Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jHaOaBtYObgXUVH-LWJMS9t3VYY.roa
File: jHaOaBtYObgXUVH-LWJMS9t3VYY.roa (raw, json)
Hash identifier: vieXKtwbQ/DMSNTsBYgN7hRn4rAc5IptczMegB3hF1s=
Subject key identifier: 8C:76:8E:68:1B:58:39:B8:17:51:51:FE:2D:62:4C:4B:DB:77:55:86
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DD30EABF8A7568D40772F8DB8DC9871C8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jHaOaBtYObgXUVH-LWJMS9t3VYY.roa
Signing time: Tue 28 Apr 2026 07:47:27 +0000
ROA not before: Tue 28 Apr 2026 07:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 95.215.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:0e:ab:f8:a7:56:8d:40:77:2f:8d:b8:dc:98:71:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 28 07:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c768e681b5839b8175151fe2d624c4bdb775586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:a6:2b:a2:3a:22:27:f1:ac:d4:e8:f1:a9:
d2:fa:85:c9:0f:d5:37:24:8c:d7:99:ae:04:45:f0:
80:42:d4:d9:b1:f4:c5:41:29:91:80:2b:4d:c7:06:
f3:f1:db:9c:f8:37:18:8a:c6:53:5c:2b:b6:67:8c:
39:99:71:29:d6:d2:cb:50:79:79:3f:6d:55:f4:91:
7b:e0:ba:f7:6e:65:75:e4:d2:c5:1c:26:17:ab:0b:
bf:b9:1f:7c:40:b1:d3:11:cc:e7:6e:09:8c:83:ee:
47:e7:ae:e1:4d:15:e3:73:db:51:e8:f8:7b:35:2a:
76:ae:f7:17:93:0c:8b:28:81:1a:19:ed:7c:b1:74:
53:47:e6:38:fe:c2:d3:4a:7e:d9:dd:ac:12:c5:03:
cb:22:b1:56:8f:19:7e:8b:a5:1e:4c:41:a0:be:66:
69:77:be:36:4f:16:85:df:53:53:2f:e8:a7:19:e5:
28:a2:75:c0:8e:7d:bb:f0:a6:2f:d7:12:b8:72:d7:
31:70:7c:cb:bb:a2:1d:d2:15:f1:05:fc:0c:06:56:
34:4e:45:b2:9c:73:ba:1d:5c:3a:96:e2:fd:be:40:
3e:57:72:fd:8b:57:1e:62:ff:b8:da:9c:29:78:45:
35:cf:dc:15:d7:30:99:97:08:89:6a:e1:6d:a2:07:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:8E:68:1B:58:39:B8:17:51:51:FE:2D:62:4C:4B:DB:77:55:86
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jHaOaBtYObgXUVH-LWJMS9t3VYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.32.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9b:dd:e0:a6:e8:57:8b:64:6f:bf:73:a2:81:ed:03:10:d3:
f3:75:cf:bb:71:f1:1a:3b:e9:eb:92:73:48:7e:2f:36:f6:a5:
f2:7a:3f:ef:21:15:45:95:87:eb:16:5b:79:55:c8:82:90:66:
05:4c:7a:92:2a:5c:e4:eb:dc:7d:ef:35:97:8e:07:4d:15:8b:
0a:6d:f0:39:dc:fc:cd:29:0d:51:81:32:ba:05:0b:17:ee:f1:
ce:38:6f:2a:ad:04:d2:33:cc:13:fe:a0:ae:f7:27:76:38:53:
06:da:58:a5:ab:b8:6a:67:f4:2c:c7:93:25:85:f6:82:78:e4:
7c:6a:c1:5c:84:bb:18:36:21:7b:47:f1:ff:f6:83:74:19:2a:
80:a2:6c:7c:b3:94:f6:f7:b2:0e:2e:e3:eb:af:de:53:14:45:
5d:68:6f:d0:05:3b:e4:09:4f:bd:ac:e5:29:cb:9b:d8:49:8a:
72:a6:07:09:7a:11:9b:6d:51:87:13:14:fb:6a:57:cf:34:11:
8f:7c:7b:28:60:6d:db:d6:7b:12:b4:ed:06:f7:c9:50:e1:a4:
5b:66:b3:34:16:a5:60:26:1d:02:49:2e:c9:b3:00:42:0b:80:
d7:c0:30:20:ad:95:d2:bb:93:89:07:03:6c:b0:22:77:19:ab:
45:41:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:45:10 2026 by rpki-client