Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/JDNYiM5cTQvYl86g2PlIXooszc4.roa
File: JDNYiM5cTQvYl86g2PlIXooszc4.roa (raw, json)
Hash identifier: k41osz+0Jqv0dxjQFYhX5kFK2fQdrK1p+ItLN6xOXqI=
Subject key identifier: 24:33:58:88:CE:5C:4D:0B:D8:97:CE:A0:D8:F9:48:5E:8A:2C:CD:CE
Certificate issuer: /CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
Certificate serial: 019F2368C2E9A67231C18CBD60D6F769EC56
Authority key identifier: 67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/JDNYiM5cTQvYl86g2PlIXooszc4.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21013
IP address blocks: 194.242.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c2:e9:a6:72:31:c1:8c:bd:60:d6:f7:69:ec:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24335888ce5c4d0bd897cea0d8f9485e8a2ccdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:0f:ec:90:83:45:03:33:89:eb:1e:83:e0:
de:8c:f5:85:1f:39:80:b0:8f:ec:87:fa:ef:27:64:
d6:d3:ab:bf:bc:3a:fc:95:18:03:47:1e:a9:1f:3d:
fb:e1:ac:95:26:fa:e1:fa:dc:c9:1e:e3:87:58:31:
f3:51:c3:6d:8b:3b:a2:19:09:1a:b9:8f:8d:70:55:
3e:10:cf:e0:e6:26:1f:64:8f:d9:02:61:5e:ab:90:
74:b4:28:20:32:bb:7b:86:93:44:a6:0c:62:3a:ae:
d0:85:3b:14:58:6c:19:82:a7:d4:3d:9e:57:76:07:
34:89:45:84:c8:1a:2f:15:49:fc:d0:48:7e:9c:b5:
06:7a:f2:ed:4b:65:42:b3:05:5f:3a:40:d8:c7:91:
b6:9a:0f:d8:50:19:3b:b0:30:8e:4d:a4:64:67:7e:
df:ac:59:03:b1:b6:ca:66:e8:56:6b:af:e8:c1:b7:
e4:f5:2f:22:4b:5c:c1:02:28:40:df:64:63:ce:cb:
83:6d:9a:b2:cb:c4:eb:83:e0:85:8f:27:7a:d2:6a:
18:6b:b7:3e:d9:1d:1e:52:fc:95:bc:51:cc:fc:f4:
33:fa:d3:75:d2:ff:51:c6:8a:95:2d:f9:a4:7e:91:
5d:37:73:de:1e:48:f1:0c:4e:0e:8a:ca:fd:21:1e:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:33:58:88:CE:5C:4D:0B:D8:97:CE:A0:D8:F9:48:5E:8A:2C:CD:CE
X509v3 Authority Key Identifier:
keyid:67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/JDNYiM5cTQvYl86g2PlIXooszc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1c:bc:b8:7d:22:ea:91:78:72:b6:23:98:78:a4:4a:c6:8e:
a4:bb:79:c7:29:65:ec:61:31:0d:b5:40:84:44:75:55:71:43:
3c:b6:b2:56:c0:f0:32:25:aa:49:20:1a:b0:ea:ed:29:69:e1:
4b:42:f9:f3:7a:7d:7d:b0:36:82:c2:eb:f1:13:6f:09:8a:04:
62:5b:42:2b:76:57:5f:0f:dd:99:dc:49:34:56:4e:5b:63:47:
5a:ca:fc:fb:f0:21:5a:f6:da:9f:d4:64:42:c3:93:b2:29:2d:
d4:68:7f:67:b9:06:43:e2:ac:31:96:35:5c:c1:c8:99:5c:7b:
a5:c5:af:89:2f:b6:ac:98:29:d7:c9:ae:76:33:3e:50:64:7d:
16:a1:40:bc:e0:25:29:13:ae:58:c9:2c:48:af:6e:dd:f4:c5:
7f:47:49:8e:cf:0d:54:3d:c1:47:07:ef:c1:7b:02:40:1c:20:
1a:26:26:36:95:f7:54:03:87:30:3a:af:ab:1f:4c:e0:6c:79:
9e:e0:3e:72:43:1a:ab:2d:3f:31:dc:05:0d:2b:71:c6:e6:1b:
05:2f:ab:6f:50:d1:13:0f:98:ba:41:a0:fe:13:1b:aa:9c:61:
68:2a:8d:c1:2c:3a:e5:9c:30:a1:ac:0f:24:4a:6b:b7:51:74:
07:30:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:19 2026 by rpki-client