Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/JV4tsenikcUJ5aMnjNBdbcekaPE.roa
File: JV4tsenikcUJ5aMnjNBdbcekaPE.roa (raw, json)
Hash identifier: PNp+LkFobf83gsUva0tfRNy52whV7WCfMpt/jax/3kY=
Subject key identifier: 25:5E:2D:B1:E9:E2:91:C5:09:E5:A3:27:8C:D0:5D:6D:C7:A4:68:F1
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A19C91833A6DE14EDCB3C2364EC2C08174
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/JV4tsenikcUJ5aMnjNBdbcekaPE.roa
Signing time: Mon 02 Nov 2026 14:02:24 +0000
ROA not before: Mon 02 Nov 2026 14:02:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38136
IP address blocks: 109.111.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:91:83:3a:6d:e1:4e:dc:b3:c2:36:4e:c2:c0:81:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 2 14:02:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=255e2db1e9e291c509e5a3278cd05d6dc7a468f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:a5:f2:c3:45:14:74:13:e9:2a:bd:b6:da:
15:bb:cc:a1:cf:1b:d6:0e:93:3a:13:3e:a9:37:bd:
a6:03:cc:25:d0:ba:28:72:b7:44:95:25:b3:d8:95:
22:6e:79:e6:22:c5:94:9f:14:8c:04:30:91:04:c0:
9b:f4:84:2d:37:af:77:2a:cd:b1:96:5e:1b:d4:91:
92:61:f6:b7:24:54:d9:b6:7d:5e:6b:b2:71:97:ad:
82:7b:67:3d:1c:40:f7:6e:f9:b1:00:2b:2b:9b:4a:
bb:5e:b9:7d:18:14:be:a0:66:58:bf:43:a3:fb:55:
2b:e4:dc:1e:fc:4c:5c:90:37:5e:8f:a2:ee:3d:99:
12:4d:90:c3:46:a3:8c:1a:b8:fb:62:b2:07:25:1a:
cd:2b:74:c8:a3:31:59:7e:72:de:30:80:d6:67:a5:
81:10:82:fc:c8:7f:53:38:ec:c4:11:d6:f4:f8:ca:
c9:c9:13:1a:7b:16:34:ac:7c:1b:74:d4:08:2e:9a:
af:c4:fa:06:87:a7:94:c5:15:b9:ef:f1:e6:a4:7c:
33:39:64:8a:71:05:00:59:aa:3b:26:04:68:10:e5:
a7:ff:3b:b4:6e:cd:16:60:3f:38:60:a6:59:e7:f0:
57:1f:cf:ca:1b:7e:9d:58:c1:53:52:0c:00:54:7e:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5E:2D:B1:E9:E2:91:C5:09:E5:A3:27:8C:D0:5D:6D:C7:A4:68:F1
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/JV4tsenikcUJ5aMnjNBdbcekaPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.50.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:77:14:bf:5e:09:90:2b:32:d5:00:39:fe:12:3c:66:3a:1c:
6d:6f:96:4a:9a:a0:bb:47:eb:d1:8a:a4:fd:bf:34:07:ac:93:
cf:2a:f5:43:82:66:88:4a:20:26:02:0e:01:4f:3c:19:f9:6f:
0b:cf:c5:44:f8:e2:d8:f0:14:7d:7a:fc:75:c9:df:53:7e:fb:
9a:4b:fe:13:09:89:85:7b:50:bc:f2:1e:fd:ad:c0:37:54:db:
ad:bb:26:8c:76:ad:07:72:f4:1c:21:0c:3e:6d:9a:a4:61:ef:
0e:5f:75:2c:a3:4b:3b:54:1c:60:98:7a:3f:bd:1b:ab:00:ce:
a1:2b:f4:ed:7c:2d:2e:34:02:92:55:90:d5:98:03:ac:cc:3a:
80:fa:40:d3:bf:89:93:eb:db:46:63:8b:d8:ed:78:43:0e:06:
a1:ca:5c:6f:79:00:75:d7:72:f7:2d:9a:b8:bd:6b:fb:71:3b:
dc:6d:c2:9c:bb:f8:47:de:d1:74:30:a1:c9:4b:2a:b1:8b:6f:
64:90:72:6e:89:d3:80:f0:9d:8b:95:89:41:e2:4c:c1:d8:c0:
96:ab:f4:67:37:74:fe:f1:f6:cf:ee:e3:1c:a6:02:86:ee:57:
d4:7e:82:0c:17:e4:c4:b9:5a:bb:c7:ab:24:a8:38:dd:7b:bb:
9d:93:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 23:41:40 2026 by rpki-client