Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/jxsYluW7L-VesUMEEAjwwcE99j4.roa
File: jxsYluW7L-VesUMEEAjwwcE99j4.roa (raw, json)
Hash identifier: nwnLEM1dFL1lWHtpYNqY2hUoyqHLs3XF/ua5I+nhIX8=
Subject key identifier: 8F:1B:18:96:E5:BB:2F:E5:5E:B1:43:04:10:08:F0:C1:C1:3D:F6:3E
Certificate issuer: /CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Certificate serial: 019F23686F221BE80A2AF9793C0835C68CE3
Authority key identifier: 5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/jxsYluW7L-VesUMEEAjwwcE99j4.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47372
IP address blocks: 93.191.160.0/21 maxlen: 32
185.192.168.0/22 maxlen: 32
2a06:5d00::/29 maxlen: 48
2a06:5d00::/30 maxlen: 48
2a06:5d04::/31 maxlen: 48
2a06:5d06::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6f:22:1b:e8:0a:2a:f9:79:3c:08:35:c6:8c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f1b1896e5bb2fe55eb143041008f0c1c13df63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:95:97:be:ca:ec:b2:78:e1:fc:33:56:5c:
7a:1e:5e:7a:c9:3b:78:63:c1:c3:6c:6e:0f:a8:17:
d7:7e:1d:ee:a9:30:ae:4c:ba:86:09:bc:fd:6a:b3:
f8:6e:44:fc:4e:ae:8b:4e:92:80:1e:a7:89:cd:e5:
07:cc:01:79:d4:88:7e:0e:82:19:08:5e:f8:be:c0:
ea:d9:1e:f3:6a:3c:72:cc:f7:40:2f:af:d5:b3:ac:
be:c4:03:13:76:06:54:59:7b:7d:06:cd:2c:01:20:
f0:fe:04:bc:e2:ba:50:18:1b:a4:b0:a6:6a:b2:f6:
ee:ac:28:d7:34:6f:75:ec:23:bf:2e:66:ec:23:4c:
ac:c4:cb:48:dc:6d:26:91:41:c4:d8:ae:b5:9a:ef:
e2:7d:b5:4b:36:37:dd:e1:cf:63:5f:88:2a:38:61:
11:89:5c:ee:b9:71:a6:15:21:a5:67:22:f4:41:ca:
5e:24:7e:10:d2:8d:35:f0:c3:86:cb:50:ee:c7:8b:
aa:75:7c:01:d6:19:87:80:47:78:18:0e:34:f7:39:
0d:30:72:d1:5a:df:54:d5:ab:6e:18:ed:7b:f5:5a:
9a:03:67:37:34:74:d8:b1:55:3c:37:1c:77:24:70:
4f:ad:39:51:7a:5d:c6:8d:8f:ac:59:66:bf:be:3f:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:18:96:E5:BB:2F:E5:5E:B1:43:04:10:08:F0:C1:C1:3D:F6:3E
X509v3 Authority Key Identifier:
keyid:5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/jxsYluW7L-VesUMEEAjwwcE99j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.160.0/21
185.192.168.0/22
IPv6:
2a06:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
99:83:55:6a:78:3e:dc:73:92:b3:39:57:6a:f7:e3:92:a7:3d:
51:2c:b7:4a:58:31:38:53:28:ad:58:45:54:da:39:4a:75:e7:
a4:89:06:45:dc:37:97:df:04:61:76:a4:9e:5c:81:c0:e0:c2:
16:ac:44:58:ad:d9:36:22:e6:40:1d:37:23:d5:6e:14:4c:98:
79:4a:92:92:21:f5:00:0e:ba:1a:21:76:76:d8:18:3c:55:89:
f4:5b:84:d1:a8:5f:27:97:0e:a8:c4:27:fe:25:f3:7f:c0:b2:
d4:f5:5b:32:20:da:ef:4a:aa:d3:19:fb:c1:8e:39:1f:47:54:
0c:65:f7:33:6e:8b:9a:9c:56:95:21:bb:5c:52:a0:7e:7b:75:
94:3d:39:b7:68:bc:7f:66:5b:1d:ac:b8:22:b3:22:ab:c6:d2:
eb:89:3b:29:db:8f:0b:2c:80:54:95:89:86:e5:dd:da:29:ce:
d9:6c:5a:a2:ed:7c:b0:29:da:6b:da:49:05:72:e0:ed:e2:9c:
d7:5d:83:d5:6a:10:c0:92:4e:06:f8:bc:80:96:bd:46:54:6e:
1b:50:bb:9d:5a:26:e9:8a:56:49:67:3e:06:ba:be:69:f3:0b:
7b:74:a7:58:ae:88:65:5f:41:d3:c1:2a:04:23:19:0f:65:3c:
23:8d:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:52 2026 by rpki-client