Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/JsPIoXS0PpUsyOfC959Y4j3xCwM.roa
File: JsPIoXS0PpUsyOfC959Y4j3xCwM.roa (raw, json)
Hash identifier: BX1vpydloz/So1cOf6efq9hS22PCaYbgOF7mgCl+KYc=
Subject key identifier: 26:C3:C8:A1:74:B4:3E:95:2C:C8:E7:C2:F7:9F:58:E2:3D:F1:0B:03
Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial: 01A08B0E6D5015C0159714E1E5A95A267498
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/JsPIoXS0PpUsyOfC959Y4j3xCwM.roa
Signing time: Thu 10 Sep 2026 11:22:53 +0000
ROA not before: Thu 10 Sep 2026 11:22:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.226.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:0e:6d:50:15:c0:15:97:14:e1:e5:a9:5a:26:74:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Validity
Not Before: Sep 10 11:22:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26c3c8a174b43e952cc8e7c2f79f58e23df10b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f7:47:08:1f:81:f3:61:08:4d:3e:0f:4a:9e:
39:72:12:db:8e:0f:90:b5:23:5f:5a:4a:67:65:8d:
ed:2b:b1:7d:d8:10:c0:c7:df:6b:16:da:0c:e3:aa:
b5:c5:d4:21:26:df:7d:e8:e6:b2:11:77:a0:90:ae:
d3:89:4c:51:dc:d7:27:5b:32:b4:35:2f:42:1a:23:
ca:50:75:42:14:be:b0:f9:0d:b9:95:88:54:05:36:
56:79:c7:e2:1b:03:0b:95:e7:d8:28:ac:9e:76:8a:
f6:e1:57:9a:dd:95:3d:cd:f2:3e:f9:21:2b:f6:e9:
13:c6:f4:47:f9:55:88:45:5b:c8:94:e6:a7:67:2c:
06:43:3c:71:9b:71:c7:94:d8:be:b3:ae:94:cd:70:
b9:95:b7:f9:f5:cc:43:e3:77:a0:76:92:e6:60:e3:
ca:87:19:9f:00:c2:cf:c6:e0:b2:75:a9:4a:b7:c9:
6d:f4:ac:78:88:43:b2:72:e1:3c:8c:0a:b1:fd:87:
b7:b6:ce:4a:fe:77:c4:7e:17:51:be:21:46:68:64:
19:8f:ea:9e:50:18:4a:6c:53:72:78:61:3c:ce:0b:
a2:02:e6:fe:b5:cb:a2:18:61:f3:a6:9c:ca:0c:1c:
5a:1b:24:c4:3e:f9:72:68:1b:1f:31:16:45:81:84:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C3:C8:A1:74:B4:3E:95:2C:C8:E7:C2:F7:9F:58:E2:3D:F1:0B:03
X509v3 Authority Key Identifier:
keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/JsPIoXS0PpUsyOfC959Y4j3xCwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.154.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:e5:01:96:ec:58:6c:c3:4a:58:cc:a7:84:10:06:92:d4:0a:
ee:23:bd:ec:c9:39:e9:e7:09:31:7a:27:d8:67:e2:35:39:b8:
4d:3e:cc:ed:b9:1f:4b:65:65:cc:0a:58:b2:2a:00:3a:73:e4:
f0:1b:b4:a8:ff:cb:c7:28:1e:e1:54:fb:0d:cf:3a:43:9e:fe:
3f:68:9f:f9:57:06:1b:17:c6:e2:57:11:db:6b:d9:de:91:8a:
e0:00:74:42:74:99:c2:b8:40:01:fd:73:2c:5d:9d:c7:a9:f3:
47:83:b0:49:af:0e:b4:f7:dc:b0:fd:28:ab:e1:aa:d7:e2:8c:
ed:d1:c1:06:aa:e8:e0:a1:3b:1a:37:e3:2f:a4:8a:eb:a3:b5:
0d:f9:4d:dd:e2:53:93:29:1e:27:49:78:1d:03:9a:ea:43:fb:
f9:4c:57:9b:64:6e:7a:de:d0:9f:6f:13:db:92:e3:74:ac:c1:
84:b1:1b:bc:71:b2:9f:8b:2d:3f:93:7e:8a:0b:88:64:f1:4b:
d6:b1:a5:3e:cb:1c:65:11:60:0f:e8:e7:02:c9:d1:76:bc:71:
3b:35:4d:e4:b3:89:16:2a:cf:89:02:f9:84:ba:24:1a:30:6c:
fb:91:f7:68:9a:ce:f3:de:87:80:a8:7c:e9:e5:50:57:0d:b9:
91:bb:a4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:22:41 2026 by rpki-client