Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/jn-Hv0IYlCEKrmAbyK_6k7lqISQ.roa
File: jn-Hv0IYlCEKrmAbyK_6k7lqISQ.roa (raw, json)
Hash identifier: J+qsyRuhmSWKW099fqXxFsiGbbSUDzkgcakOMIwreHQ=
Subject key identifier: 8E:7F:87:BF:42:18:94:21:0A:AE:60:1B:C8:AF:FA:93:B9:6A:21:24
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 019DBE677DBED5BB9A70546A4D08BE9E4779
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/jn-Hv0IYlCEKrmAbyK_6k7lqISQ.roa
Signing time: Fri 24 Apr 2026 07:32:26 +0000
ROA not before: Fri 24 Apr 2026 07:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.152.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:67:7d:be:d5:bb:9a:70:54:6a:4d:08:be:9e:47:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Apr 24 07:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e7f87bf421894210aae601bc8affa93b96a2124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:70:0c:4c:76:14:a6:ae:0d:10:74:02:b5:
58:3a:e1:ff:40:c0:c8:d6:a9:a5:53:eb:55:0d:f7:
91:c4:fc:d6:19:5d:37:31:ec:05:f8:49:df:bb:fa:
3b:0c:83:e3:40:4e:b6:13:ab:d3:57:b7:f0:40:2e:
31:7b:a0:16:b1:dd:20:c8:1e:be:1b:1e:73:ab:25:
74:a4:fd:de:91:1b:8b:f5:c5:8e:44:e7:82:f9:19:
b6:f1:cc:2a:7d:0d:9c:e7:55:55:be:73:02:40:9e:
74:e9:d8:45:1f:e8:22:d4:cf:5d:10:71:18:2e:cb:
16:2a:c3:7c:e0:80:82:50:26:8b:51:42:e7:fc:1f:
50:43:54:8a:b3:f1:71:a6:1e:b8:6c:8b:e6:05:f8:
23:c8:08:0f:dd:be:d4:aa:5c:44:4f:5d:c1:f5:d1:
f5:5d:49:8a:15:1a:22:16:d7:60:b3:d7:60:6a:40:
f0:db:69:1f:1d:ad:12:0b:68:47:2e:8b:77:92:e8:
29:2c:de:3e:b7:4a:4d:ef:5a:68:a5:39:62:c9:7e:
32:d3:71:62:06:7f:9a:ab:60:bd:da:2e:0e:6c:36:
93:be:12:f7:0d:79:8f:e4:de:79:0c:23:f5:a5:83:
03:ed:b6:6b:34:76:f0:51:e7:ff:82:2f:f5:ba:c6:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7F:87:BF:42:18:94:21:0A:AE:60:1B:C8:AF:FA:93:B9:6A:21:24
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/jn-Hv0IYlCEKrmAbyK_6k7lqISQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.56.0/23
Signature Algorithm: sha256WithRSAEncryption
87:e6:60:0b:a0:bb:02:f1:b5:3f:3d:30:28:b4:e1:b2:30:0a:
7e:83:b7:91:04:8c:fd:4a:50:7f:0b:c8:b4:c3:12:13:57:a4:
a2:15:35:0c:d1:16:3c:4a:c0:00:07:27:12:ae:a0:d7:09:70:
a4:0b:dd:e6:27:15:f5:b9:d1:34:2a:20:72:77:d8:db:11:3e:
18:71:49:af:79:66:1e:14:61:7e:31:49:38:77:9a:9c:a3:06:
4d:c2:b7:d8:5a:79:0d:4c:d7:db:8b:45:b2:9a:68:d6:c3:b2:
03:c1:b9:e5:4e:7b:13:39:dd:d6:9e:0a:5b:d9:47:33:4f:2b:
16:e7:6d:79:ae:e0:9d:4c:98:23:9e:18:28:a4:59:d3:9a:09:
1f:5d:ca:c8:0a:28:7c:78:70:f3:c2:d1:2a:ed:02:8b:c2:9c:
e2:b7:82:f1:71:f0:9e:2d:10:a2:c2:39:56:2a:16:b9:8e:31:
92:98:e8:db:41:52:16:03:d1:4a:a8:c3:70:ac:7a:ff:9f:b9:
1c:0b:71:20:a2:e3:75:35:70:5d:ab:72:c6:f5:f7:51:6d:60:
8e:7b:e2:04:c0:cb:76:f6:59:bf:08:1d:dc:70:10:a6:90:c5:
57:cf:6f:27:e1:79:0b:6a:8f:49:00:01:c0:ad:7c:36:ca:37:
d4:34:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:53 2026 by rpki-client