Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JjmRwl4ESEvenyZ7wJCJ_8lda14.roa
File: JjmRwl4ESEvenyZ7wJCJ_8lda14.roa (raw, json)
Hash identifier: EHimZWZkusFJQ5ANTAOsagc59GLmC3QLLizAUf7B+S4=
Subject key identifier: 26:39:91:C2:5E:04:48:4B:DE:9F:26:7B:C0:90:89:FF:C9:5D:6B:5E
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019D20BCD3E59F73866DCA0C4804FE90E36C
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JjmRwl4ESEvenyZ7wJCJ_8lda14.roa
Signing time: Tue 24 Mar 2026 16:45:39 +0000
ROA not before: Tue 24 Mar 2026 16:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200506
IP address blocks: 79.172.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:bc:d3:e5:9f:73:86:6d:ca:0c:48:04:fe:90:e3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 24 16:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=263991c25e04484bde9f267bc09089ffc95d6b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:96:10:f4:9e:51:97:f7:67:20:22:53:ce:cd:
aa:c5:cd:62:1a:d2:7f:8a:67:1c:55:c5:fc:33:e9:
3c:e2:d3:0c:5d:1e:b6:d6:df:b8:fc:93:00:dc:b8:
f6:43:85:f1:b4:a3:a0:c3:62:6b:a8:4e:ad:b2:c5:
c9:0f:65:9c:97:ff:54:88:ff:2f:0a:18:53:e5:f6:
45:4c:ac:31:5b:f6:2f:bf:27:e1:70:81:2a:e6:d2:
8b:54:12:75:c2:32:92:2f:b9:91:5b:10:a7:f9:7d:
ed:bf:e2:8b:c8:7b:27:ee:93:d2:9a:d0:6e:e7:1f:
e7:c0:9a:ee:8f:16:9e:20:27:91:a9:a7:ff:9a:95:
5e:d6:d7:06:f1:7b:59:20:22:d0:48:21:8c:97:00:
ec:03:a6:df:d1:99:95:30:04:bb:96:a8:38:e8:3c:
da:9d:5a:e0:a7:c2:e2:1f:87:57:83:aa:5a:d5:b5:
8a:8b:a4:b5:b8:d7:81:c0:0c:88:71:40:57:08:31:
ff:2c:cb:d2:d9:5d:ab:95:1a:92:5f:ae:87:dd:15:
79:c1:7c:a9:90:91:5d:8b:32:3a:63:e3:64:01:0b:
29:9a:6c:0a:2b:3e:33:ef:40:52:33:0e:b1:42:4a:
20:a0:01:30:15:cf:7c:7a:5b:8c:a8:cd:90:d8:51:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:39:91:C2:5E:04:48:4B:DE:9F:26:7B:C0:90:89:FF:C9:5D:6B:5E
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/JjmRwl4ESEvenyZ7wJCJ_8lda14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
Signature Algorithm: sha256WithRSAEncryption
53:92:57:43:3b:18:a1:00:94:ec:34:f9:47:6c:45:14:37:af:
32:cb:1d:58:99:d6:d8:bf:54:7c:2a:41:fa:f7:0c:79:be:66:
67:07:4b:be:cb:cc:c0:31:ba:6c:95:71:c7:3f:db:51:70:8e:
da:28:df:6d:fe:b0:df:aa:33:e8:cc:48:fe:78:01:d7:c1:1c:
ce:79:c9:94:08:5f:0d:44:18:6e:54:6f:ec:e7:1a:66:54:c2:
46:ad:3d:b6:6a:9b:d0:c9:58:06:34:2f:6f:34:88:ad:fc:ed:
78:57:66:5b:13:28:da:ca:18:6d:af:bb:c5:5e:fe:ad:f2:ed:
82:37:be:4a:ad:76:59:d7:45:24:26:8f:b8:5e:3d:d8:05:4c:
05:de:f7:e8:04:f6:83:b2:66:b8:fd:ae:70:14:40:53:59:07:
32:eb:b5:f5:74:e9:90:45:a9:19:d4:7f:e7:71:80:b3:49:cb:
b9:7e:cc:53:8b:41:b3:ec:a5:95:5d:ca:4b:22:3c:c2:cb:1c:
f9:02:34:c8:bc:44:66:3b:3f:33:93:51:d4:9b:32:ab:e9:c8:
7e:16:bb:3d:38:d4:f6:31:de:f2:38:56:63:ff:dc:34:1a:04:
fb:a3:b6:a7:a8:fe:41:fc:34:ed:d9:e4:4b:8f:b3:59:37:c1:
26:8e:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:04 2026 by rpki-client