Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/jqEjGYh7qUp-XQFkbZ_XJaczat0.roa
File: jqEjGYh7qUp-XQFkbZ_XJaczat0.roa (raw, json)
Hash identifier: WzbAMKZ6zmVx5KMLERHIaL+opRQ0pxgEvfyxQMwxNeQ=
Subject key identifier: 8E:A1:23:19:88:7B:A9:4A:7E:5D:01:64:6D:9F:D7:25:A7:33:6A:DD
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019CF60FB31C9834A2349AA94D5B3A3B2EF5
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/jqEjGYh7qUp-XQFkbZ_XJaczat0.roa
Signing time: Mon 16 Mar 2026 09:52:29 +0000
ROA not before: Mon 16 Mar 2026 09:52:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 46.183.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:0f:b3:1c:98:34:a2:34:9a:a9:4d:5b:3a:3b:2e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Mar 16 09:52:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ea12319887ba94a7e5d01646d9fd725a7336add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:74:06:7b:96:89:05:4f:7a:ed:a2:93:84:
aa:83:77:dd:db:28:ea:b0:8b:b3:0b:ba:07:be:69:
83:97:5a:9d:81:a6:ac:02:77:8f:ca:37:7b:e9:21:
14:2e:e0:1a:11:0a:1b:28:96:17:83:66:34:26:48:
96:1e:96:c6:3d:b4:df:80:3d:dd:e7:c7:7d:cb:ad:
41:06:ef:2e:57:54:26:9b:8b:5e:df:e6:3c:84:0d:
20:45:71:f8:62:aa:1e:6d:19:5f:b8:72:8c:61:37:
c4:2d:c1:0c:44:70:53:77:0a:9a:7d:9d:2e:46:73:
cf:27:e4:70:f5:b4:21:61:5d:96:41:3b:ed:82:73:
82:1e:70:f5:6d:8b:9e:7b:11:77:62:90:51:34:79:
5b:10:c1:4e:79:ca:64:13:f4:78:1e:59:58:f5:40:
22:cb:68:01:b7:2e:7d:36:b9:38:77:b7:58:db:49:
40:03:32:0a:f5:44:bc:22:bb:a4:e3:50:98:58:25:
94:10:65:e2:fd:09:83:d2:b2:41:83:4f:09:aa:8d:
69:c6:56:af:bb:06:03:63:a1:d0:cb:f8:2d:ef:d7:
8b:78:b5:4f:61:38:32:0c:f5:7a:49:f0:b9:6f:07:
89:a2:b3:5b:65:f8:4c:48:d4:7e:e8:c8:88:fd:15:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:23:19:88:7B:A9:4A:7E:5D:01:64:6D:9F:D7:25:A7:33:6A:DD
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/jqEjGYh7qUp-XQFkbZ_XJaczat0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.22.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b5:ea:9c:6b:56:50:c0:4d:e2:4a:21:74:fe:68:5f:b2:dc:
8e:c4:ae:00:20:e6:d0:31:2b:4e:43:58:66:5d:e5:d6:24:a9:
32:74:b8:cf:25:51:a3:87:78:65:e3:bb:7f:8d:55:20:a7:d4:
45:14:b9:e1:cb:16:18:30:11:ad:7c:59:c4:da:5f:eb:8a:a9:
76:34:e7:d8:36:9e:3b:30:87:d5:1d:2d:e9:76:41:5c:ba:b2:
40:59:2c:a3:6f:2f:6d:83:c5:46:9a:3e:1e:d9:c5:6a:67:97:
fb:9d:f1:50:b3:68:1a:6d:5c:a2:5d:9f:55:9d:35:52:44:40:
60:ec:0c:c3:7e:dc:3c:a2:4a:f6:76:e5:be:dc:17:33:cc:a2:
80:4d:a1:9f:a7:e7:b4:2c:95:d7:78:19:9c:54:62:94:4f:aa:
1e:f2:d4:2b:b9:cd:dd:8a:cd:7b:fc:1f:1c:c1:3a:c5:8c:9b:
33:cd:d7:41:d3:0b:42:ff:46:37:5d:b1:a0:96:ab:cd:4f:17:
60:cc:c1:75:05:03:4d:c8:88:8e:08:92:2b:d7:e3:de:f0:96:
74:62:0c:1d:26:c5:ee:21:93:05:ac:09:13:21:76:0d:39:bf:
be:a4:72:00:c2:79:73:df:76:33:1c:45:a2:1d:17:88:b7:4b:
92:b7:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:44 2026 by rpki-client