Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/JT-saWQFCpCIW-ieMRKXLLACWY0.roa
File: JT-saWQFCpCIW-ieMRKXLLACWY0.roa (raw, json)
Hash identifier: oKK3L7+PDPyxkgEA4KB0NmXCZ5WOvuec1r4FwhGlfuU=
Subject key identifier: 25:3F:AC:69:64:05:0A:90:88:5B:E8:9E:31:12:97:2C:B0:02:59:8D
Certificate issuer: /CN=05623b5f1a64bab92a952d2cc36e84b83017462b
Certificate serial: 019F236881BBB50FEE40A4FFA398A70DB1D4
Authority key identifier: 05:62:3B:5F:1A:64:BA:B9:2A:95:2D:2C:C3:6E:84:B8:30:17:46:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWI7XxpkurkqlS0sw26EuDAXRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/JT-saWQFCpCIW-ieMRKXLLACWY0.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212476
IP address blocks: 193.3.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWI7XxpkurkqlS0sw26EuDAXRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:81:bb:b5:0f:ee:40:a4:ff:a3:98:a7:0d:b1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05623b5f1a64bab92a952d2cc36e84b83017462b
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=253fac6964050a90885be89e3112972cb002598d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:23:b7:69:dc:14:31:a5:ee:bf:8d:47:67:
da:48:a5:b3:4d:8c:1e:5f:da:66:da:8f:53:bd:b5:
cd:84:1f:dd:1f:fb:fb:53:19:bb:f1:c8:60:e3:f8:
02:c7:67:27:b7:c9:8f:4d:c1:b0:3f:a1:37:4a:1f:
94:93:7e:aa:9c:37:35:70:a5:cd:0f:4b:81:bb:af:
14:42:44:64:ab:12:df:bf:21:63:18:02:c6:53:9b:
4e:66:e7:94:7c:2e:15:ef:ef:47:6e:42:12:d3:9f:
14:8f:31:5e:0b:00:12:1e:ba:e5:96:cb:fa:e1:5e:
29:db:fd:c1:fd:82:86:31:12:74:c8:d2:1e:40:de:
5f:c4:c4:20:70:ba:da:48:3b:7e:ef:63:5f:7e:b9:
02:ff:3e:45:a8:57:ef:b3:45:b3:59:71:5b:85:1a:
32:e7:62:90:7f:91:5f:f2:4f:92:15:2a:e1:c8:e2:
54:74:da:e7:25:2c:ee:7e:68:10:5e:21:b9:30:44:
85:16:ac:4b:9c:c6:2d:06:e0:15:69:c8:87:02:7b:
a8:7a:f0:e9:a3:de:29:b8:ca:2b:42:44:fd:93:23:
1c:05:47:81:7d:25:b5:41:60:c0:59:2f:8f:ad:cf:
12:ed:5e:29:bc:9f:a9:35:6b:a7:7a:04:e2:c5:64:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3F:AC:69:64:05:0A:90:88:5B:E8:9E:31:12:97:2C:B0:02:59:8D
X509v3 Authority Key Identifier:
keyid:05:62:3B:5F:1A:64:BA:B9:2A:95:2D:2C:C3:6E:84:B8:30:17:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWI7XxpkurkqlS0sw26EuDAXRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/JT-saWQFCpCIW-ieMRKXLLACWY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.31.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f7:1c:b0:68:33:fb:2d:49:73:0a:0b:84:8a:6e:71:de:19:
02:1e:2d:f1:66:de:18:cd:16:aa:34:ff:f9:29:73:48:28:af:
53:f3:fc:a4:ce:5d:71:b2:2f:68:64:e5:27:b6:03:3e:61:48:
dd:6d:4a:91:e3:88:d9:ef:21:eb:09:2a:81:d3:2d:15:2c:0b:
59:85:36:55:74:3e:1f:9d:55:22:e7:21:16:ae:1a:f8:8f:a8:
f5:55:4f:93:5a:cf:a3:b1:8b:ed:15:b4:e1:a2:38:39:bb:d0:
be:bc:59:34:6c:b9:5e:cf:90:27:db:30:a0:ff:83:91:0e:8b:
b5:8f:39:63:98:52:6e:96:39:aa:fa:51:ed:ba:44:37:f5:48:
04:ee:2c:3a:ba:1f:bd:17:66:96:bf:ba:05:d9:3b:53:e9:de:
7f:d2:18:1a:22:82:49:38:3c:40:fd:86:bb:f8:02:1d:eb:b2:
67:4b:e6:7d:79:1c:df:cf:62:78:f5:f9:fc:0e:b2:3f:4d:d6:
43:59:da:b8:9d:60:3a:c4:f5:d6:db:cf:1c:2b:4e:25:59:40:
a6:17:39:32:65:bb:61:cd:50:cf:ca:dd:1e:8a:bc:2b:92:c1:
6c:da:38:5c:5a:f9:9f:45:f0:60:bb:30:21:16:18:1c:4f:4e:
67:b2:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:47 2026 by rpki-client