Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/jlyVMy9vhPC0GCFYWk2szYNEc_w.roa
File: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (raw, json)
Hash identifier: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=
Subject key identifier: 8E:5C:95:33:2F:6F:84:F0:B4:18:21:58:5A:4D:AC:CD:83:44:73:FC
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019CF987C2AB7EEF65FDA4496581154D7817
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/jlyVMy9vhPC0GCFYWk2szYNEc_w.roa
Signing time: Tue 17 Mar 2026 02:02:29 +0000
ROA not before: Tue 17 Mar 2026 02:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1405
IP address blocks: 216.195.216.0/22 maxlen: 24
216.236.27.0/24 maxlen: 24
2a01:4244::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:87:c2:ab:7e:ef:65:fd:a4:49:65:81:15:4d:78:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Mar 17 02:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e5c95332f6f84f0b41821585a4daccd834473fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:49:0e:a4:84:d2:af:91:6d:da:e8:c7:99:da:
d6:ea:a3:5e:12:d9:61:ac:87:0e:5c:64:1a:55:72:
bf:db:67:9d:fe:38:03:a1:43:69:33:a6:08:b0:9d:
28:89:e1:58:e6:4c:29:b7:ba:e6:4c:b8:56:1d:ec:
b6:ac:95:4d:13:7c:31:49:5f:db:39:a7:69:58:29:
1a:51:d2:4b:9e:4e:8a:61:18:57:37:63:20:72:ac:
47:11:5b:44:89:7a:3c:b3:47:6d:23:ed:50:0f:14:
68:ea:02:32:5f:7f:5c:74:f5:15:64:5f:ef:fd:03:
10:c3:c7:dd:07:63:8d:c3:ea:32:99:55:b3:39:64:
ea:62:97:e9:62:8d:cb:d6:4b:66:44:74:c7:a8:7f:
a7:63:43:56:e4:32:3a:8d:4f:51:87:fc:c4:0a:e4:
74:0b:b5:78:fc:84:fc:a7:56:7a:a2:f3:81:1c:8c:
3d:69:a6:d3:81:9f:2b:19:4d:ec:da:27:b5:65:f3:
d8:7b:34:4e:e4:16:9c:69:ff:b2:e2:ae:da:52:2c:
f5:0a:2a:cb:52:c3:bc:4a:d5:7f:dc:04:aa:20:35:
80:1a:86:a4:2c:02:f9:c6:9a:0f:5a:bf:3e:ba:b5:
0c:0c:a3:4c:92:f7:60:c0:4b:11:96:10:9e:32:c6:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5C:95:33:2F:6F:84:F0:B4:18:21:58:5A:4D:AC:CD:83:44:73:FC
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/jlyVMy9vhPC0GCFYWk2szYNEc_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.216.0/22
216.236.27.0/24
IPv6:
2a01:4244::/30
Signature Algorithm: sha256WithRSAEncryption
b1:ff:4b:f6:60:30:b1:52:0a:78:52:ae:f0:22:ac:25:05:48:
bc:83:3f:79:d7:cb:68:02:cb:50:73:ef:40:96:51:aa:74:49:
85:77:a8:4d:4d:36:18:bf:b3:2d:f1:09:6d:1b:22:c7:30:e8:
4c:d4:50:6c:3e:d3:44:b6:35:bb:bf:9b:30:36:1f:7f:3f:e3:
94:5a:75:39:f5:f8:c1:6e:f2:8b:cd:37:0f:6a:3c:5d:ce:db:
5a:d9:c5:a5:97:83:39:de:26:99:9a:d1:62:42:52:69:85:b7:
26:94:b9:b1:d8:fb:0f:6b:77:c7:23:9f:5f:0a:91:06:67:fd:
de:0a:13:4e:4e:34:60:3f:f5:fe:a2:d3:39:5a:42:18:2f:8e:
1e:d0:d5:41:9a:46:58:49:7d:09:89:c6:cd:b4:31:25:22:40:
59:ea:a0:43:73:91:76:a5:18:87:a8:ff:66:02:f5:0c:43:6f:
d7:03:7c:28:06:44:69:20:17:09:51:5a:26:cc:fb:d2:6f:dc:
67:ab:79:95:88:9f:5d:8c:38:20:d7:02:c9:ce:e5:44:31:94:
57:c0:b3:58:eb:43:34:4a:e9:d2:de:5f:55:d4:6b:78:a8:d4:
e0:1c:4f:fc:13:7e:b5:28:b9:b4:2a:75:b8:6b:d5:63:cf:bb:
08:45:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:06:06 2026 by rpki-client