Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/jTbrb1TbwgaHuVljIE6syUVcGbE.roa
File: jTbrb1TbwgaHuVljIE6syUVcGbE.roa (raw, json)
Hash identifier: 1xz+1g5hD0xQyll98W3vSqycYShnYZQgn+0XxOIFh6g=
Subject key identifier: 8D:36:EB:6F:54:DB:C2:06:87:B9:59:63:20:4E:AC:C9:45:5C:19:B1
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 019C75E95B224E4A3D2FDCE7BD8D8B85C2FE
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/jTbrb1TbwgaHuVljIE6syUVcGbE.roa
Signing time: Thu 19 Feb 2026 12:39:13 +0000
ROA not before: Thu 19 Feb 2026 12:39:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205009
IP address blocks: 45.94.52.0/24 maxlen: 24
45.94.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:e9:5b:22:4e:4a:3d:2f:dc:e7:bd:8d:8b:85:c2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Feb 19 12:39:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d36eb6f54dbc20687b95963204eacc9455c19b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:46:98:02:9b:ac:b4:22:24:e0:b6:88:d8:
0c:bc:8e:25:75:21:32:cb:c6:67:eb:e1:d1:11:69:
72:1b:d9:b7:01:9e:da:52:f9:31:e8:ee:10:c8:a0:
c5:76:5b:6c:83:33:21:42:1d:4a:b1:3e:0a:8f:17:
07:4b:00:90:c3:f6:25:9c:b8:6d:cc:b7:0f:8f:37:
7a:fe:a2:e7:dd:b0:38:6b:b2:0c:4f:fa:e8:6a:8d:
ca:c9:da:ad:d4:6a:a6:9a:34:a2:c9:a4:d1:5d:f4:
f5:4f:61:a0:d1:75:f6:cd:de:16:4e:b6:44:44:5d:
ec:6a:29:93:30:8b:60:d0:c3:f7:23:b6:f6:32:0e:
64:eb:85:e9:db:1c:e6:38:d7:93:cb:07:d8:40:79:
09:df:fe:b0:f9:f1:a8:a8:d3:92:fb:60:cd:09:3f:
24:e3:f2:eb:c2:6c:d2:f3:fc:12:00:c1:6c:02:5d:
80:6d:b0:d7:3f:66:e1:8e:28:36:21:03:a8:36:52:
9c:bb:c2:71:ff:1f:5b:5b:a1:fe:18:f5:58:a0:97:
02:4e:ce:0e:84:bf:8a:e7:52:10:39:84:a6:4f:41:
4a:b8:b8:ae:cd:59:ac:09:96:53:c7:01:32:8b:10:
31:85:64:33:1a:71:ad:22:05:39:50:9f:5d:b2:25:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:36:EB:6F:54:DB:C2:06:87:B9:59:63:20:4E:AC:C9:45:5C:19:B1
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/jTbrb1TbwgaHuVljIE6syUVcGbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:3a:8d:3f:e0:f9:9b:0a:de:a0:34:42:ab:25:e1:00:85:30:
b5:2b:cd:d4:ed:ff:f7:84:b5:c1:6f:fc:52:a3:3f:f0:e0:71:
2c:d8:57:75:5e:69:d8:f5:24:85:ea:b6:f2:1e:bd:bd:ff:b3:
54:53:e4:41:d1:d3:9c:e4:90:1e:a9:a1:ed:db:82:88:cc:c1:
7d:d0:7c:84:52:ba:ac:50:c1:10:86:6b:78:20:84:d7:6c:4e:
44:8c:43:14:81:47:a5:26:ac:4a:22:78:c9:bb:2e:3e:cb:e1:
42:2d:e5:67:0a:b9:22:dc:bf:66:09:e1:13:64:7c:8a:77:67:
ad:8f:f3:62:af:92:d7:1c:4c:2b:43:57:4a:31:73:05:c5:7c:
c2:62:69:ed:34:33:43:1a:27:84:6c:62:64:e0:04:59:e7:bd:
21:53:ca:5d:22:5c:01:82:22:c0:4a:c3:a6:59:29:29:de:9a:
2a:0f:2c:5c:e9:6f:1f:8f:ac:73:d6:30:23:6e:a9:ad:f4:c2:
54:b3:e6:14:e6:2f:aa:4f:a0:3a:ee:d9:f8:23:91:e5:dc:ff:
98:a4:73:c1:42:cd:aa:e7:ca:94:c6:aa:51:1e:c7:ee:a3:c9:
82:6b:3b:51:2d:bd:8c:f2:1d:78:b4:87:d5:cc:51:71:54:9f:
e7:ba:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:06 2026 by rpki-client