Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JKKpXZreBlfX8vHGEfeWsNoNaRM.roa
File: JKKpXZreBlfX8vHGEfeWsNoNaRM.roa (raw, json)
Hash identifier: uGmWpZgaVawU3oFajAOjDsPk48FpAW1gFeX+3lU3aS8=
Subject key identifier: 24:A2:A9:5D:9A:DE:06:57:D7:F2:F1:C6:11:F7:96:B0:DA:0D:69:13
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A08048AA601D46CDEF24791A05F1938BAA
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JKKpXZreBlfX8vHGEfeWsNoNaRM.roa
Signing time: Tue 08 Sep 2026 09:10:40 +0000
ROA not before: Tue 08 Sep 2026 09:10:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2895
IP address blocks: 147.45.0.0/19 maxlen: 19
147.45.0.0/23 maxlen: 23
147.45.14.0/23 maxlen: 23
147.45.20.0/22 maxlen: 22
147.45.32.0/23 maxlen: 23
147.45.194.0/23 maxlen: 23
193.233.0.0/22 maxlen: 22
193.233.4.0/24 maxlen: 24
193.233.10.0/23 maxlen: 23
2001:640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:48:aa:60:1d:46:cd:ef:24:79:1a:05:f1:93:8b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 8 09:10:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24a2a95d9ade0657d7f2f1c611f796b0da0d6913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:67:7a:60:d6:26:0d:8e:4e:ac:cb:53:fd:
f2:6b:81:f9:e7:a0:bb:b4:29:04:93:62:74:59:bf:
ed:37:7b:f3:cf:a7:66:83:31:4c:d1:5a:f6:1e:31:
24:44:b5:8e:d0:ed:9f:e6:f4:25:4f:ce:c3:12:09:
6f:b5:ab:85:70:44:15:54:6c:5b:95:a4:2f:a4:d5:
d0:32:cf:a0:05:61:e6:03:49:fc:b5:3b:05:32:99:
15:aa:95:3e:ec:c2:58:1b:65:13:af:72:73:66:9e:
99:6a:8f:4e:0f:6c:20:67:3f:9e:57:a8:7a:21:54:
23:f0:a2:94:87:78:a0:0c:15:04:61:7e:fd:26:77:
6a:8d:cb:dc:75:78:48:e1:35:a9:1a:53:ce:c4:7c:
38:5a:0f:24:b4:c8:a4:c7:4b:90:25:a5:fc:b2:1e:
aa:e5:04:09:ea:77:e0:07:52:e3:d2:9a:06:c8:fa:
ac:56:56:cc:f5:3a:49:f7:fa:21:56:8e:7f:db:7f:
38:03:e8:dc:1c:dc:39:a3:bb:bb:01:7f:a0:a0:71:
1d:88:cd:61:34:48:c3:d0:50:75:8b:86:75:f8:5b:
40:74:d7:fd:0c:5a:4c:f6:41:1c:ac:a7:f4:d0:e1:
b7:0d:05:8e:c0:b2:cb:02:d1:e5:63:6c:24:10:80:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A2:A9:5D:9A:DE:06:57:D7:F2:F1:C6:11:F7:96:B0:DA:0D:69:13
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JKKpXZreBlfX8vHGEfeWsNoNaRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.0.0-147.45.33.255
147.45.194.0/23
193.233.0.0-193.233.4.255
193.233.10.0/23
IPv6:
2001:640::/32
Signature Algorithm: sha256WithRSAEncryption
6a:f7:0d:c7:d6:3d:9e:75:42:e7:ef:9d:58:19:9a:df:66:93:
33:1f:4e:64:23:73:2e:e9:78:96:8e:26:09:54:a1:ce:1c:c1:
35:04:5f:fb:3d:a4:e7:d3:e6:fb:a3:c4:be:4e:45:cc:f5:12:
03:88:6c:d3:79:2d:3f:38:e1:a0:15:02:a4:18:15:7b:44:40:
47:01:0a:70:7f:aa:64:a3:17:f6:6e:fd:b5:58:cb:3f:aa:42:
07:94:76:84:cc:60:d1:05:23:3b:c7:72:ee:a3:69:49:eb:16:
ee:15:4c:ed:4e:2a:4f:da:07:88:19:f4:84:06:e6:1a:2e:c1:
8c:13:fc:95:86:bc:af:e3:c6:d8:cb:6f:41:ef:0a:c6:3d:08:
e2:82:12:81:17:16:e1:61:a3:fc:c7:e5:f5:12:ed:c6:23:31:
96:67:a6:90:eb:72:f9:54:b0:d5:ad:ed:3d:6c:d8:bb:25:ba:
00:87:bc:a8:b0:9b:98:0a:1e:1a:71:30:f2:07:b2:92:4e:86:
e8:b4:5f:2c:b0:36:bd:2e:c3:69:18:31:44:55:5d:74:fd:22:
90:f7:62:02:8c:5e:1f:28:fc:75:9b:5b:57:27:7e:53:e4:c1:
0d:7a:27:11:97:78:4a:4c:4f:79:84:60:d4:a1:8d:ab:07:f0:
f9:33:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:43:47 2026 by rpki-client