Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/JBWhnAftgWVt-8hkoCJMnDV0bqQ.roa
File: JBWhnAftgWVt-8hkoCJMnDV0bqQ.roa (raw, json)
Hash identifier: hGxwf/tMCr2ZpH/sFic2b1gaXbSFRP1kQ/xiM0nG6PI=
Subject key identifier: 24:15:A1:9C:07:ED:81:65:6D:FB:C8:64:A0:22:4C:9C:35:74:6E:A4
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A1CFEDB9CD2BE356AF8DFF9FE6601481AA
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/JBWhnAftgWVt-8hkoCJMnDV0bqQ.roa
Signing time: Thu 12 Nov 2026 13:23:45 +0000
ROA not before: Thu 12 Nov 2026 13:23:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204490
IP address blocks: 109.248.226.0/24 maxlen: 24
109.248.239.0/24 maxlen: 24
185.17.64.0/24 maxlen: 24
188.130.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:ed:b9:cd:2b:e3:56:af:8d:ff:9f:e6:60:14:81:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 12 13:23:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2415a19c07ed81656dfbc864a0224c9c35746ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4c:0e:19:65:91:9d:e6:8c:cc:41:c9:fa:6d:
df:0b:61:cf:bf:af:83:7b:5e:a9:9b:25:dc:dc:c6:
2d:34:8f:c7:68:59:26:16:26:4e:d3:38:34:36:e6:
7e:9a:ff:8e:63:ce:54:bd:ad:08:df:e6:03:c9:b6:
bc:55:de:76:f0:a9:2d:57:12:6a:61:5f:cd:8b:ae:
6c:b1:b9:c9:4c:c6:bb:41:0a:55:b0:a7:c5:a1:19:
1c:53:f9:d9:90:65:f3:45:b5:38:34:e9:37:8c:4e:
63:e7:70:f3:dd:22:fa:7a:aa:07:7a:cd:d8:73:38:
88:f8:b7:b3:38:50:1a:2a:50:61:5b:72:96:1c:32:
0c:f4:75:a7:5b:ba:09:32:4d:3c:99:2d:02:ad:95:
df:16:56:d4:97:21:4f:d5:56:c0:9e:d2:37:6c:20:
70:e1:87:90:ab:f4:55:b2:47:83:7f:fa:45:77:97:
1d:91:f3:07:6a:e4:0b:4e:78:30:86:b2:6c:9b:70:
ea:d7:e8:c1:5f:ed:7c:c5:8d:eb:87:1f:e3:98:6e:
57:7c:29:17:26:40:87:0c:2f:cb:a4:fc:22:8c:bc:
6e:d0:a7:98:57:e0:eb:75:91:21:41:20:3e:a0:18:
34:9f:e5:d1:94:e3:39:ca:1b:49:e2:68:6f:26:21:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:15:A1:9C:07:ED:81:65:6D:FB:C8:64:A0:22:4C:9C:35:74:6E:A4
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/JBWhnAftgWVt-8hkoCJMnDV0bqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.226.0/24
109.248.239.0/24
185.17.64.0/24
188.130.233.0/24
Signature Algorithm: sha256WithRSAEncryption
85:08:12:c1:d2:19:87:d0:d0:54:56:5c:c9:08:1f:b7:6f:dc:
1d:73:db:77:59:fa:d0:8f:d9:df:99:28:c8:0a:6f:f4:0d:40:
dc:76:73:e0:32:8b:ed:19:da:eb:5a:98:ec:96:2d:d2:b1:5f:
7a:7d:7c:be:ce:2c:ce:ee:8f:41:ac:55:a5:24:02:74:6e:28:
17:95:b8:a0:28:e7:67:8a:2c:c3:b0:66:a1:04:1d:82:df:db:
54:89:02:a0:c3:82:8f:a6:ca:56:c2:17:7e:f2:a3:ef:06:66:
33:66:f9:fb:41:d3:e6:14:06:56:03:f0:f1:2b:0f:d6:96:70:
ff:55:62:9e:48:93:ca:1d:b1:ac:b3:db:a2:20:03:1f:0c:3f:
d7:cd:7e:cc:70:da:9d:99:1a:fb:13:20:42:a0:fd:01:d8:34:
de:8c:16:c2:a1:1b:50:2d:35:ce:67:c9:4a:b5:ba:ad:b9:f6:
5c:43:45:b5:34:db:24:69:3d:ec:a4:19:ee:80:90:27:20:93:
d0:54:6b:f1:11:b2:ac:07:92:e8:43:e0:ad:0c:d3:e6:22:5c:
b4:50:70:6c:84:d9:65:59:23:28:24:32:de:ed:68:0c:9b:fb:
ee:78:7a:83:79:41:6c:85:ee:aa:1a:1f:2b:2a:41:29:91:57:
80:26:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:07:38 2026 by rpki-client