Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/JR2M09GCpZW9QLiWPV5Nh4Xzi2Y.roa
File: JR2M09GCpZW9QLiWPV5Nh4Xzi2Y.roa (raw, json)
Hash identifier: oLtprbGhXfon2wItL/gqD1O+okJBDODvKqWcSysscUY=
Subject key identifier: 25:1D:8C:D3:D1:82:A5:95:BD:40:B8:96:3D:5E:4D:87:85:F3:8B:66
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 01A0C27A8FCC08D1A14B81CB94AA3347E84E
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/JR2M09GCpZW9QLiWPV5Nh4Xzi2Y.roa
Signing time: Mon 21 Sep 2026 05:40:07 +0000
ROA not before: Mon 21 Sep 2026 05:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 145.219.6.0/24 maxlen: 24
2a04:b0c0:30::/48 maxlen: 48
2a04:b0c0:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:7a:8f:cc:08:d1:a1:4b:81:cb:94:aa:33:47:e8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Sep 21 05:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=251d8cd3d182a595bd40b8963d5e4d8785f38b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:c6:66:fe:82:c0:0a:90:da:61:07:4c:a5:
a5:0f:6a:c6:c1:4a:46:86:0b:c4:92:23:c3:ff:8a:
0a:f1:45:b3:7c:ac:e2:7b:ad:d6:a3:69:c4:00:aa:
73:83:9f:f9:50:32:f2:76:07:06:67:86:e3:ed:a7:
e5:90:1f:1d:5a:66:92:4b:bc:3f:8d:df:b5:f6:e3:
92:ac:cc:03:e3:48:24:71:96:df:38:70:bf:47:b7:
26:80:73:28:b7:f9:09:36:1c:05:cd:1b:6b:8e:44:
10:a1:0b:71:ff:c6:4e:de:ef:b2:90:53:8c:03:30:
c4:12:74:18:ae:c2:75:e4:5c:f5:70:ef:66:4d:d6:
dd:9a:23:6c:ad:5f:77:ef:52:b6:e4:0d:6d:83:99:
a1:be:e3:6a:76:ba:ac:d1:e0:10:35:bf:7e:f7:2d:
cc:8c:97:81:85:5e:fc:1d:6e:f2:f9:4c:ff:56:b2:
2d:04:86:77:cb:52:ae:54:fb:cc:fa:4e:a2:16:5f:
57:a5:f3:16:df:41:20:44:c3:d3:19:c2:dd:b7:04:
15:7e:6a:a0:13:e4:86:58:9c:aa:84:aa:0d:e6:31:
2d:cd:21:6f:18:6e:a9:ef:35:26:ad:a0:4c:14:7e:
b4:17:e2:26:23:65:c3:be:0b:f2:d9:fc:55:b7:36:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1D:8C:D3:D1:82:A5:95:BD:40:B8:96:3D:5E:4D:87:85:F3:8B:66
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/JR2M09GCpZW9QLiWPV5Nh4Xzi2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.6.0/24
IPv6:
2a04:b0c0:30::/47
Signature Algorithm: sha256WithRSAEncryption
5d:2b:5a:ae:0a:7e:59:9e:2b:e8:a8:c4:39:c1:3b:14:70:4a:
c4:38:25:82:f7:8c:47:09:1f:da:b9:7e:1d:4d:1c:94:26:9f:
a8:3d:c3:5f:40:2a:6e:82:16:ad:ba:74:46:22:0b:cf:41:f2:
84:57:cb:48:cf:1b:03:11:52:e3:2e:8f:a8:97:9d:cd:f1:70:
df:f6:cb:ce:3d:ac:8d:f4:80:12:f1:57:88:e4:63:18:c4:9d:
77:a1:13:84:09:bd:05:24:f3:a1:b8:c6:e4:bd:3f:57:7f:95:
a0:ef:c5:ec:22:50:76:2a:23:d4:a6:6f:fb:85:c9:46:43:d1:
27:08:28:87:d3:fb:18:ce:83:4c:df:f2:15:35:c9:43:bb:41:
bd:0c:c9:de:99:57:c1:c6:b7:40:64:80:6e:8b:3b:a8:e7:17:
ce:dd:a3:8e:80:5e:4f:c9:8a:eb:2f:6e:ef:7c:43:e7:90:2c:
7a:62:8c:54:50:40:81:9d:75:f8:8c:9e:7a:2e:6a:8e:4d:43:
cf:a9:90:b0:81:b3:9e:f7:4a:ed:43:bd:a0:03:30:09:e7:be:
d7:49:17:3c:91:08:4a:2a:75:5b:7f:cf:91:a8:3b:c2:ce:44:
65:71:3e:0e:86:dc:e6:72:52:4a:7a:c5:cd:be:dc:d7:47:9d:
bc:91:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:57:03 2026 by rpki-client