Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JR4BGajYackZK0kTgHzVYgrRx68.roa
File: JR4BGajYackZK0kTgHzVYgrRx68.roa (raw, json)
Hash identifier: OgLPYYe19SMJlm19MgG230qD0hPAI52NKqKU/9jg+is=
Subject key identifier: 25:1E:01:19:A8:D8:69:C9:19:2B:49:13:80:7C:D5:62:0A:D1:C7:AF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A180F8B7E4205F5548844BA0B33B6C9338
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JR4BGajYackZK0kTgHzVYgrRx68.roa
Signing time: Wed 28 Oct 2026 05:25:46 +0000
ROA not before: Wed 28 Oct 2026 05:25:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219048
IP address blocks: 5.230.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:f8:b7:e4:20:5f:55:48:84:4b:a0:b3:3b:6c:93:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 28 05:25:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=251e0119a8d869c9192b4913807cd5620ad1c7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:4c:e6:ba:12:3b:f7:bc:82:a6:bb:65:73:
48:3f:cb:c3:75:cf:fa:63:29:27:54:fe:0f:62:f3:
f2:29:07:ab:ee:01:2f:4c:6d:08:23:16:df:02:87:
92:2e:93:ab:df:fc:13:89:02:89:c3:ae:d3:b4:25:
46:37:7e:0e:92:e7:7c:5c:ed:b8:bc:70:05:21:4c:
61:36:44:86:33:8f:74:d3:99:c0:20:31:ca:2f:13:
36:63:d4:ef:63:3b:14:b7:0f:ed:51:4a:59:6e:75:
4e:11:de:54:4f:ff:9d:46:7a:4c:17:36:6a:e4:88:
60:99:36:97:22:28:db:8e:18:11:d4:d2:c3:ca:1f:
1a:23:89:e9:e1:e6:87:5d:cd:a9:ce:76:c4:3b:43:
fb:5c:9d:79:10:cc:ae:5a:f6:2f:c3:d0:19:dd:de:
bc:eb:bc:b2:49:49:f1:3e:ef:db:9f:9b:0d:34:e9:
59:62:5b:81:7f:52:0e:cc:bb:ca:70:02:76:23:f1:
dc:d5:5b:28:31:2c:22:43:76:9e:e5:52:ee:6f:99:
09:d3:a4:df:3f:f6:8d:af:5f:ca:f2:22:7c:44:05:
66:6e:8f:91:54:0e:f5:0b:f8:b9:bb:37:6f:20:c3:
66:f8:2e:68:20:52:ba:56:28:87:a5:cd:c3:46:37:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1E:01:19:A8:D8:69:C9:19:2B:49:13:80:7C:D5:62:0A:D1:C7:AF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JR4BGajYackZK0kTgHzVYgrRx68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.166.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8d:12:32:82:26:4d:ca:fc:c1:62:87:ec:17:bf:1f:cd:86:
1a:4a:0b:ba:e2:0a:fc:2e:72:a6:16:83:0a:20:2c:eb:0c:aa:
8d:2d:ba:eb:d8:e1:2c:6e:e9:9f:0a:4d:11:45:e5:96:66:21:
bb:d4:62:73:fb:b4:83:7a:74:68:c7:a9:9b:f5:19:b8:c5:09:
af:88:29:4b:f2:59:b5:72:91:f6:52:ad:59:2e:2a:4d:32:6c:
58:5b:4c:5a:78:fd:6f:41:f8:cb:c9:12:02:ce:ad:0c:77:ae:
2d:3b:cc:81:d1:0e:5a:81:75:9a:37:fb:0a:b5:03:43:f2:3c:
d5:3f:13:13:de:37:0d:30:2f:bc:39:f8:85:50:21:df:d8:ba:
3d:59:fa:1f:86:95:e9:c3:ab:12:88:e2:65:3f:3a:be:8d:1e:
67:7d:1a:8c:86:21:6b:2b:5f:74:c6:fc:0c:66:6e:0e:a0:00:
be:0b:f3:8d:6a:98:8d:c4:3d:03:49:1e:ed:21:7f:f1:da:34:
5d:27:c6:95:b5:30:4f:39:a8:e7:1c:36:e8:78:6f:71:87:f6:
e1:24:f7:0d:e1:94:cd:ec:9c:d2:63:2d:4b:e9:ad:dc:45:69:
dc:46:c9:d6:2f:1d:cd:6c:d9:c0:64:37:8a:ad:fa:f1:56:f0:
56:f8:9a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:07:03 2026 by rpki-client