Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/jjtZBKK7fPop1QG6Uw6F-VFE298.roa
File: jjtZBKK7fPop1QG6Uw6F-VFE298.roa (raw, json)
Hash identifier: 2wfzrrsU/SDWQLwJxQnkMRrgQx8J4sT/TylAdOgKEik=
Subject key identifier: 8E:3B:59:04:A2:BB:7C:FA:29:D5:01:BA:53:0E:85:F9:51:44:DB:DF
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A117E24291CC4EAD3FA3E195BBF863D509
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/jjtZBKK7fPop1QG6Uw6F-VFE298.roa
Signing time: Wed 07 Oct 2026 19:41:06 +0000
ROA not before: Wed 07 Oct 2026 19:41:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218953
IP address blocks: 45.133.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:e2:42:91:cc:4e:ad:3f:a3:e1:95:bb:f8:63:d5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Oct 7 19:41:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e3b5904a2bb7cfa29d501ba530e85f95144dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:44:39:9f:7f:e1:65:46:dd:bb:86:e9:8d:
ce:c4:09:e5:2f:d1:45:fe:53:12:d3:07:15:d1:1e:
c3:50:40:18:a8:c8:a5:32:31:6b:06:88:70:1f:6d:
ae:5e:9b:d9:34:0a:4a:cc:7e:46:6f:cf:e0:be:ba:
bf:40:df:91:65:8f:14:71:2e:5d:73:99:dd:60:ed:
6a:b3:72:0f:08:bf:2e:7b:ca:24:81:25:40:55:7c:
a0:46:88:02:23:fe:53:49:2a:bb:02:1d:ea:4d:ca:
1e:55:73:75:95:14:c1:5c:a2:f8:56:7a:24:ce:8a:
57:90:bd:c9:41:e1:08:45:2e:f0:f0:68:96:cc:b7:
d0:4e:83:d6:2e:4d:7c:6f:5f:42:55:30:ef:64:3b:
02:63:3e:ed:b6:24:fd:5e:7b:6c:04:05:e2:7e:a3:
97:23:f5:a3:d4:97:22:b4:9e:ae:66:1f:94:f9:4d:
99:9b:da:53:7e:4d:a7:80:3c:23:d9:c0:de:ad:3f:
c6:d4:24:04:78:e1:dd:c0:23:e1:27:bb:87:c8:42:
15:fd:99:6d:b5:6e:79:d8:8b:af:8a:22:a8:32:ee:
79:3f:4e:da:da:96:07:90:3d:55:ba:aa:93:e4:b8:
47:66:bd:f5:3f:9f:56:2a:3b:17:f7:78:61:d3:13:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3B:59:04:A2:BB:7C:FA:29:D5:01:BA:53:0E:85:F9:51:44:DB:DF
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/jjtZBKK7fPop1QG6Uw6F-VFE298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a6:21:7e:76:5e:d0:96:a9:2a:bf:c4:38:74:d7:c4:91:9e:
a3:64:75:a2:f1:8e:44:e6:43:c2:5a:33:27:f6:95:d6:8d:61:
b8:f7:c7:02:02:86:54:24:76:d4:37:ed:d3:dc:82:a4:85:04:
1b:7f:63:21:ce:25:06:50:77:4d:76:a2:eb:77:2e:5a:f2:4a:
49:f5:ba:5d:9a:35:cf:1f:1e:ed:c3:f5:4c:50:41:c2:50:5e:
53:52:92:f9:3a:00:52:cd:72:08:b6:4c:53:05:be:e2:d4:d3:
1a:c1:a5:98:a4:f3:56:49:8f:d2:34:e4:2b:b3:b0:2a:15:31:
5b:0f:63:3e:7a:23:38:4f:de:ad:6e:bd:2e:d5:4e:e6:36:8f:
69:4e:36:62:4d:fd:31:04:a3:3a:ca:c0:65:b9:45:6c:e3:95:
cf:d4:09:87:e9:04:33:7c:7a:33:fa:cc:67:6b:05:da:a5:48:
43:eb:79:16:6d:a5:67:86:4e:32:57:f7:23:15:de:7a:f7:79:
cc:6c:1e:d1:56:d2:c1:d2:5f:29:d6:b9:28:ce:dc:50:d5:62:
f8:9b:f9:b0:bb:81:d1:0d:9f:b3:6d:34:9f:96:3f:72:7b:0e:
09:24:96:c3:f3:5a:54:16:da:2b:e7:eb:dd:e2:44:8b:86:ae:
c8:08:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:54:19 2026 by rpki-client