Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Jl-3rddU5JjTlh4l0alUwA66Db0.roa
File: Jl-3rddU5JjTlh4l0alUwA66Db0.roa (raw, json)
Hash identifier: ZChl26Oem6nIwZHG1a7h5kQon71v0ACHznlQkh4KKGU=
Subject key identifier: 26:5F:B7:AD:D7:54:E4:98:D3:96:1E:25:D1:A9:54:C0:0E:BA:0D:BD
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A0AEC86E985E0A86B778E6CC1291B09F38
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Jl-3rddU5JjTlh4l0alUwA66Db0.roa
Signing time: Thu 17 Sep 2026 09:52:46 +0000
ROA not before: Thu 17 Sep 2026 09:52:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149513
IP address blocks: 109.229.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:c8:6e:98:5e:0a:86:b7:78:e6:cc:12:91:b0:9f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Sep 17 09:52:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=265fb7add754e498d3961e25d1a954c00eba0dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:af:5a:f6:4e:db:1c:65:1e:cd:dc:8f:1c:51:
16:d3:3a:83:f4:ab:91:54:9d:81:01:45:7e:04:54:
e3:02:ff:e7:90:8c:14:f6:c5:e4:27:e4:74:49:51:
b9:98:c3:5e:33:f1:ca:5f:54:7b:37:f5:90:44:c4:
1c:b9:ee:a0:cc:4a:2c:c4:01:34:67:c2:55:e1:d4:
f6:27:f3:5e:60:5c:a1:01:87:77:ab:19:78:c3:2e:
dc:40:bd:cb:07:fa:5b:2d:5e:ea:da:83:c3:cb:e9:
fc:1b:bf:18:eb:2a:23:3e:7d:4f:65:19:01:51:12:
b9:38:12:23:d6:5f:03:24:8b:cb:35:44:3e:f9:6a:
e5:b1:20:51:90:22:91:1f:94:a0:5e:0a:c0:f6:d6:
4c:74:94:27:d8:3f:d2:79:38:bc:7a:3d:d7:30:d1:
67:d4:c5:7c:5b:b5:c5:1f:ec:1f:03:16:08:de:ec:
61:fb:86:da:ad:eb:26:07:cc:b1:71:90:73:5f:11:
dd:b4:31:bf:e4:fe:7f:b2:94:2a:ef:e7:11:29:f1:
56:12:f0:d6:36:5b:3d:80:f1:89:52:80:39:aa:b8:
be:5c:61:ae:6f:bf:07:8c:8b:4d:dd:c9:90:13:af:
d5:eb:4a:be:73:07:6a:52:2d:29:b2:87:f1:82:38:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5F:B7:AD:D7:54:E4:98:D3:96:1E:25:D1:A9:54:C0:0E:BA:0D:BD
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Jl-3rddU5JjTlh4l0alUwA66Db0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
84:11:0b:75:7c:55:33:87:3b:bf:8b:31:7c:06:d6:49:96:d1:
dc:0b:22:23:74:a0:04:af:34:92:40:22:94:fe:d2:37:38:16:
74:e0:e3:a6:4c:51:68:ff:b5:b8:0e:52:61:bd:7f:9b:19:3c:
14:47:e2:30:7e:d7:d5:3d:20:d5:e9:51:69:4c:65:80:4c:63:
9a:c6:a0:a8:2d:b9:82:9c:1c:71:e5:e4:2a:32:1e:30:27:25:
2d:75:ac:37:66:e3:0f:09:f6:f6:e0:70:78:ac:c3:e5:d8:ff:
5e:18:31:b0:82:56:02:a7:6b:37:92:41:88:a2:d4:1b:00:1a:
96:41:49:bd:6a:a9:7a:99:1b:6b:fd:95:6c:94:76:55:2b:0c:
f1:6d:71:ac:c7:fb:3e:52:25:c9:3c:fd:2c:2b:c9:94:54:07:
8c:17:2f:41:0f:87:99:09:e4:88:80:e8:22:6a:f9:4d:28:71:
0f:88:21:8b:84:cb:29:b3:88:9c:e3:d1:57:78:42:49:56:e7:
dd:74:55:3c:a4:4a:4f:9c:c5:b7:56:4e:cd:34:ac:e7:14:40:
b5:e7:48:9a:2f:2b:87:e1:99:2d:64:1d:55:59:f1:50:1c:9c:
db:02:3d:a6:f7:08:ea:be:aa:00:d4:db:0a:e7:f3:c4:4d:ae:
75:a1:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:29 2026 by rpki-client