Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/JbItZf9ABSf86-7KkkB1vZySk1o.roa
File: JbItZf9ABSf86-7KkkB1vZySk1o.roa (raw, json)
Hash identifier: a0tstjrRjaBDS5U88HwttEUlKK9xrHVF1IfCJj9oHFM=
Subject key identifier: 25:B2:2D:65:FF:40:05:27:FC:EB:EE:CA:92:40:75:BD:9C:92:93:5A
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019D061AC0928F572F421F77DB807816BF5F
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/JbItZf9ABSf86-7KkkB1vZySk1o.roa
Signing time: Thu 19 Mar 2026 12:38:29 +0000
ROA not before: Thu 19 Mar 2026 12:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150293
IP address blocks: 151.123.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:1a:c0:92:8f:57:2f:42:1f:77:db:80:78:16:bf:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Mar 19 12:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25b22d65ff400527fcebeeca924075bd9c92935a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:50:32:50:d7:70:58:de:3c:45:2f:3e:5d:
eb:08:dd:d5:b2:39:79:b7:68:16:9b:42:2b:72:36:
4d:45:8d:92:b3:93:7f:7e:af:74:90:67:49:ff:9e:
b5:18:5e:ff:43:fb:95:f7:ad:14:8f:a9:dd:e3:42:
4c:2f:c2:0c:80:34:47:92:cc:ec:67:15:db:da:b5:
3b:bd:02:3e:cb:29:9d:94:98:ee:7d:50:c4:1b:d8:
6c:4b:36:97:00:d0:84:4b:e3:2a:7e:f7:fd:ef:2d:
ab:01:11:a4:54:a9:b8:f3:b4:6a:81:dd:dc:7f:08:
67:55:75:f0:83:20:85:98:d4:0f:ea:c1:e5:32:ef:
73:f1:ca:e1:f9:88:59:25:2e:7f:44:52:73:f7:87:
56:6c:41:4f:35:1b:02:f6:55:31:c6:2a:91:a2:67:
d6:40:ab:e7:8a:c5:ac:6f:e9:07:39:d9:ea:30:ff:
da:e9:1a:c2:67:60:b9:6e:c1:72:1b:95:a5:ef:e8:
93:7a:6e:ec:c5:c3:80:fa:7f:ff:40:2e:d9:f2:c4:
fd:ab:40:c4:18:e6:17:c6:be:d1:ba:8c:1b:e8:0d:
6e:3b:22:b4:dc:30:86:ea:f8:85:ed:b5:fa:61:51:
db:ff:41:db:5f:12:bb:af:3f:d1:e1:73:25:4d:f1:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B2:2D:65:FF:40:05:27:FC:EB:EE:CA:92:40:75:BD:9C:92:93:5A
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/JbItZf9ABSf86-7KkkB1vZySk1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.123.183.0/24
Signature Algorithm: sha256WithRSAEncryption
13:25:b6:d4:07:87:bc:d9:f4:14:dc:24:30:7c:7c:d0:27:ff:
1e:78:07:42:cd:0e:eb:20:8b:df:70:84:8d:7d:11:4b:c8:a4:
15:2a:58:83:d9:3a:ca:0f:95:0d:b0:38:46:03:87:60:15:90:
b0:7d:33:d5:43:aa:62:67:70:6c:82:4c:92:bd:b3:24:f6:96:
db:ca:d5:3a:52:be:6d:a8:2c:27:b6:ac:93:1e:aa:42:a3:bd:
c7:52:2e:c0:e6:9c:99:5f:81:ed:46:55:da:57:83:9f:eb:c3:
49:41:0f:e7:87:9c:20:89:47:22:e1:32:cc:23:b9:76:9e:f0:
ab:b4:47:95:a4:40:a5:f3:a0:b1:06:52:23:ce:7d:d5:81:f1:
75:61:01:40:b4:91:ff:0e:0f:11:09:be:80:eb:39:e0:6e:de:
d8:cc:12:46:a3:3b:25:8b:ca:ec:6d:eb:f2:99:10:9e:5c:48:
38:b6:14:a4:5c:f4:ab:98:a2:96:41:0a:bb:99:66:09:a2:4e:
d2:ba:19:0f:39:76:2e:16:10:71:5f:fe:d6:1e:a2:59:47:a9:
cb:41:3c:31:35:12:fe:a1:34:39:22:39:15:05:fa:4b:7e:40:
39:9c:8a:db:3c:95:c1:5e:93:05:56:dd:cd:8f:36:9b:56:83:
19:6c:04:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0GGsCSj1cvQh9324B4Fr9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjYwMzE5MTIzODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWIyMmQ2NWZmNDAwNTI3ZmNlYmVlY2E5MjQwNzViZDljOTI5MzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmlQMlDXcFjePEUvPl3rCN3Vsjl5
t2gWm0IrcjZNRY2Ss5N/fq90kGdJ/561GF7/Q/uV960Uj6nd40JML8IMgDRHkszs
ZxXb2rU7vQI+yymdlJjufVDEG9hsSzaXANCES+Mqfvf97y2rARGkVKm487Rqgd3c
fwhnVXXwgyCFmNQP6sHlMu9z8crh+YhZJS5/RFJz94dWbEFPNRsC9lUxxiqRomfW
QKvnisWsb+kHOdnqMP/a6RrCZ2C5bsFyG5Wl7+iTem7sxcOA+n//QC7Z8sT9q0DE
GOYXxr7Ruowb6A1uOyK03DCG6viF7bX6YVHb/0HbXxK7rz/R4XMlTfGusQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWyLWX/QAUn/OvuypJAdb2ckpNaMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvSmJJdFpmOUFCU2Y4Ni03S2trQjF2WnlTazFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl3u3MA0G
CSqGSIb3DQEBCwUAA4IBAQATJbbUB4e82fQU3CQwfHzQJ/8eeAdCzQ7rIIvfcISN
fRFLyKQVKliD2TrKD5UNsDhGA4dgFZCwfTPVQ6piZ3BsgkySvbMk9pbbytU6Ur5t
qCwntqyTHqpCo73HUi7A5pyZX4HtRlXaV4Of68NJQQ/nh5wgiUci4TLMI7l2nvCr
tEeVpECl86CxBlIjzn3VgfF1YQFAtJH/Dg8RCb6A6zngbt7YzBJGozsli8rsbevy
mRCeXEg4thSkXPSrmKKWQQq7mWYJok7SuhkPOXYuFhBxX/7WHqJZR6nLQTwxNRL+
oTQ5IjkVBfpLfkA5nIrbPJXBXpMFVt3NjzabVoMZbASS
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:49 2026 by rpki-client