Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/JsMnbrdIaxVJCAfbkanZJmJY8KA.roa
File: JsMnbrdIaxVJCAfbkanZJmJY8KA.roa (raw, json)
Hash identifier: xYEVUlGxhvFP9bF5W7UAg6rvOmBON7mfzaUHb2SYtRQ=
Subject key identifier: 26:C3:27:6E:B7:48:6B:15:49:08:07:DB:91:A9:D9:26:62:58:F0:A0
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 01A0E81CB6287CC565292846C8A1FB5E79F7
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/JsMnbrdIaxVJCAfbkanZJmJY8KA.roa
Signing time: Mon 28 Sep 2026 13:03:10 +0000
ROA not before: Mon 28 Sep 2026 13:03:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209541
IP address blocks: 147.78.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:b6:28:7c:c5:65:29:28:46:c8:a1:fb:5e:79:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Sep 28 13:03:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26c3276eb7486b15490807db91a9d9266258f0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:21:d8:35:23:b3:82:a9:c8:e5:01:a6:75:
82:0d:02:3a:eb:ce:d5:3f:76:05:5e:a2:98:bc:65:
c2:4c:db:d4:5b:21:58:f0:95:46:3c:fb:f1:d7:fd:
59:c3:c6:64:52:cc:6d:13:26:bb:04:48:a2:1f:c8:
d6:be:5f:c1:24:f9:fd:fb:de:46:5d:f8:b9:57:79:
2c:bf:e6:29:a6:92:78:f2:c9:3a:a6:f9:a8:07:61:
d8:68:bc:ee:8e:96:31:3e:18:f9:fb:d3:34:49:23:
79:2c:c3:2c:fe:20:66:e3:01:7a:23:83:b0:99:c9:
08:4f:3c:6c:ba:b1:b2:a8:d2:f5:6f:e2:7c:2a:c9:
9f:c4:55:c9:31:8a:bb:15:20:c3:95:93:9d:c6:26:
0c:38:eb:9d:45:88:2c:90:f7:21:cf:1b:db:91:ac:
14:77:8a:e8:ed:f8:c8:b7:c1:56:ed:20:80:e1:29:
f4:2a:c0:44:7a:16:f4:80:8b:c2:8c:14:b1:d4:9d:
2d:4c:fd:96:cb:6c:eb:10:5c:80:53:9a:4c:ee:e5:
4b:df:29:0a:50:30:68:c5:1b:4d:4e:88:3e:30:04:
50:c4:95:b1:dc:d1:f2:d3:d9:1d:2f:6d:bb:07:e3:
0a:db:4f:00:22:f9:a2:f8:c4:c1:e3:5f:bb:04:5a:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C3:27:6E:B7:48:6B:15:49:08:07:DB:91:A9:D9:26:62:58:F0:A0
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/JsMnbrdIaxVJCAfbkanZJmJY8KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:04:1d:9e:4b:ad:99:8c:e0:73:74:cf:cb:5c:2a:c8:45:a4:
8a:33:78:d3:7a:ce:e2:07:95:b9:5a:d3:66:63:4f:ab:5a:cc:
4b:10:ca:0c:3e:84:62:80:f7:89:c8:14:1d:f9:55:73:01:43:
11:be:69:ad:c4:c2:14:c9:53:11:54:33:9d:da:c4:75:46:a6:
ad:9e:99:71:5b:fa:9b:82:0d:9a:49:e9:bd:1a:16:4c:fa:40:
4e:9e:e3:b1:2f:2c:3b:a7:f6:4b:44:d1:42:0b:ab:cc:49:2a:
13:bd:b3:ea:54:0b:82:65:f4:d3:4f:6e:14:92:5b:ca:3a:f3:
2b:d3:c1:0f:4d:b8:7c:b9:97:3a:5a:d0:d7:29:b9:4e:be:d9:
5d:8e:17:2a:33:32:28:b4:0f:76:24:14:de:5f:8d:43:83:e7:
cf:b7:df:e9:01:c1:35:a5:99:4d:26:9e:cc:55:7c:4e:11:5c:
9b:57:eb:b8:c0:7c:69:67:c6:49:91:a1:be:88:09:57:58:24:
09:48:62:88:35:4e:7f:65:2a:63:46:69:c4:31:20:59:3e:0d:
0c:61:01:44:b4:1f:8d:53:2e:22:53:b7:33:76:5d:50:9d:88:
38:5d:c1:34:1e:d6:9a:bd:fb:af:fe:bf:4e:34:d1:57:63:d7:
ff:59:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 13:10:31 2026 by rpki-client