Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/JLnk5C74MEI_NjoEcm6PQfIFO6E.roa
File: JLnk5C74MEI_NjoEcm6PQfIFO6E.roa (raw, json)
Hash identifier: mjm8zSzLPcPug8icRhADhhaesrGC//QbH1Zmg7AdhiY=
Subject key identifier: 24:B9:E4:E4:2E:F8:30:42:3F:36:3A:04:72:6E:8F:41:F2:05:3B:A1
Certificate issuer: /CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Certificate serial: 019F2368BA7C5F07A769CEA669871510D91A
Authority key identifier: 39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/JLnk5C74MEI_NjoEcm6PQfIFO6E.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216297
IP address blocks: 195.128.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ba:7c:5f:07:a7:69:ce:a6:69:87:15:10:d9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24b9e4e42ef830423f363a04726e8f41f2053ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:08:a4:39:d0:42:26:f4:87:24:03:5c:f4:
b4:91:3d:f4:57:4e:37:37:d3:87:91:5c:35:ca:8d:
d0:ca:7c:80:ec:3a:ce:fa:e6:0b:6c:97:6b:f2:dd:
b5:e3:ef:4b:13:f3:2b:cc:de:9e:88:8e:c3:11:f1:
da:18:ce:3f:a4:de:5b:4d:22:9f:f0:25:26:68:52:
24:af:5b:b6:85:5d:0c:14:53:61:be:f1:6c:2d:82:
08:e4:a8:9c:be:6a:1b:49:df:0e:c0:c3:d4:19:d0:
df:49:ce:a4:66:6d:ee:5a:01:f4:42:d2:12:cb:a0:
90:d9:33:e6:41:cb:27:18:aa:a5:e9:54:bd:b1:c1:
a7:eb:0e:f1:8d:3b:21:7d:22:34:d4:f1:b9:77:89:
6b:c1:23:a0:8c:1b:3c:c1:86:b8:74:94:e8:b6:7c:
e9:30:a4:8e:15:72:19:2f:05:af:6c:9b:fc:8d:5e:
07:45:52:1b:d2:b1:59:fb:ef:87:01:a9:00:25:cc:
0c:46:be:1a:4c:99:83:77:42:10:4d:0f:67:38:9d:
97:a1:62:bf:c9:69:d6:32:d8:15:de:e6:ec:39:1d:
ff:b0:6e:cc:99:12:ff:7e:72:3c:97:1a:f8:aa:18:
5f:ae:51:f6:aa:98:8f:bb:5b:82:ac:a0:41:03:3f:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B9:E4:E4:2E:F8:30:42:3F:36:3A:04:72:6E:8F:41:F2:05:3B:A1
X509v3 Authority Key Identifier:
keyid:39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/JLnk5C74MEI_NjoEcm6PQfIFO6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.132.0/24
Signature Algorithm: sha256WithRSAEncryption
19:91:87:0d:38:5a:b2:b1:74:bc:a0:8c:74:c3:a1:a7:b0:5a:
20:9a:39:58:c2:28:9c:ca:cd:3b:c6:e9:b0:81:41:dc:07:aa:
c1:82:d3:dd:10:26:e9:1d:d5:3b:be:11:88:00:e5:97:84:7c:
82:62:08:8c:c0:7c:fb:f0:3a:19:6e:16:34:41:04:8a:1d:94:
89:37:f0:2d:9c:1d:b8:ef:3a:af:1b:2d:45:1a:fb:65:27:63:
4a:7a:7f:16:f2:96:c0:ae:c5:d3:72:3d:d1:4c:b6:62:3d:8c:
2b:0f:1f:79:32:40:81:10:8d:06:10:72:5b:db:2b:d3:ec:a7:
bd:6f:c9:97:8a:64:be:da:c0:8b:a2:47:91:de:15:27:f3:a1:
fb:e4:39:5d:05:19:f3:70:c6:7e:ab:28:a0:44:23:98:d4:13:
48:79:9a:a6:c4:b6:49:3a:3a:16:a1:14:df:0f:a4:29:37:f8:
b3:0e:a5:68:f9:14:5d:df:fd:81:0c:7b:74:06:f4:6d:e5:c6:
f5:5e:d2:aa:c4:9a:8a:14:7a:8b:56:df:86:bb:c4:3f:1a:08:
95:9b:b2:33:5f:27:8f:e5:10:b0:ba:df:6b:68:cf:78:e9:61:
60:dd:dd:5b:7b:e0:d7:bc:76:4d:2b:d1:c3:8a:6c:e9:99:43:
72:63:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:05 2026 by rpki-client