Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jBTuBhpX3lOQQwGUJZ7FertwUbs.roa
File: jBTuBhpX3lOQQwGUJZ7FertwUbs.roa (raw, json)
Hash identifier: DAhX+ZnG3OTnR0JNDAW5AXwhA6/srFVRmxjOQZXBNns=
Subject key identifier: 8C:14:EE:06:1A:57:DE:53:90:43:01:94:25:9E:C5:7A:BB:70:51:BB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019E93ECCEF9CADE8C3DF3F263E69B07A6E6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jBTuBhpX3lOQQwGUJZ7FertwUbs.roa
Signing time: Thu 04 Jun 2026 18:37:10 +0000
ROA not before: Thu 04 Jun 2026 18:37:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42508
IP address blocks: 81.181.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:ec:ce:f9:ca:de:8c:3d:f3:f2:63:e6:9b:07:a6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 4 18:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c14ee061a57de5390430194259ec57abb7051bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:3f:67:26:0b:ca:b7:b4:ad:be:16:7a:3f:
5d:9b:fb:c1:23:92:b6:97:1a:b2:19:36:39:f3:61:
ba:dd:9e:0b:72:22:48:b9:fe:69:24:8d:60:ac:35:
12:39:3a:96:4a:74:b2:e7:10:c2:8d:78:e2:f8:d8:
10:bd:e4:60:0d:09:9c:88:e2:7d:de:26:52:79:8f:
8c:d6:65:f5:9c:bc:a2:c4:63:af:79:05:8e:62:80:
79:f1:bd:4b:e1:28:4e:07:2d:07:c0:38:10:85:03:
13:1d:5a:09:ac:76:dc:51:ef:6e:ba:11:c1:3e:6c:
a6:30:05:ec:b8:f3:6f:d6:14:91:2a:de:4c:04:5f:
07:a6:09:dc:ca:64:26:66:37:cc:cb:38:a2:67:cc:
77:28:fe:ae:d1:a0:2f:25:d2:5c:3f:70:07:99:90:
30:f0:fd:cb:8a:0c:0f:70:9c:5b:e7:74:1b:f4:b8:
85:fe:8a:45:51:04:fe:7b:c1:a3:f3:bc:78:09:20:
aa:df:98:53:b2:89:b7:96:82:9e:5a:5a:e1:8e:b0:
d5:f8:02:f9:a9:92:ee:4e:99:6f:4b:6c:ee:61:b5:
91:08:4d:f6:7a:89:7d:bc:97:64:41:c7:44:a4:20:
a5:87:12:43:09:77:0b:4a:0f:82:b4:3b:96:d2:e5:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:14:EE:06:1A:57:DE:53:90:43:01:94:25:9E:C5:7A:BB:70:51:BB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jBTuBhpX3lOQQwGUJZ7FertwUbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.102.0/24
Signature Algorithm: sha256WithRSAEncryption
09:6b:ee:e3:9a:ae:61:c2:9f:2b:22:38:f9:22:82:62:c0:24:
75:a3:18:f1:7c:84:dd:a1:6b:8d:f3:34:86:d1:34:9c:98:57:
d4:cf:26:dd:c1:0f:bf:59:c5:a2:b3:ed:b0:52:55:7d:d4:72:
cc:e6:5c:30:92:3b:33:55:a3:08:2a:a7:38:c9:24:1a:9c:b1:
cb:f4:52:3b:b8:c9:d1:cf:1b:19:7f:24:8f:06:ea:47:f5:c0:
72:56:fa:1f:67:d1:1b:53:18:c1:5c:b7:54:a6:ae:e2:b2:6d:
23:58:dd:9f:50:f0:8b:fc:cf:65:4c:ca:5e:ca:a3:0b:27:f5:
55:26:19:ed:2f:25:7d:bd:59:22:43:2f:6c:cd:2c:9e:9f:d8:
83:1b:f5:91:5a:d5:89:12:91:9e:0d:22:1d:15:a6:88:32:84:
ee:11:b8:53:7c:11:54:1f:1f:9d:f5:13:75:8e:b2:a6:77:f1:
04:f9:52:06:7a:d4:cc:27:1e:c9:ed:d4:bb:10:a9:f4:b9:2b:
80:46:62:6d:93:9c:6e:aa:24:5e:4f:f0:cf:e5:7d:99:55:37:
27:33:37:05:93:14:09:2a:b8:35:73:b8:c6:2d:5d:cd:51:a6:
a7:0c:d4:e0:22:e9:2c:8b:5a:53:bf:a8:b7:c9:a3:01:f2:34:
c2:22:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:26:47 2026 by rpki-client