Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jLLoXPBBAKOnElA5LKDjEaqmSZY.roa
File: jLLoXPBBAKOnElA5LKDjEaqmSZY.roa (raw, json)
Hash identifier: 9jEEX5n92TjdAyYHU+g7S5rHYFn3nyOcEUC4zcP/adY=
Subject key identifier: 8C:B2:E8:5C:F0:41:00:A3:A7:12:50:39:2C:A0:E3:11:AA:A6:49:96
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019D24D43097CF89B23A029364D8A6F3B00A
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jLLoXPBBAKOnElA5LKDjEaqmSZY.roa
Signing time: Wed 25 Mar 2026 11:49:39 +0000
ROA not before: Wed 25 Mar 2026 11:49:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 185.21.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:d4:30:97:cf:89:b2:3a:02:93:64:d8:a6:f3:b0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Mar 25 11:49:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cb2e85cf04100a3a71250392ca0e311aaa64996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:89:6c:11:14:95:3a:34:45:23:22:50:e0:
7c:35:d1:cf:1b:ac:42:e1:d7:98:27:aa:5e:70:9b:
47:7b:16:bb:1c:c9:ab:80:ae:6f:4d:1d:de:47:4a:
76:5b:c3:d4:36:a5:61:29:77:4f:bb:d0:88:3a:e2:
32:27:25:21:83:7a:d9:7f:7d:43:81:09:42:e7:4b:
5d:3d:db:c5:97:07:35:5e:8a:98:c0:44:46:e7:9b:
3b:81:fe:07:2d:02:92:ce:1f:c1:1e:80:6b:70:01:
5d:da:11:1f:82:bc:a0:5f:71:26:bc:cb:ce:4c:b5:
5f:60:05:40:92:47:af:d1:5a:7e:e8:41:3a:98:31:
84:49:8f:ea:35:18:31:a7:26:2b:3b:bf:72:ce:2a:
d7:d0:b7:36:61:12:e5:99:57:be:69:0e:8a:af:90:
26:f7:26:e5:b6:bc:af:7f:15:96:3c:4f:14:7c:c5:
d4:bc:a8:6c:87:c9:13:5d:61:99:0f:34:7d:73:75:
65:a2:83:7c:15:e0:ad:fa:44:cb:60:b9:47:9a:1a:
f0:54:4e:27:32:e0:4e:34:f7:cb:d8:3d:5c:64:d8:
bb:48:27:97:60:e2:c5:e7:b7:ff:87:0d:6a:1d:53:
b7:13:58:bf:fe:36:77:d2:ff:60:d0:f0:e2:53:a6:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:E8:5C:F0:41:00:A3:A7:12:50:39:2C:A0:E3:11:AA:A6:49:96
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/jLLoXPBBAKOnElA5LKDjEaqmSZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0e:ac:b0:55:91:5b:9f:38:c8:51:db:7c:89:05:70:33:5f:
8e:80:bf:22:8c:ea:d6:65:b2:d0:84:d4:3f:c2:08:a1:fb:7e:
6c:88:72:91:67:d6:97:e4:4b:f5:ce:55:d6:cc:5c:d5:35:80:
8c:d9:67:5e:b9:8a:9a:c5:4c:59:65:54:71:2e:28:84:39:fb:
d7:a9:40:01:41:3f:46:4d:d4:75:11:a5:d3:62:63:75:21:a6:
ae:aa:c0:e7:7e:1c:b4:45:d7:0d:10:69:9c:dd:e0:ca:6b:0d:
20:62:00:76:66:7b:23:7b:5a:e6:f1:39:db:a8:d8:8d:7e:68:
7a:fe:80:fc:78:b0:7f:c1:c6:be:30:5f:72:44:34:82:28:c4:
35:5c:a4:eb:a3:68:ab:54:7c:4d:6b:fa:0a:5e:0f:a5:4f:35:
21:87:46:c1:df:5c:01:37:9f:11:95:a1:7a:c4:be:7a:94:a1:
dd:ac:23:c8:74:ba:bf:1f:8a:24:17:e3:53:e8:69:81:5f:80:
6a:87:4c:60:18:80:8e:3d:83:8c:f1:79:55:bb:c8:f5:db:3e:
b0:2a:9b:2c:53:92:0e:63:0c:91:02:82:ae:f5:67:08:53:35:
4a:77:f8:22:9f:ce:90:b8:66:cf:2b:9c:b8:fe:34:c6:1a:45:
70:c5:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:06 2026 by rpki-client