Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/jKgKnqKbeIkEW0Gs60GBfohNFzY.roa
File: jKgKnqKbeIkEW0Gs60GBfohNFzY.roa (raw, json)
Hash identifier: cjnCuv0jEfp5/IreTu4e0UFIsjb6rrhDz4YTVcX/J5g=
Subject key identifier: 8C:A8:0A:9E:A2:9B:78:89:04:5B:41:AC:EB:41:81:7E:88:4D:17:36
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 019B797DD6F30B3F1DC517938633D157311D
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/jKgKnqKbeIkEW0Gs60GBfohNFzY.roa
Signing time: Thu 01 Jan 2026 12:17:28 +0000
ROA not before: Thu 01 Jan 2026 12:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44726
IP address blocks: 195.42.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:d6:f3:0b:3f:1d:c5:17:93:86:33:d1:57:31:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Jan 1 12:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ca80a9ea29b7889045b41aceb41817e884d1736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:cd:f5:c0:b7:04:40:14:bf:66:2e:f0:c7:
18:2e:c9:b7:3b:28:9c:99:cc:d9:56:7c:14:e7:9e:
31:8a:8a:77:e0:0a:54:9b:ad:a1:27:25:68:bf:a5:
0a:d8:4f:fb:dd:d4:f4:7f:f7:c2:a5:fb:cc:f3:45:
1e:4f:eb:29:1d:26:d4:92:37:39:3e:72:9b:01:be:
c7:bc:c6:b3:da:1b:67:1d:fe:20:e4:2a:f3:ae:c4:
8e:9d:07:15:4d:b7:fe:36:0b:3e:28:92:1c:23:a9:
bc:04:2c:14:ee:4c:dd:85:9a:84:3c:3b:3d:32:63:
a9:80:9f:ed:64:80:8d:42:80:7f:2b:2d:ca:f2:07:
a1:f9:5f:fd:46:7a:6d:1a:63:08:2c:50:7c:66:f9:
ca:43:d9:38:0d:c1:0f:6a:0c:b2:54:38:5e:16:2b:
aa:e7:b1:3c:cd:6b:7c:95:64:4f:08:f7:72:30:20:
f7:3f:44:01:75:8b:63:19:6f:95:f5:0c:4d:12:7e:
c5:67:7f:37:09:0a:ab:44:bd:74:21:42:7c:ca:9c:
f2:37:53:98:86:2c:47:71:2d:1e:2b:49:40:17:19:
aa:cb:b4:20:f9:0e:cd:27:6d:23:60:45:cf:14:ca:
8c:0f:f1:3e:9c:9b:c4:d4:e7:18:04:0e:76:a1:31:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:0A:9E:A2:9B:78:89:04:5B:41:AC:EB:41:81:7E:88:4D:17:36
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/jKgKnqKbeIkEW0Gs60GBfohNFzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.124.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:93:07:f5:7d:e2:61:9d:ed:ce:bc:38:ce:f1:57:77:10:57:
3f:21:f8:b4:6c:a8:28:77:5d:8a:92:6f:dd:d3:77:f9:e7:33:
50:35:33:d5:b8:8d:29:82:a0:77:58:c2:64:30:cd:21:4a:5b:
80:5d:e9:97:95:8e:11:e2:97:bd:9b:d1:d8:9c:61:19:1c:e4:
d8:c5:00:c4:23:ff:97:5f:94:e9:cb:c0:7e:df:71:66:e8:6a:
98:40:bb:fb:8a:4b:03:31:8d:06:9f:db:59:0b:f0:0d:dc:d9:
de:f3:1e:ed:76:08:34:35:b8:6f:28:1a:3f:36:6d:78:70:7e:
8a:d1:e3:19:1d:1a:da:70:32:3e:1b:cc:70:f5:eb:11:92:f7:
bc:81:95:23:29:48:ca:de:d8:5c:29:96:6b:f9:5e:05:20:b7:
1c:03:f3:75:8b:88:c2:d4:89:63:ee:af:06:f1:c9:4c:0b:c2:
c6:08:c4:65:a5:f1:7f:3c:f2:6e:95:d1:e6:2f:5c:66:40:58:
eb:a8:10:03:7a:3c:23:53:80:a9:89:90:48:03:ff:04:a3:1d:
f9:c8:ff:b9:90:64:68:c9:be:13:94:c1:02:92:ec:8a:31:d7:
15:cf:dd:91:7c:e4:32:4f:2a:83:71:36:c7:63:f4:2f:6f:66:
b9:ea:27:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:51:43 2026 by rpki-client