Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JyqLHg5D5RdzIghqB20l9hS4feU.roa
File: JyqLHg5D5RdzIghqB20l9hS4feU.roa (raw, json)
Hash identifier: huzsV+YQB8a+c7N4E3QVLA7WEjngwZpuaZGd+FTUYIg=
Subject key identifier: 27:2A:8B:1E:0E:43:E5:17:73:22:08:6A:07:6D:25:F6:14:B8:7D:E5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EB588F5163DFE0FEC8CC07AD8D220AE99
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JyqLHg5D5RdzIghqB20l9hS4feU.roa
Signing time: Thu 11 Jun 2026 07:15:12 +0000
ROA not before: Thu 11 Jun 2026 07:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 5.231.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:88:f5:16:3d:fe:0f:ec:8c:c0:7a:d8:d2:20:ae:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 11 07:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=272a8b1e0e43e5177322086a076d25f614b87de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:60:27:e2:90:53:d7:94:0f:87:ef:08:80:
3d:2e:10:3c:32:3e:55:d1:57:67:ce:88:e8:19:51:
5f:09:f0:06:8c:ec:c9:c5:50:73:e2:98:40:fe:93:
7b:6e:fd:3d:68:16:1d:e1:1c:78:ec:f4:5c:33:62:
e2:44:55:6e:70:1f:bf:dd:14:b7:36:04:09:56:6b:
b9:cb:0d:33:b0:fa:e4:5b:ed:96:7e:60:e0:f7:0e:
22:71:75:90:c0:1c:a6:f0:45:c4:8d:17:33:c5:77:
95:c6:ef:52:c8:62:3c:5d:80:67:bf:2e:18:11:4e:
b8:3f:97:ce:95:b7:19:3a:f6:72:7b:ae:ad:6d:fe:
90:bf:4f:3f:e1:cd:65:5f:94:a8:2a:f6:30:c6:6e:
e3:cc:ce:f0:cd:ea:07:83:4b:9f:8e:42:4c:95:64:
a8:bb:75:86:28:23:9e:ce:c4:58:e7:f7:49:cb:8b:
55:0b:d7:25:69:51:50:8c:77:d0:b9:10:ba:a8:75:
24:29:e3:a6:f6:86:90:a5:05:50:23:ee:9c:46:49:
5f:f5:84:3d:f9:03:fb:ed:a6:e2:c5:70:1b:2f:83:
3e:25:e3:d1:c1:08:e4:14:5d:86:c5:5f:05:b4:6b:
ab:f7:2d:55:6e:71:31:cd:cc:91:14:9c:53:0b:d5:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2A:8B:1E:0E:43:E5:17:73:22:08:6A:07:6D:25:F6:14:B8:7D:E5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JyqLHg5D5RdzIghqB20l9hS4feU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.92.0/24
Signature Algorithm: sha256WithRSAEncryption
36:39:9a:08:6d:1d:e1:a3:d4:9b:c8:05:55:c2:f1:7b:ff:d2:
7c:00:10:d3:f0:66:88:ac:f5:1c:22:06:b8:c5:f2:88:52:76:
88:95:22:5a:91:38:9c:96:5d:4f:fd:5e:e1:c0:86:88:32:e3:
a7:4b:73:4d:e3:39:68:85:54:04:91:c6:44:ec:24:35:34:db:
30:c0:2c:f4:e7:01:21:9f:a1:69:d1:ae:be:c9:36:07:3c:44:
e8:6b:9d:a8:c9:2f:a6:bc:20:94:58:37:1f:14:55:26:cd:a8:
bd:62:f2:71:af:bc:c1:0a:ae:78:06:33:4d:cc:51:25:72:f0:
ff:60:d5:25:45:ab:d7:96:38:84:d5:fe:6a:18:a4:b2:79:23:
b6:1d:66:ab:5a:0f:49:82:66:a7:3b:3c:a9:bb:7e:10:fb:5a:
ae:ae:8f:16:54:f3:bb:79:a5:85:e6:2d:d5:2b:29:e2:8b:49:
0f:9f:24:dc:0b:65:92:58:68:3f:e7:48:f8:c5:ee:34:af:df:
b6:2a:68:81:b9:26:49:d4:be:ee:d0:24:56:87:88:00:4b:fe:
eb:88:0c:03:c9:fb:24:1e:cc:37:81:5d:5d:1d:db:f3:f6:c9:
7e:cc:36:2f:f3:dd:d7:b9:4f:4c:68:b3:c0:6b:c5:02:11:9c:
bc:98:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:00 2026 by rpki-client