Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JhjQ4CNxvg-GhdfsGbgha82zi4s.roa
File: JhjQ4CNxvg-GhdfsGbgha82zi4s.roa (raw, json)
Hash identifier: lzn7RgnH6QBiQ08JYwtvb0caYz7cFVz1HjyPjZz+Wbs=
Subject key identifier: 26:18:D0:E0:23:71:BE:0F:86:85:D7:EC:19:B8:21:6B:CD:B3:8B:8B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D35AC17D1A859E77A992571C63C551A3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JhjQ4CNxvg-GhdfsGbgha82zi4s.roa
Signing time: Thu 24 Sep 2026 12:18:55 +0000
ROA not before: Thu 24 Sep 2026 12:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30042
IP address blocks: 212.74.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:5a:c1:7d:1a:85:9e:77:a9:92:57:1c:63:c5:51:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 12:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2618d0e02371be0f8685d7ec19b8216bcdb38b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:ec:9e:29:8b:bd:c2:4f:b7:47:40:50:17:
9f:b2:fd:13:69:38:b0:87:a2:6d:80:60:38:98:e2:
36:d5:95:4d:ff:99:25:38:d6:a7:5d:1e:b3:97:4e:
47:1f:11:38:e0:b8:52:98:dd:fd:91:9f:df:55:fb:
8a:c7:c1:ab:76:ea:28:82:f0:1b:5f:81:5b:9e:d8:
e5:db:bc:1e:dc:0d:65:3b:16:8b:a9:0a:88:29:4f:
1e:1d:b3:67:94:dd:52:3e:42:6d:c4:53:01:e7:04:
b8:1e:8f:6e:c6:61:6b:9c:4f:0a:70:a3:97:32:ad:
b2:21:e0:5d:47:31:a6:e2:32:5d:7b:95:14:86:19:
5b:f6:ec:3b:cb:ed:27:08:59:1f:fb:cc:f2:7c:6e:
1f:8f:4e:65:34:f7:b9:86:9b:24:f3:e3:31:61:73:
48:69:ec:51:d7:7b:6e:f5:84:3c:95:0b:bb:99:a3:
d3:9c:30:0d:6f:1c:bd:d1:8b:90:8c:b3:93:ea:54:
12:f9:f8:a7:b8:9a:80:1a:53:92:df:dd:01:5f:60:
53:c0:c3:c5:85:79:08:0c:b8:71:6c:f4:5e:5a:3d:
75:e7:0c:cb:df:ab:3a:73:fe:77:db:90:b0:11:2d:
ae:36:c2:8d:f1:d6:d8:e3:ee:c9:8a:cd:a6:24:7a:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:D0:E0:23:71:BE:0F:86:85:D7:EC:19:B8:21:6B:CD:B3:8B:8B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JhjQ4CNxvg-GhdfsGbgha82zi4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.8.0/21
Signature Algorithm: sha256WithRSAEncryption
41:e3:69:66:01:f0:ee:6e:de:2e:38:23:ca:56:4f:db:57:62:
5c:98:1e:7c:f6:63:ef:83:0b:ee:eb:4d:aa:ea:b7:51:89:d7:
36:fa:89:59:7a:7a:17:c6:fb:bd:8a:8d:9c:60:63:50:c1:3f:
6b:3b:62:e8:f7:f8:3b:b2:a5:e4:42:9c:10:90:f9:8c:8a:1b:
02:63:0b:e4:c9:0b:15:52:f8:1a:11:be:4b:b5:98:a6:52:35:
ff:53:df:9e:f8:2d:fb:3d:1e:57:58:ac:dc:3c:f5:b7:02:41:
8c:0e:79:c1:c3:79:22:bf:51:6e:4d:e8:51:72:66:73:32:49:
c6:24:03:6d:cf:46:08:90:36:12:de:c7:96:56:cc:34:c1:93:
ff:10:fe:30:bc:d7:41:e6:49:ff:80:5b:d5:7d:45:be:29:3d:
68:87:ab:7b:35:36:c8:a4:14:a1:4c:18:a3:ad:90:59:18:40:
ab:2c:ec:70:93:54:61:3b:16:14:46:d6:82:12:1f:58:ab:c9:
e8:b2:bb:56:51:67:e9:3c:6d:8b:61:76:78:09:8d:29:32:e1:
c5:7f:78:11:37:82:1f:03:54:02:21:1c:84:19:3f:2c:f0:42:
5e:d1:9d:e5:6f:1e:6b:32:d0:33:b3:3d:99:28:24:a4:24:08:
29:26:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:08:48 2026 by rpki-client