Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jkkKYgO_wVlLkH8LstEGi-wjEGk.roa
File: jkkKYgO_wVlLkH8LstEGi-wjEGk.roa (raw, json)
Hash identifier: H/4VUWEYoLqOj3B59KZ+MJ+lCgy3557+XIpFO3apvxY=
Subject key identifier: 8E:49:0A:62:03:BF:C1:59:4B:90:7F:0B:B2:D1:06:8B:EC:23:10:69
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C485061F3C1555792F7E3C6501EF5B60F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jkkKYgO_wVlLkH8LstEGi-wjEGk.roa
Signing time: Tue 10 Feb 2026 16:09:13 +0000
ROA not before: Tue 10 Feb 2026 16:09:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 5.231.59.0/24 maxlen: 24
5.231.94.0/24 maxlen: 24
89.106.80.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.170.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:50:61:f3:c1:55:57:92:f7:e3:c6:50:1e:f5:b6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 10 16:09:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e490a6203bfc1594b907f0bb2d1068bec231069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:df:53:74:d7:2e:0e:5c:7a:dd:a8:d2:c9:
67:50:cc:bc:a0:4b:05:b3:d7:01:98:49:56:50:91:
d7:84:69:29:bc:8b:5b:a3:0e:7c:86:d8:c9:3c:85:
75:91:a2:fb:5f:88:60:d1:a1:b9:d3:88:35:ba:95:
3e:32:9a:c9:c5:1e:15:a7:18:cf:da:9d:f4:4c:ff:
cc:54:ed:6c:02:66:ce:8d:15:cf:30:08:92:24:d0:
83:6d:54:ed:45:79:81:ba:02:22:be:ef:9f:17:19:
e6:10:d4:a0:26:9f:f6:94:fc:7e:57:4e:73:73:ac:
d4:33:47:09:84:35:d5:31:8b:8c:02:e9:5d:ad:9f:
9a:c4:cb:a0:a4:fc:f2:39:34:e8:d2:66:9c:9a:e4:
00:a1:8b:2d:30:04:0a:4d:e9:5e:1e:31:ff:58:e9:
aa:f4:64:57:08:1c:f9:73:d8:13:57:73:9a:82:04:
cb:e2:7a:13:01:2c:32:86:f0:4f:ac:5a:e6:3f:27:
8b:6f:77:73:20:bc:11:16:57:5c:24:17:6a:50:70:
4b:2b:32:0a:2d:87:aa:25:d6:c2:ac:07:25:31:6e:
8d:a6:a3:41:66:9f:96:9e:97:7b:0d:74:a8:9b:f3:
ac:7b:a3:60:f2:c3:46:37:6f:24:86:c4:7f:1e:4a:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:49:0A:62:03:BF:C1:59:4B:90:7F:0B:B2:D1:06:8B:EC:23:10:69
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jkkKYgO_wVlLkH8LstEGi-wjEGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.59.0/24
5.231.94.0/24
89.106.80.0/24
89.106.93.0/24
94.249.168.0/24
94.249.170.0/24
94.249.214.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:1c:6c:fc:69:8c:51:93:8b:6a:7f:46:b6:41:d7:cc:d3:ec:
3d:b6:41:fe:fd:60:b1:5b:40:ac:a2:73:24:89:e3:75:11:0a:
8a:66:5f:c1:be:08:b1:00:be:53:57:33:41:f1:b7:49:1e:fd:
a8:7d:d6:d2:d0:53:bc:71:69:4b:0f:cb:d0:54:94:4c:ff:0e:
f0:e5:a7:03:50:62:8a:3f:a2:ba:fd:71:06:e9:60:76:3a:69:
c1:9d:bc:f7:65:7a:7d:0f:7e:30:f7:9c:69:e0:66:c5:5e:bb:
98:a3:59:5c:62:65:ff:d6:23:6f:5c:a3:23:12:01:2f:07:d1:
75:ba:ad:87:56:37:1d:23:63:c8:69:55:52:1f:1e:12:00:bd:
63:3c:5c:28:ae:1f:35:b9:f3:28:d0:87:bf:58:a6:34:9b:bd:
7f:46:c0:a7:d1:3d:aa:f2:4d:de:72:48:e8:c1:c1:43:7e:d3:
e5:d2:a1:1c:08:bf:80:3a:b1:bd:46:9c:61:2d:74:e4:18:1f:
19:c1:07:32:98:1a:90:01:83:aa:79:ca:f7:3b:40:d2:26:4f:
47:fb:cb:5d:57:4e:81:c2:3e:35:51:98:52:19:61:6e:cf:7f:
90:ee:2f:03:94:a9:cd:89:bd:f1:ed:c6:05:50:3b:9e:71:62:
d1:10:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:03 2026 by rpki-client