Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/JAc59chWxnbVj4arm2KxHdYkCsk.roa
File: JAc59chWxnbVj4arm2KxHdYkCsk.roa (raw, json)
Hash identifier: +DamevI7IkkWGdbzfVm8AxymUPrZf0EeNiPisKoHbas=
Subject key identifier: 24:07:39:F5:C8:56:C6:76:D5:8F:86:AB:9B:62:B1:1D:D6:24:0A:C9
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019EF8ADD378C5DFB8F61D92E05158FB403C
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/JAc59chWxnbVj4arm2KxHdYkCsk.roa
Signing time: Wed 24 Jun 2026 08:10:01 +0000
ROA not before: Wed 24 Jun 2026 08:10:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3292
IP address blocks: 185.171.196.0/22 maxlen: 22
2a0a:e700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:ad:d3:78:c5:df:b8:f6:1d:92:e0:51:58:fb:40:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Jun 24 08:10:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=240739f5c856c676d58f86ab9b62b11dd6240ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:65:f9:43:e9:e1:a0:c7:30:37:c5:9c:63:
97:8f:f1:c0:3e:4d:f8:00:18:8c:d5:20:a7:0d:05:
c8:d6:eb:10:23:63:89:69:92:bc:47:b2:56:f5:64:
e9:7f:01:9e:54:eb:34:ab:f0:52:31:15:55:23:3b:
37:f1:c8:9a:05:19:b2:88:30:96:b6:06:45:9b:02:
f2:4a:4e:fc:89:81:02:9d:ab:4d:91:c5:8c:f5:69:
7b:01:19:49:16:a4:ba:ec:70:71:7d:af:b4:49:d9:
a4:a2:fa:52:ae:2b:51:6f:6a:f6:fe:67:e5:2c:ed:
a5:9e:9c:dc:b3:61:f3:a2:f2:dd:e1:13:04:80:5c:
7b:90:5c:7a:ce:f2:93:93:55:9d:5b:1d:45:e2:57:
a1:d4:76:74:f4:ff:f2:fd:24:dd:1e:88:f8:1d:1f:
9a:80:bf:f2:05:ac:0b:90:f7:02:84:b9:3e:7a:bd:
06:7b:92:66:d6:68:9c:4d:7f:49:aa:a5:8b:0a:84:
80:57:18:09:ab:ac:26:e8:25:8f:1f:75:17:71:0c:
e1:a2:53:a6:47:7b:27:32:e5:cb:7c:0c:1b:47:46:
01:c7:03:d2:4e:e0:ac:fd:af:3b:52:eb:cb:16:85:
3f:34:c9:a9:85:31:96:33:6d:e6:ba:0a:74:b1:5c:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:07:39:F5:C8:56:C6:76:D5:8F:86:AB:9B:62:B1:1D:D6:24:0A:C9
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/JAc59chWxnbVj4arm2KxHdYkCsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.196.0/22
IPv6:
2a0a:e700::/32
Signature Algorithm: sha256WithRSAEncryption
73:60:f1:53:21:fc:ea:21:d0:e6:0e:76:9e:b7:26:7f:6a:59:
9a:9f:7a:63:f3:1d:e3:55:59:b7:28:9f:99:59:fa:8a:16:54:
da:4e:2c:d4:ff:d2:c5:ca:ca:fe:40:f2:9b:b1:13:ae:2b:0c:
a3:e8:c9:98:1e:0c:f3:ed:a4:55:66:8e:15:63:ce:aa:bb:31:
17:db:db:23:c0:7d:c7:95:cf:f0:37:c3:7d:2c:89:e1:69:1f:
59:ff:cd:1e:61:4d:d3:e7:e3:b9:c7:b4:2c:20:0e:fa:73:62:
6d:b1:01:2e:32:ef:58:40:7b:20:5e:2d:e3:28:c5:a6:81:70:
92:25:b1:0c:87:8b:07:fc:c9:01:4c:2f:97:05:88:dc:bc:fc:
a7:6c:20:60:ae:01:8a:5e:27:b7:18:6e:ed:e0:aa:15:fb:c2:
05:51:62:d4:b0:e3:36:34:3e:b7:cb:d5:85:23:56:cf:58:2d:
14:d1:35:e8:af:7b:34:a7:95:af:61:e8:9f:92:d8:bb:ce:cf:
bf:1e:4a:eb:f7:5d:6b:66:53:ec:42:af:08:23:36:2e:d1:e3:
ca:88:dc:ef:c1:ca:d6:95:3e:85:a0:b4:20:04:e7:5b:6d:3d:
f1:8e:7f:7c:4b:38:e8:a2:37:c2:5c:c9:d2:71:55:29:b9:5f:
f5:0b:eb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:51 2026 by rpki-client