Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Jg-gUVHpbf535teOuW6HXwFiCmI.roa
File: Jg-gUVHpbf535teOuW6HXwFiCmI.roa (raw, json)
Hash identifier: ze/pxvWPqwfThSVu7Z3wUiQOjpw3jA5S5TZpFg3ZQAc=
Subject key identifier: 26:0F:A0:51:51:E9:6D:FE:77:E6:D7:8E:B9:6E:87:5F:01:62:0A:62
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019D25FA14760A0E39C08CE2544978871C33
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Jg-gUVHpbf535teOuW6HXwFiCmI.roa
Signing time: Wed 25 Mar 2026 17:10:39 +0000
ROA not before: Wed 25 Mar 2026 17:10:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 84.32.10.0/24 maxlen: 24
88.216.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:fa:14:76:0a:0e:39:c0:8c:e2:54:49:78:87:1c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 25 17:10:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=260fa05151e96dfe77e6d78eb96e875f01620a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:55:81:9e:b0:a3:b1:7a:d0:50:fa:2d:26:
9a:bb:26:b0:76:88:2e:72:04:3c:58:ad:7e:26:f4:
10:93:73:fd:5a:fc:57:ea:b5:ca:5f:64:b5:00:09:
73:c0:d6:5f:e1:d6:31:1f:05:00:a6:78:20:83:64:
43:2e:d7:5b:e8:79:3a:67:d0:24:7e:41:e8:47:65:
0f:bb:4d:39:49:ee:e2:28:bc:16:48:c2:0f:e7:5d:
31:5e:37:28:8d:7d:54:ea:e6:5a:2c:91:05:a2:52:
87:91:86:e1:47:c6:3f:22:de:0b:29:c7:be:49:15:
f5:6d:b6:39:4c:74:d4:35:f1:8c:06:23:8b:31:f1:
f0:30:aa:a3:78:d2:d9:e9:d5:91:a7:96:2b:1f:a8:
00:75:cc:d0:25:82:47:79:52:3f:85:5c:18:d1:fc:
3d:0e:d5:cd:c6:3c:da:12:bf:86:1e:50:10:5a:9d:
45:6a:d8:7b:1a:8e:cd:61:fb:2f:b9:8e:39:6e:5a:
24:81:4e:2d:62:aa:d8:ef:cc:6d:53:87:6a:f5:94:
57:71:63:a0:a3:ff:ca:db:f7:21:77:43:3b:45:aa:
d7:3b:e1:63:cc:fe:ca:76:f9:97:9b:3e:1b:83:f1:
51:5d:b2:f3:78:38:bb:96:84:05:3c:27:c7:0e:99:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0F:A0:51:51:E9:6D:FE:77:E6:D7:8E:B9:6E:87:5F:01:62:0A:62
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Jg-gUVHpbf535teOuW6HXwFiCmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.10.0/24
88.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:cc:9b:23:16:85:69:a8:88:b6:ea:1a:51:c7:71:83:ac:e6:
1f:71:9d:44:c0:2a:2a:05:a6:b1:78:97:cc:ff:f1:65:9c:79:
ef:a2:80:f4:0e:e0:64:06:a1:89:1c:fe:3c:0f:67:be:72:1d:
8d:3f:52:d1:d7:2c:87:ce:77:ff:89:99:be:f1:75:63:37:7d:
7a:ae:54:aa:6c:63:40:5d:dd:85:89:3b:a2:44:cf:bc:68:8a:
76:ba:af:22:d6:08:05:95:f3:d4:37:55:58:62:21:09:c6:af:
52:12:39:b7:54:19:5d:e5:6e:be:42:7a:a8:a7:f4:5c:29:fc:
a5:06:90:c4:2f:21:61:cd:9a:ce:83:96:1c:56:89:7f:86:ec:
f0:bb:b2:3c:3a:64:7c:14:7c:dc:09:62:10:7a:93:ec:05:bb:
42:99:43:2a:6f:ff:71:bb:64:1e:02:a1:b9:97:dc:03:90:38:
7e:90:da:ba:4d:b4:53:07:df:4e:d7:28:ec:b2:59:cd:87:87:
25:0c:af:c3:e5:12:15:3e:38:b3:ed:d7:4f:cd:a4:ec:7f:54:
5d:de:d3:a3:8c:ca:df:0e:34:1d:11:30:b6:b3:3f:ee:39:99:
d3:46:26:ea:8c:a1:86:72:73:1e:a2:5d:59:24:53:ab:51:94:
82:e1:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:37 2026 by rpki-client