Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/jlRGgVBGWswnpknlFwD2OACQfY0.roa
File: jlRGgVBGWswnpknlFwD2OACQfY0.roa (raw, json)
Hash identifier: BF4j6/GtndRNBeLKylQcAt1vG3+YqL36ZTZe+Rd0tlw=
Subject key identifier: 8E:54:46:81:50:46:5A:CC:27:A6:49:E5:17:00:F6:38:00:90:7D:8D
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 01A1A6BA21FCCEA5623D0D6C68F5BF4D0F47
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/jlRGgVBGWswnpknlFwD2OACQfY0.roa
Signing time: Wed 04 Nov 2026 13:22:58 +0000
ROA not before: Wed 04 Nov 2026 13:22:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61084
IP address blocks: 84.54.13.0/24 maxlen: 24
176.98.41.0/24 maxlen: 24
185.127.42.0/24 maxlen: 24
193.31.116.0/24 maxlen: 24
213.226.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:ba:21:fc:ce:a5:62:3d:0d:6c:68:f5:bf:4d:0f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Nov 4 13:22:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e54468150465acc27a649e51700f63800907d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:5b:eb:fb:3d:78:69:a0:cd:10:f9:d1:a0:
a0:6f:26:11:e8:36:fe:c7:56:c4:95:1f:5f:b4:14:
bc:8d:cd:eb:4d:d5:1f:70:2e:19:7c:d3:17:db:c7:
42:2b:95:55:a3:08:12:87:74:6e:14:94:9c:99:a5:
a1:5f:d7:3a:8d:5d:df:d5:ef:1c:29:0f:75:d3:5e:
c9:11:81:de:92:69:59:01:b0:4d:78:c9:bf:8c:bc:
85:90:00:e3:05:6f:72:e1:38:e5:3e:aa:51:27:6f:
b5:f2:cb:f5:81:b3:da:c0:ac:6e:26:77:18:cc:78:
36:8f:f6:a0:17:3f:0d:36:89:62:90:68:9b:55:2f:
9d:18:bf:ac:e9:e5:2e:55:eb:21:e6:0c:59:4a:83:
d9:90:99:1e:63:95:5e:7a:04:3f:97:3f:ad:bd:fb:
e0:e4:a3:c7:a8:6c:17:f0:99:aa:af:56:66:78:96:
79:7f:15:fd:62:f3:53:b5:80:2f:50:2e:c1:f2:9d:
5c:36:a5:88:68:5b:63:19:40:01:a6:64:1d:4f:92:
ac:4f:74:8d:89:a7:7f:95:ec:2f:cf:09:d4:95:7c:
4c:a2:17:d8:72:5b:cc:7a:3d:f6:75:07:1f:17:22:
90:75:f5:80:d1:3c:39:0e:36:58:ab:59:cf:50:24:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:54:46:81:50:46:5A:CC:27:A6:49:E5:17:00:F6:38:00:90:7D:8D
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/jlRGgVBGWswnpknlFwD2OACQfY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.13.0/24
176.98.41.0/24
185.127.42.0/24
193.31.116.0/24
213.226.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b5:b9:9c:16:64:9c:f8:ed:68:29:88:64:eb:de:9e:44:e3:
2f:ad:26:d7:75:33:32:2e:c3:c9:c7:e1:82:33:ef:52:66:b9:
ee:72:c9:36:0f:3f:64:6c:68:85:ee:81:e6:a0:78:19:d6:68:
3f:d0:4e:d7:2c:b4:3f:05:b7:d5:fa:da:d2:75:33:f9:02:7b:
dc:fb:83:58:26:d1:69:03:c7:33:a2:f5:99:18:7e:2b:95:88:
91:00:0d:5c:7b:55:91:19:e5:a2:46:83:de:dd:8b:ac:c8:52:
a1:df:a7:e8:68:db:c1:6b:b1:a2:1e:d1:23:0c:0e:6b:0d:55:
94:06:63:00:f3:81:65:0f:12:4a:fb:80:b6:14:74:13:9b:48:
7a:be:59:93:8c:88:ee:af:57:9e:27:40:63:d3:55:10:ba:7a:
b2:7b:6b:8b:05:a0:69:b7:54:05:fa:27:db:b4:a6:69:ce:83:
14:db:57:0c:a0:ae:7e:ca:98:61:77:2b:e3:62:fc:2a:4a:41:
f1:ed:e2:89:15:44:5b:83:ef:41:61:a4:2d:9e:1f:69:1a:6c:
c4:94:07:85:f1:f2:ff:9b:6f:a4:eb:3b:f5:1f:39:79:53:9e:
af:42:0e:db:15:7b:6e:ec:df:a2:e3:50:8e:d1:8d:7b:45:02:
26:6e:63:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:25:26 2026 by rpki-client