Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/jbnDsm2JC5tcca4VioOzVQ3zGyU.roa
File: jbnDsm2JC5tcca4VioOzVQ3zGyU.roa (raw, json)
Hash identifier: 9z6efLUX6yahopqmvbLejyPBj0XfCgbVUOBGFVVkxZc=
Subject key identifier: 8D:B9:C3:B2:6D:89:0B:9B:5C:71:AE:15:8A:83:B3:55:0D:F3:1B:25
Certificate issuer: /CN=c02ea5d99d10bcdd2949693725375190909ac782
Certificate serial: 019F23686C586FEEED0B143FF6BDADBCF68D
Authority key identifier: C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/jbnDsm2JC5tcca4VioOzVQ3zGyU.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212123
IP address blocks: 45.129.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6c:58:6f:ee:ed:0b:14:3f:f6:bd:ad:bc:f6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02ea5d99d10bcdd2949693725375190909ac782
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db9c3b26d890b9b5c71ae158a83b3550df31b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:b9:61:65:a3:bc:61:b9:e1:5a:89:28:6b:
30:47:66:d2:dc:e9:80:a2:8b:7f:49:2c:06:64:18:
25:14:bf:80:d5:69:bd:ec:1b:ee:08:3c:d6:fd:46:
b8:4b:1e:da:52:05:2d:6c:93:0c:82:c3:33:99:73:
fe:fb:33:29:7b:f5:d5:3c:a2:12:15:97:00:30:85:
d4:bc:d8:aa:aa:df:04:4f:8b:fb:51:be:5e:ab:9a:
ec:ec:63:9e:04:a9:e6:1b:54:88:a4:8b:47:b4:56:
4a:9d:4c:dc:b3:f2:75:26:d7:89:35:4f:6b:1d:78:
ec:56:69:db:8b:37:61:67:f9:31:ac:80:11:8c:cf:
1a:27:a0:8b:80:3c:a8:02:54:af:78:15:29:3e:65:
68:42:30:45:8d:71:91:b8:2b:01:54:68:74:93:0d:
04:2b:06:18:29:9c:d4:17:4e:fc:33:fb:34:a5:e1:
36:32:c2:f6:b7:58:8c:74:e5:6f:d7:64:94:9e:e0:
98:95:77:cf:67:21:b2:86:8d:e0:61:68:4b:2d:1f:
57:04:00:56:9e:b6:68:2f:1e:06:d2:78:d4:fe:73:
06:5c:fe:7e:ef:70:d1:da:d5:67:50:ba:44:f3:68:
56:15:76:c7:e2:64:b3:da:80:28:ff:78:06:66:23:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:C3:B2:6D:89:0B:9B:5C:71:AE:15:8A:83:B3:55:0D:F3:1B:25
X509v3 Authority Key Identifier:
keyid:C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/jbnDsm2JC5tcca4VioOzVQ3zGyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.94.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d0:57:6c:c6:ca:c1:ae:2e:3f:26:12:46:b2:6c:b4:10:5e:
47:19:21:1c:30:4b:1d:01:7d:38:b1:8e:ee:b1:e7:2f:ec:f5:
9b:3a:34:71:bc:54:b0:06:24:42:b0:58:5e:e9:a6:c5:7d:63:
71:29:c4:d2:73:ac:d9:f6:88:0b:98:d3:84:ab:51:a9:70:0b:
bb:51:db:f7:06:82:1e:28:d5:71:44:91:91:1f:44:a1:de:c4:
f5:71:86:de:52:c6:c6:48:f5:2d:b3:d0:ba:f2:a9:52:9d:04:
83:5f:ab:1f:7e:0f:08:4b:73:87:21:9f:ca:8e:42:c4:85:17:
dc:6d:08:2b:fd:98:c7:de:58:62:02:fe:f7:ba:a2:5e:56:84:
b0:b6:fe:8a:ca:88:9f:e8:e5:56:5e:94:63:5b:00:cb:2b:1e:
44:8c:24:a1:d3:5a:b3:55:1a:34:64:4e:82:dc:14:cd:08:6b:
c4:ae:d6:aa:bc:72:f5:f5:ef:c9:95:b9:57:3d:cd:3c:7c:b0:
8d:82:0e:64:bc:b9:0e:6f:25:77:50:15:2f:14:88:9b:30:c0:
59:7e:61:68:7f:0b:42:5c:4b:d5:5d:39:4d:cd:28:d5:3c:6f:
9f:e4:a9:b2:3c:4b:09:08:bf:e2:2c:36:b0:67:da:fa:ee:46:
04:1f:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:09 2026 by rpki-client