Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa
File: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (raw, json)
Hash identifier: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=
Subject key identifier: 44:9F:FC:30:B8:90:70:43:10:96:39:82:0E:65:67:38:E9:DF:43:26
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019DFC75586C383942D286B3A941BE2C4535
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa
Signing time: Wed 06 May 2026 08:44:01 +0000
ROA not before: Wed 06 May 2026 08:44:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209378
IP address blocks: 141.0.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:75:58:6c:38:39:42:d2:86:b3:a9:41:be:2c:45:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: May 6 08:44:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=449ffc30b8907043109639820e656738e9df4326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:4d:a5:49:d1:7e:1b:f1:2a:fd:89:e3:8b:
cf:46:6f:27:5b:f8:3a:34:bc:05:a9:4a:41:9d:96:
cb:46:e8:64:64:9b:0d:2b:2b:b0:89:2c:8a:c4:e2:
f2:d1:81:90:13:41:15:95:6c:6d:f8:ab:ab:17:17:
6e:a0:61:55:d3:14:15:46:33:8b:73:50:de:9a:67:
01:3e:c2:e8:df:90:84:23:ba:e8:38:a7:f1:2e:07:
72:12:97:92:81:d6:66:f8:c5:77:a1:e3:02:e9:97:
65:5a:b5:b9:06:1a:a2:76:3d:c2:01:f9:73:a3:b5:
0a:35:4d:9b:19:5e:2a:03:e9:5f:44:75:e6:58:b8:
94:07:b1:9d:b9:1b:0f:3a:24:41:c0:c4:36:2b:8f:
ae:dc:06:01:30:95:5f:4a:62:9a:af:f7:09:f3:7f:
c0:74:5d:1e:21:b3:22:48:5e:d9:71:ee:54:e6:b8:
bc:74:4c:32:00:73:0c:70:3a:29:7e:99:9b:cb:fe:
0b:aa:7e:47:2f:d7:ff:a5:44:58:48:52:59:2a:84:
ac:72:26:15:71:31:d6:c7:4e:b3:89:f9:9a:1e:7e:
54:00:74:cb:02:c6:87:c8:83:18:06:c1:6f:f2:dd:
52:50:a6:1c:52:0c:1f:b5:86:55:6e:50:16:c0:2a:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9F:FC:30:B8:90:70:43:10:96:39:82:0E:65:67:38:E9:DF:43:26
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b8:0e:dc:52:84:e4:a5:06:ed:75:2b:0a:b9:9a:ea:27:02:
65:07:49:f6:66:d6:ed:00:88:9d:9e:ac:80:43:bc:3d:b4:dc:
18:5a:d3:1f:3b:c0:ed:25:55:c8:93:4c:63:9c:d2:74:ed:54:
eb:01:04:1c:a8:34:04:7e:54:f3:c5:bb:e8:96:5f:e3:a0:2e:
fd:87:e1:b9:25:c6:6d:93:22:fa:3b:9a:21:b2:cc:5b:93:c6:
44:45:57:66:0a:f8:f0:81:a0:6c:5a:87:41:ec:41:3a:4a:41:
19:7d:dd:b1:4a:d4:b7:99:14:03:c6:e1:45:e3:7d:ba:a2:0f:
40:ea:31:bd:33:15:b2:32:39:1c:4f:10:a3:2d:25:a0:ac:af:
da:e2:c7:12:b5:9b:ba:27:5e:b5:a0:c3:30:8e:64:54:58:aa:
1e:2f:24:92:da:0b:7a:17:d1:ac:85:ac:6d:87:5c:fd:b1:0f:
92:e1:cb:23:07:a7:db:4d:0c:9d:51:9d:3f:fd:d2:77:9d:f8:
13:7d:0e:38:04:fe:6e:7d:df:44:6c:97:9a:e1:88:8a:44:f9:
72:80:6d:19:64:cb:91:ad:7e:a8:5b:a4:c2:13:26:f0:81:97:
db:04:a6:8f:09:d9:e0:54:56:ce:f4:ab:e3:05:f7:0e:c0:80:
b6:41:7c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:59 2026 by rpki-client