Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/jMD979_3cOHHNQD7_v5YNZOfnzM.roa
File: jMD979_3cOHHNQD7_v5YNZOfnzM.roa (raw, json)
Hash identifier: xs9G8MlTBL5Mdp/eDsUtPV46MEU64DiRi1HUSjB7STI=
Subject key identifier: 8C:C0:FD:EF:DF:F7:70:E1:C7:35:00:FB:FE:FE:58:35:93:9F:9F:33
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 01A0BE50202A67460DDA2B60721ED5F3A3CF
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/jMD979_3cOHHNQD7_v5YNZOfnzM.roa
Signing time: Sun 20 Sep 2026 10:15:17 +0000
ROA not before: Sun 20 Sep 2026 10:15:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48538
IP address blocks: 23.252.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:50:20:2a:67:46:0d:da:2b:60:72:1e:d5:f3:a3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Sep 20 10:15:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cc0fdefdff770e1c73500fbfefe5835939f9f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:da:9c:7e:72:4d:03:4b:f7:5c:37:30:61:
03:67:08:fe:06:94:16:98:11:05:80:27:57:25:da:
30:4b:4e:be:00:00:64:75:c5:8f:7c:9d:27:b9:c3:
68:16:f9:fa:54:ae:dc:23:b3:b0:bc:a1:16:df:46:
f3:34:c8:b2:e5:ce:7f:3b:6d:a2:31:33:28:ef:d3:
bd:40:15:3b:fb:88:e4:4b:ad:99:aa:ae:77:1c:84:
99:54:62:fb:c6:8c:8b:f5:a1:57:50:41:58:d7:50:
0b:f1:1f:f6:79:e1:2c:ca:8c:cd:67:79:40:06:64:
1a:52:9b:14:91:01:a7:cf:0b:7e:0d:69:b0:9e:03:
01:82:66:64:84:df:fb:c9:09:7e:5a:31:45:58:22:
e1:22:09:b9:eb:84:9e:2a:03:1b:6a:d8:15:30:65:
9f:06:d8:28:34:a6:00:40:30:49:f0:7c:35:2a:20:
9c:88:4a:f8:0a:fb:3c:e5:a0:3a:00:76:dc:6f:f2:
45:fc:39:02:99:a4:52:c7:2e:63:2f:1c:fc:6d:5a:
71:01:c0:89:28:60:19:1c:bc:b8:99:d3:17:7b:83:
62:b4:25:f9:24:27:00:f2:82:4f:66:75:a9:ac:c2:
94:10:6d:16:c1:fb:fd:a7:7c:f4:74:be:de:d2:c5:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C0:FD:EF:DF:F7:70:E1:C7:35:00:FB:FE:FE:58:35:93:9F:9F:33
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/jMD979_3cOHHNQD7_v5YNZOfnzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.252.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:74:6f:3e:b5:3f:c4:f4:dc:fc:88:ac:76:6c:3f:c4:3a:db:
4d:30:11:dc:f3:c6:51:ff:94:86:fd:57:83:8b:95:38:c1:fe:
bc:6a:2d:fa:c9:7d:13:94:2d:8d:ad:4d:b1:e4:fc:7c:1f:14:
12:91:01:32:fa:cc:65:41:f0:2a:97:03:59:12:22:3c:d6:3d:
63:3d:06:bf:0f:87:da:a0:7c:1f:40:3b:39:23:7d:32:a0:fa:
48:2d:6e:13:8d:f7:db:30:ee:47:35:3c:e3:fc:c2:c0:83:1e:
8a:dd:89:f8:83:29:1a:a8:52:5d:c2:4e:55:d3:d3:78:66:ec:
c3:b9:e5:cd:0a:97:70:10:6b:0b:03:ff:17:9a:b2:ce:41:25:
0e:7f:91:bb:4b:62:75:3d:a1:7d:ec:2b:33:c8:c7:e8:0a:21:
d7:1e:d0:c5:0d:a9:92:f1:92:d5:3c:99:9a:02:91:fc:bb:45:
a1:c8:84:85:ca:2c:79:67:e2:d2:70:1d:43:ed:89:f0:93:b3:
69:93:1d:9c:b9:94:91:60:94:76:f4:43:7f:28:64:40:64:5b:
de:ac:73:33:60:39:43:47:64:76:ec:59:8d:70:0f:99:f1:4d:
b8:1a:41:b6:84:ce:4b:88:cb:7b:5c:3f:13:1c:24:26:00:1e:
26:65:48:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC+UCAqZ0YN2itgch7V86PPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh
ODZhNDgwHhcNMjYwOTIwMTAxNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2MwZmRlZmRmZjc3MGUxYzczNTAwZmJmZWZlNTgzNTkzOWY5ZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJPanH5yTQNL91w3MGEDZwj+BpQW
mBEFgCdXJdowS06+AABkdcWPfJ0nucNoFvn6VK7cI7OwvKEW30bzNMiy5c5/O22i
MTMo79O9QBU7+4jkS62Zqq53HISZVGL7xoyL9aFXUEFY11AL8R/2eeEsyozNZ3lA
BmQaUpsUkQGnzwt+DWmwngMBgmZkhN/7yQl+WjFFWCLhIgm564SeKgMbatgVMGWf
BtgoNKYAQDBJ8Hw1KiCciEr4Cvs85aA6AHbcb/JF/DkCmaRSxy5jLxz8bVpxAcCJ
KGAZHLy4mdMXe4NitCX5JCcA8oJPZnWprMKUEG0Wwfv9p3z0dL7e0sVJswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIzA/e/f93DhxzUA+/7+WDWTn58zMB8GA1UdIwQY
MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt
MTQyN2RkMTZlZmE0LzEvak1EOTc5XzNjT0hITlFEN192NVlOWk9mbnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0
LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xMMA0G
CSqGSIb3DQEBCwUAA4IBAQCldG8+tT/E9Nz8iKx2bD/EOttNMBHc88ZR/5SG/VeD
i5U4wf68ai36yX0TlC2NrU2x5Px8HxQSkQEy+sxlQfAqlwNZEiI81j1jPQa/D4fa
oHwfQDs5I30yoPpILW4TjffbMO5HNTzj/MLAgx6K3Yn4gykaqFJdwk5V09N4ZuzD
ueXNCpdwEGsLA/8XmrLOQSUOf5G7S2J1PaF97CszyMfoCiHXHtDFDamS8ZLVPJma
ApH8u0WhyISFyix5Z+LScB1D7Ynwk7Npkx2cuZSRYJR29EN/KGRAZFverHMzYDlD
R2R27FmNcA+Z8U24GkG2hM5LiMt7XD8THCQmAB4mZUhl
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:50:47 2026 by rpki-client