Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JnkycXsTEwoWYO3entcOZ3lxk_g.roa
File: JnkycXsTEwoWYO3entcOZ3lxk_g.roa (raw, json)
Hash identifier: r118zjrSZFpdvNFCeifggl6t2wBP8YQ51qo3cx0WF4s=
Subject key identifier: 26:79:32:71:7B:13:13:0A:16:60:ED:DE:9E:D7:0E:67:79:71:93:F8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A08A1D4228767F3ABEBC1CAB69FE6F6F9D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JnkycXsTEwoWYO3entcOZ3lxk_g.roa
Signing time: Thu 10 Sep 2026 06:59:28 +0000
ROA not before: Thu 10 Sep 2026 06:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400618
IP address blocks: 82.108.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1d:42:28:76:7f:3a:be:bc:1c:ab:69:fe:6f:6f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 10 06:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=267932717b13130a1660edde9ed70e67797193f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:cf:42:e6:5a:c7:e6:37:0a:e9:9d:f0:0f:
d9:32:69:ec:d5:f7:80:e8:91:a8:b3:8b:0f:0b:af:
76:07:c4:96:1d:31:9a:ee:b5:85:81:5b:2c:44:f0:
5b:ca:6d:2a:ce:cc:ca:17:56:b4:8c:ca:ab:30:8c:
35:1e:0c:ce:6b:6e:44:b4:68:5b:c8:7e:3d:e0:b4:
d6:96:f3:7c:24:29:f0:c1:6e:01:53:a0:89:30:36:
26:0b:dd:48:35:b4:71:ad:1b:8b:41:e5:f2:1f:2d:
fa:4c:d1:6c:da:03:eb:20:dc:e6:c5:3f:ee:dd:86:
ab:a5:2f:e5:cb:9b:27:ab:1c:c9:b1:e4:b0:da:4b:
48:c7:54:a3:9f:c4:1e:d2:ab:15:98:19:ae:81:ba:
65:98:21:a3:20:f5:55:ef:e7:76:1c:91:d2:09:35:
9f:0d:58:12:d6:55:ce:04:2f:4f:c9:e7:6b:31:2d:
2e:2b:d1:6f:28:f0:ef:99:f3:4e:3d:44:8e:ad:0b:
45:a5:88:ae:40:c4:e9:dc:8a:7e:bd:b8:d6:38:e9:
ba:5a:22:25:4c:1e:f4:46:69:76:5d:d2:e6:55:e3:
c5:b8:c8:21:64:36:10:26:3f:0e:6d:9b:93:8b:19:
1e:1f:f7:54:f5:f0:96:a9:75:97:98:86:0b:4f:fc:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:32:71:7B:13:13:0A:16:60:ED:DE:9E:D7:0E:67:79:71:93:F8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JnkycXsTEwoWYO3entcOZ3lxk_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.196.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:a9:bd:65:0f:ea:34:24:ce:cb:77:7d:d3:78:12:dc:78:d5:
09:50:9c:a4:6f:57:7c:1d:d3:6b:39:e8:d1:f6:2d:7d:fb:d9:
34:2d:7a:23:4b:91:75:b0:e8:5d:62:66:81:85:c2:8f:32:4e:
7d:14:82:76:ae:10:c3:e9:bc:cc:35:53:35:71:8f:a3:13:52:
4f:67:e8:c4:0f:ad:33:ef:1c:69:5b:65:26:3b:67:72:9a:59:
ba:3d:9f:07:c7:2b:4d:40:7b:cc:2e:b1:8b:71:5e:a7:4c:9a:
f8:76:c1:9a:ee:76:33:90:04:e9:c1:05:f2:91:e7:f1:8e:d5:
62:1e:cf:33:be:a6:16:81:73:df:e9:f6:aa:2d:56:16:2d:2c:
a0:4e:13:0a:69:26:45:bd:03:b5:87:9d:b4:4e:b3:e0:64:77:
3a:ed:b1:3a:e0:7e:8a:6c:04:8a:af:9b:eb:02:32:0a:b5:70:
88:9d:33:a2:d3:0c:79:87:33:48:25:74:8d:cb:3e:e4:fd:5e:
2d:ab:d5:11:f7:bf:65:70:3b:fb:2d:fd:c4:58:7b:70:13:10:
92:56:c7:19:13:8e:e9:d8:99:06:7e:24:8d:bc:dd:ca:df:83:
a5:ab:27:75:42:fe:6e:9e:fa:d4:e9:53:e3:ff:ec:17:ac:53:
36:48:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:14:08 2026 by rpki-client