Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/JS4OZw-dfoAGScXsIL4kb3KCX_4.roa
File: JS4OZw-dfoAGScXsIL4kb3KCX_4.roa (raw, json)
Hash identifier: CsnYx8saM2GDN99ZZzqzztzcHAktERUojOcFYdBknRI=
Subject key identifier: 25:2E:0E:67:0F:9D:7E:80:06:49:C5:EC:20:BE:24:6F:72:82:5F:FE
Certificate issuer: /CN=efeeb50efed29c17171085400af07c6690fa396a
Certificate serial: 019E16BBA9F62FA66CA45F674EB6E6C712EC
Authority key identifier: EF:EE:B5:0E:FE:D2:9C:17:17:10:85:40:0A:F0:7C:66:90:FA:39:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/JS4OZw-dfoAGScXsIL4kb3KCX_4.roa
Signing time: Mon 11 May 2026 11:10:57 +0000
ROA not before: Mon 11 May 2026 11:10:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205614
IP address blocks: 194.116.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:bb:a9:f6:2f:a6:6c:a4:5f:67:4e:b6:e6:c7:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efeeb50efed29c17171085400af07c6690fa396a
Validity
Not Before: May 11 11:10:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=252e0e670f9d7e800649c5ec20be246f72825ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e4:8e:c0:25:ef:b8:bd:3b:c7:c8:07:77:04:
cf:87:83:76:9e:b2:a5:b4:25:45:8d:bb:94:38:10:
32:15:04:f9:f1:e8:7f:b8:f8:f0:4c:8e:2c:0f:53:
f9:4b:c1:0c:01:22:27:8b:01:26:e0:04:de:f4:ad:
f0:24:5d:75:86:ce:e1:17:6d:a3:1c:ff:5e:8d:ea:
c2:1d:b1:d6:ab:e1:c2:e4:8c:94:3e:ae:cb:c5:78:
b9:d2:65:91:76:b3:26:86:40:f0:ca:7c:29:19:da:
c8:74:af:e3:0c:3a:cd:50:b3:46:b1:42:23:d4:6e:
29:ba:ac:4d:c1:db:76:2b:3a:f0:47:eb:ff:c5:18:
8e:d7:f1:19:52:36:53:cb:ed:1f:f1:a1:2a:1d:2c:
9a:32:9d:d4:c5:6a:ba:27:25:e8:3a:a1:a5:85:a4:
47:55:92:1e:3a:b6:3b:9c:1b:e7:78:47:1e:db:a6:
a5:a1:db:bf:6d:5c:28:84:50:71:37:e4:f1:bb:65:
f2:23:e4:51:74:3d:0e:e5:b4:59:f2:9e:e8:3b:45:
f2:81:c8:5d:e5:d8:c3:45:e6:d0:75:cd:db:61:9f:
b0:27:69:bb:75:42:82:88:c8:63:04:ec:2f:5f:9b:
c3:03:17:11:2e:45:23:8f:a4:fc:4d:d5:56:a2:55:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:0E:67:0F:9D:7E:80:06:49:C5:EC:20:BE:24:6F:72:82:5F:FE
X509v3 Authority Key Identifier:
keyid:EF:EE:B5:0E:FE:D2:9C:17:17:10:85:40:0A:F0:7C:66:90:FA:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/JS4OZw-dfoAGScXsIL4kb3KCX_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.206.0/24
Signature Algorithm: sha256WithRSAEncryption
14:55:d8:d2:72:8f:ba:8f:15:eb:47:e3:7d:51:60:f3:bc:6d:
81:96:96:04:f0:11:f5:58:0a:a1:45:36:64:77:f3:fd:58:ae:
d2:b7:27:3e:84:01:1d:31:bb:00:60:da:7f:74:41:f9:3c:cc:
cf:a6:7b:86:e1:80:df:b4:e3:9d:6a:f5:3f:16:dd:91:2d:a6:
6c:e7:71:24:32:20:28:a9:de:95:da:74:f4:df:02:8e:37:a4:
a1:74:5f:f2:f2:2e:4c:1c:02:c5:8c:d8:c7:ef:4a:28:38:30:
2b:b0:35:09:c7:93:bb:00:c4:89:6b:01:75:68:ed:d7:68:37:
73:a9:3c:fd:6b:1d:de:b9:09:b3:ee:8e:66:9b:7c:8e:31:f3:
af:5e:b4:da:9b:7d:0e:eb:d1:20:20:b0:9e:44:18:e7:e1:a4:
9e:b8:83:6b:88:29:dc:fc:32:94:37:a1:0e:1c:53:49:1f:85:
b8:9b:78:7b:21:76:69:8f:d1:37:eb:9a:32:3f:07:a4:2d:84:
17:af:84:88:5c:6f:20:df:a6:4a:c2:dd:e6:f3:d9:cc:fb:31:
03:11:20:85:f8:75:c7:42:52:47:13:86:c4:63:04:dc:5f:91:
ac:4f:5d:e2:76:0f:f4:43:71:c0:99:28:f0:ef:5c:65:0f:9a:
9e:e9:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:51 2026 by rpki-client