Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/JeHtS9ixybUtWgHJC3lED1Xlc4E.roa
File: JeHtS9ixybUtWgHJC3lED1Xlc4E.roa (raw, json)
Hash identifier: ddx2wHgY9/unmcGfDoucGgaOd7BG1ivN8l1QA0QmEIc=
Subject key identifier: 25:E1:ED:4B:D8:B1:C9:B5:2D:5A:01:C9:0B:79:44:0F:55:E5:73:81
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 019CDD0D7B55F03AA9DF5C075A76A743E600
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/JeHtS9ixybUtWgHJC3lED1Xlc4E.roa
Signing time: Wed 11 Mar 2026 13:19:34 +0000
ROA not before: Wed 11 Mar 2026 13:19:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201458
IP address blocks: 91.203.107.0/24 maxlen: 24
2001:67c:468::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:0d:7b:55:f0:3a:a9:df:5c:07:5a:76:a7:43:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Mar 11 13:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25e1ed4bd8b1c9b52d5a01c90b79440f55e57381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:aa:45:c6:b3:92:6a:02:33:be:f0:83:ff:
85:c5:7f:bd:ed:33:76:fa:f3:ec:79:98:e6:d3:5f:
1e:b1:26:34:5a:a5:dd:b6:de:09:3e:26:88:dd:09:
23:55:dd:2c:8e:2a:cc:a5:d0:00:5c:af:18:5a:7c:
2a:c0:72:7b:15:0d:a6:84:84:92:74:da:72:dc:d3:
91:c4:73:52:bc:08:6d:bb:1f:8d:64:b5:c7:db:d3:
49:01:be:83:97:fc:d0:d0:94:e3:34:13:fa:b5:27:
64:c9:8c:6b:f7:60:79:be:cd:7f:97:a9:f2:14:ef:
55:e0:65:e1:99:07:a6:ac:05:06:1e:f5:8e:17:35:
fd:a2:77:3d:41:69:8e:fb:71:f3:c7:48:26:7b:df:
5d:0a:e3:cd:4e:77:97:df:1e:7b:25:f5:d4:17:dd:
d6:6e:04:67:84:56:b1:a4:61:c6:94:07:21:bb:57:
53:f5:da:30:d7:32:6c:b9:16:76:c4:8b:bc:80:af:
11:a0:d7:bf:94:91:fa:17:cb:94:28:ed:ff:b6:2f:
15:e7:e1:bf:f4:9e:94:76:5f:63:eb:aa:77:8b:f3:
81:99:1d:ed:38:8d:24:5e:84:c8:48:33:d2:89:5f:
09:94:23:7a:24:a2:53:f6:a0:32:0d:54:78:1b:77:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E1:ED:4B:D8:B1:C9:B5:2D:5A:01:C9:0B:79:44:0F:55:E5:73:81
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/JeHtS9ixybUtWgHJC3lED1Xlc4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.107.0/24
IPv6:
2001:67c:468::/48
Signature Algorithm: sha256WithRSAEncryption
96:c4:23:c9:6e:9e:ca:f8:9a:64:9b:f2:2c:b0:e3:63:e4:a2:
00:2f:50:92:e1:f9:e8:ed:90:b1:d2:ff:ff:79:e4:5e:b5:95:
c1:9c:17:9e:e7:a2:50:c2:d1:2c:f6:b8:3f:09:0e:72:9c:9d:
52:87:64:72:2c:25:c8:a9:b4:78:c2:50:8c:3a:d4:01:5a:d8:
d5:46:59:5c:57:4e:b0:01:a5:34:13:71:9c:27:11:48:54:38:
6e:c4:37:32:02:44:01:87:22:41:eb:5d:ff:f4:ad:f4:2f:28:
ea:d5:e5:4f:3e:0c:6d:34:8f:59:66:ec:77:55:5c:c7:a0:5e:
5d:84:58:e1:75:18:6e:bd:e3:9d:97:33:f9:c8:be:41:a3:be:
f2:7b:e7:fb:16:80:a0:bf:fd:4d:2f:de:f4:42:23:d9:a0:6a:
18:24:3f:9d:c4:14:a7:04:b8:47:b6:64:cd:83:8d:51:5a:56:
7f:95:65:39:8c:cb:6a:9e:7c:b6:19:be:99:a4:30:0c:6a:dc:
eb:da:87:5d:d9:f4:33:35:cf:7a:ca:db:bc:ae:30:95:e8:06:
d6:aa:69:78:12:ce:50:13:7c:54:b0:d5:dc:d6:cf:94:67:d1:
b5:83:dc:8f:e1:14:92:66:76:c8:0f:3f:56:1c:91:c8:bf:23:
9e:58:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:18:51 2026 by rpki-client