Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/JLgS3ea-gXLnY_fNVgZM8WZ4JTk.roa
File: JLgS3ea-gXLnY_fNVgZM8WZ4JTk.roa (raw, json)
Hash identifier: +LLMdRS+BhQRnC0uf970cLATXLhRpqfVBqBMrYlx/ps=
Subject key identifier: 24:B8:12:DD:E6:BE:81:72:E7:63:F7:CD:56:06:4C:F1:66:78:25:39
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019F8DA563F1759FF13D1270824338F78CFF
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/JLgS3ea-gXLnY_fNVgZM8WZ4JTk.roa
Signing time: Thu 23 Jul 2026 06:24:14 +0000
ROA not before: Thu 23 Jul 2026 06:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133150
IP address blocks: 213.220.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:a5:63:f1:75:9f:f1:3d:12:70:82:43:38:f7:8c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Jul 23 06:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24b812dde6be8172e763f7cd56064cf166782539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:9b:67:b7:12:80:cb:73:49:c6:78:65:35:
e2:15:16:74:ba:8d:9f:ff:df:88:cf:ea:89:e2:b5:
b0:40:1c:e3:6a:0b:b4:d2:e3:65:45:e0:7c:22:9f:
83:aa:d3:e6:7c:50:b6:c1:54:ac:91:3a:29:c9:fd:
2e:5b:a6:10:ee:08:40:00:72:59:de:14:96:63:f4:
4d:83:4e:33:90:28:bb:a7:02:41:00:23:94:23:49:
21:0f:f1:1a:9c:bb:30:68:f2:70:96:34:03:58:15:
d8:34:ba:c4:a6:46:ef:1c:d8:b3:47:5d:ca:ca:eb:
36:5c:dd:5d:e6:1b:08:ed:1f:30:9b:8a:fa:23:96:
02:c3:88:81:2c:68:cb:45:0a:df:75:c0:61:a2:52:
d5:60:c2:43:03:c3:ed:f1:9e:e3:33:c4:ee:e7:1d:
2e:8f:51:f4:8f:25:6c:f2:1d:5a:84:44:56:d2:0c:
f8:39:ef:48:45:c5:81:17:24:91:e0:3a:80:9d:87:
54:53:81:b6:f2:56:0d:3d:fc:16:41:60:6c:81:9b:
fa:fe:41:fa:62:3f:38:5d:6c:59:df:bf:9a:88:e4:
0d:a0:cd:0c:cf:39:33:fa:1a:0d:de:c1:d2:5b:19:
a4:b3:0c:02:46:f5:91:43:37:3f:65:cd:f7:8d:9d:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:12:DD:E6:BE:81:72:E7:63:F7:CD:56:06:4C:F1:66:78:25:39
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/JLgS3ea-gXLnY_fNVgZM8WZ4JTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
26:99:eb:52:cc:7d:60:34:24:46:5a:de:0e:7b:29:13:25:88:
91:41:66:df:e5:f6:b8:5d:d3:32:7d:bf:14:dd:c7:7d:fc:cc:
88:a7:7a:23:57:f9:c6:46:80:a6:97:a7:31:b4:e0:ab:d7:f6:
f1:b9:6d:1a:50:e7:27:90:ff:32:78:89:1e:ae:8f:78:00:aa:
d8:b0:bb:73:4b:32:4e:cc:95:be:d4:c1:20:60:7a:c5:7d:5e:
df:e8:d2:ab:a0:0b:cc:e6:a4:29:7a:28:12:d7:81:ff:28:3e:
0e:d6:18:47:ba:51:ab:31:65:22:1b:92:a9:10:a7:ff:ae:1e:
27:c8:d0:a5:7e:4c:da:92:0d:17:0c:15:ba:8e:a9:c3:d6:c2:
fb:f8:6d:c3:df:de:bd:23:0a:27:cb:9c:60:9b:c3:39:92:85:
fa:cd:67:4d:4b:86:15:39:bf:97:7e:3d:65:06:9a:1b:99:d8:
89:72:a7:86:e4:92:68:06:58:66:e3:52:66:22:2f:52:c8:59:
7f:ea:1a:92:12:0b:d0:17:dd:72:92:58:df:b9:08:e6:70:f8:
8e:bc:17:be:f6:ed:56:1b:f8:7a:dc:7a:e8:0f:81:0d:84:29:
66:e0:2c:e0:a1:f0:e5:6a:4c:97:3b:ec:08:5f:37:25:1c:21:
ba:73:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:35 2026 by rpki-client