Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/JBSiUErmHLZ6L_XK9FcbRuOw9Gk.roa
File: JBSiUErmHLZ6L_XK9FcbRuOw9Gk.roa (raw, json)
Hash identifier: lxmLANsYlOzxv7LhRW+mHrlEBHMpue+1ddw6TCsuRlY=
Subject key identifier: 24:14:A2:50:4A:E6:1C:B6:7A:2F:F5:CA:F4:57:1B:46:E3:B0:F4:69
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A1AC066A5CC348780533AD0E6A3FE81C02
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/JBSiUErmHLZ6L_XK9FcbRuOw9Gk.roa
Signing time: Thu 05 Nov 2026 14:04:23 +0000
ROA not before: Thu 05 Nov 2026 14:04:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219202
IP address blocks: 193.160.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:06:6a:5c:c3:48:78:05:33:ad:0e:6a:3f:e8:1c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 5 14:04:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2414a2504ae61cb67a2ff5caf4571b46e3b0f469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:ef:ba:36:17:ce:a3:75:16:4f:d9:c4:da:
ad:f2:ec:7e:8f:4b:b0:2e:b8:dc:2a:93:6a:63:a2:
28:ef:5f:d6:cc:4e:6f:59:7f:c0:c0:58:f4:7f:c5:
28:47:6a:93:7f:ea:0b:f3:76:60:50:50:09:07:f2:
71:63:4e:26:2e:e0:4f:ac:89:9e:61:65:26:42:a8:
7a:67:07:47:b0:2f:57:a0:45:bb:16:35:76:39:9f:
06:73:67:1f:e9:4d:bb:92:27:d4:a6:c2:4e:cf:63:
87:01:3d:47:41:19:a8:3a:88:c2:0f:a8:04:46:f1:
90:12:e6:08:c9:4d:d2:0a:c9:2f:a5:c0:f1:78:87:
7a:87:fe:42:58:5e:85:89:a9:d3:08:02:59:be:fe:
32:1d:5d:ea:17:da:c5:e5:07:e0:bb:9e:79:62:51:
f3:ab:4d:81:55:02:c1:0a:56:c3:37:b2:eb:bd:68:
66:ca:b0:d1:8e:1c:35:5e:53:77:5d:ee:44:39:6a:
5c:7a:5d:70:b2:5c:0d:d2:4a:04:a1:4c:42:b1:eb:
05:e4:3c:a8:da:f1:6b:2a:d6:24:14:5b:ea:3d:f1:
23:11:31:1b:76:c8:15:16:1d:ea:46:9a:b6:a5:9f:
24:20:bd:3a:86:2e:a2:0c:eb:c9:6a:43:8f:1d:e6:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:A2:50:4A:E6:1C:B6:7A:2F:F5:CA:F4:57:1B:46:E3:B0:F4:69
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/JBSiUErmHLZ6L_XK9FcbRuOw9Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.140.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:06:00:d7:9a:4f:0c:f1:71:83:b9:71:8a:59:25:ee:24:20:
8c:77:0a:01:c6:29:ee:f0:3d:1f:d1:05:4d:c7:31:6e:c3:9e:
40:78:5a:7d:f7:f0:c4:a0:b5:02:48:4f:d0:f7:0a:1a:2e:cb:
cd:f6:83:8f:53:96:5b:66:a7:7c:1b:84:57:89:ee:82:17:1f:
15:92:cc:0f:94:03:31:64:59:a7:50:9b:fb:11:ed:9b:47:f4:
90:d0:9d:79:ed:aa:50:ea:4d:ee:a5:99:d5:6f:f3:a6:18:26:
8a:81:65:f7:dd:ab:ba:18:21:22:58:dc:f4:82:c2:14:77:fb:
e7:8a:ef:0d:1a:2f:35:68:73:1b:26:61:04:01:9b:7a:cd:4b:
43:8d:91:58:c0:34:39:17:ab:23:d4:fb:0f:1f:77:f7:c7:b2:
38:0e:eb:16:7e:ce:26:2e:5f:bb:79:92:14:68:3e:0b:db:35:
e6:bf:a6:93:bd:91:ca:ae:81:c0:85:bc:ca:29:d5:48:d6:9e:
43:cf:a8:8e:a9:99:68:be:9b:5c:1e:59:d7:04:d4:ea:59:10:
90:ee:e8:98:92:1c:70:be:bc:33:6c:c7:bb:93:f7:b5:de:e5:
80:fe:93:fe:83:ae:17:6a:ad:bf:72:4d:d1:0b:27:28:82:6d:
5b:2f:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:10:29 2026 by rpki-client