:b8:bd:71:f7:ca:e2:12:7f:e1:09:9f:
23:7f:93:f2:b2:60:dd:7f:67:b6:f5:00:88:11:b5:a5:3b:99:
fb:a8:e6:6c:b4:00:67:0f:04:71:a9:2f:e7:64:57:ab:df:f4:
5c:02:da:dc:37:7c:83:17:6f:85:9e:53:d3:58:35:72:fd:d5:
d7:ba:b4:c8:35:2f:68:70:ea:73:10:27:19:42:b1:f8:53:0f:
6b:12:57:6c:5f:dc:8a:e0:d7:a4:d3:b3:6e:0f:e5:37:ce:93:
12:dd:56:ec:75:1c:0f:87:67:d4:ac:fe:2f:e4:03:9a:c0:a1:
88:8c:1d:04:45:55:00:45:9f:1f:bf:4b:13:22:4d:61:f6:60:
ee:70:ba:5e:bc:ac:e2:6d:35:8f:ac:44:6b:9b:7c:25:8f:42:
f2:3b:48:76:3d:6e:0d:13:a2:1d:d7:81:a1:7b:65:93:41:6d:
7e:c2:e8:1b:b1:fe:7e:d6:95:2c:09:9d:8d:13:90:e0:4f:0f:
61:5b:50:d1:0d:9f:97:b2:a5:aa:49:82:98:d3:55:2e:21:3d:
d1:a2:6d:4d:1b:b6:c8:b4:3c:7c:7c:12:1f:61:69:7e:aa:71:
a4:55:29:db:59:a5:15:89:5b:4c:e3:42:21:0a:94:2f:76:8d:
96:93:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:23 2026 by rpki-client