Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/JbmGc_BBMBohr4NJWag6RLuozg8.roa
File: JbmGc_BBMBohr4NJWag6RLuozg8.roa (raw, json)
Hash identifier: m/d7ngwPzR0ECZpo0GE+MinswWlD/YrSUwrw8AE0jhI=
Subject key identifier: 25:B9:86:73:F0:41:30:1A:21:AF:83:49:59:A8:3A:44:BB:A8:CE:0F
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0F8667608B939A5E972724798D1BDB6BA
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/JbmGc_BBMBohr4NJWag6RLuozg8.roa
Signing time: Thu 01 Oct 2026 16:57:39 +0000
ROA not before: Thu 01 Oct 2026 16:57:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 103.86.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:66:76:08:b9:39:a5:e9:72:72:47:98:d1:bd:b6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 1 16:57:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25b98673f041301a21af834959a83a44bba8ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:d3:ae:95:45:ee:71:56:4a:4f:02:49:37:
c8:60:97:72:37:d5:3a:38:48:62:ab:b9:85:b6:e9:
c0:f6:a9:f5:87:f5:17:9b:7f:b2:11:fd:5b:37:ea:
e3:24:70:54:54:59:09:a4:f5:b8:2b:55:b4:47:98:
cf:18:e1:82:1e:cf:08:a7:64:50:ca:55:01:00:b9:
85:50:df:e5:0b:c5:be:28:d0:a4:55:3c:04:70:ea:
e8:50:25:0e:8f:d4:5a:0b:39:96:44:44:90:e5:86:
f7:1f:9f:4f:a0:0c:36:eb:fb:fd:d4:68:87:68:14:
58:08:fe:11:65:41:c7:70:81:34:4b:66:33:0b:cb:
f2:dd:8c:ef:bf:11:03:8f:5a:ab:56:0d:2f:b4:6f:
5d:39:d8:5a:f9:23:89:8d:55:48:0d:55:fd:00:a1:
46:12:fa:b7:2e:1d:16:41:0b:f9:14:53:e8:f8:99:
fc:8e:3d:24:59:bc:03:00:f9:58:57:f3:55:f9:9e:
fe:d9:e9:10:4f:0d:a2:14:23:4d:68:ce:7a:a9:d5:
b9:bc:20:55:ba:3e:c5:82:74:17:40:83:a0:7e:a9:
85:92:e6:85:9c:d6:5d:7a:cf:c6:21:84:53:c4:35:
10:83:76:2c:ae:04:3e:11:34:1c:63:4c:91:2e:3f:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B9:86:73:F0:41:30:1A:21:AF:83:49:59:A8:3A:44:BB:A8:CE:0F
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/JbmGc_BBMBohr4NJWag6RLuozg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:92:cc:33:e5:d5:1a:b1:cf:75:b9:f3:1c:ba:61:03:52:6b:
f0:51:81:53:c1:ce:50:5e:52:f9:f1:a8:2e:63:b3:71:a4:56:
d4:f1:7f:6c:86:e1:c7:81:ce:4e:dd:82:55:57:b4:3e:22:11:
a9:6e:0c:b5:ab:7e:46:f0:b7:e8:1c:5a:a1:bb:dd:2d:df:0e:
e7:b2:2f:ed:a0:94:01:68:b2:54:35:5f:99:26:b5:20:4c:31:
0c:18:50:95:fa:73:8b:8a:3a:5d:4a:85:42:61:7e:56:36:db:
13:e6:54:a3:f8:2d:b0:fe:91:ad:43:90:fb:75:07:62:cc:c8:
0e:8d:c1:c2:b0:92:d6:80:d7:42:55:65:18:e2:f8:53:20:82:
a3:0b:67:7d:1d:36:e6:d6:29:e9:4a:1a:76:6a:dc:c9:75:31:
db:44:d8:b7:ec:14:c4:3c:f5:e6:f4:ed:b9:cb:ad:cb:2f:cb:
77:0b:db:cb:94:97:ce:9f:cd:bc:54:92:ae:af:b5:02:92:e5:
ce:2b:5b:43:bb:c1:30:cc:d8:46:c8:f7:f6:2c:a9:d6:bb:b9:
18:06:a7:18:8c:a3:e9:a8:c8:03:5d:fb:60:ec:4b:0b:a7:30:
3a:d1:bf:78:e4:bc:6f:c5:e9:cf:57:eb:e8:b5:17:60:5f:a3:
c1:9d:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:59 2026 by rpki-client