Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Jnms41a00HHsZAaDUqDwXgA8zzI.roa
File: Jnms41a00HHsZAaDUqDwXgA8zzI.roa (raw, json)
Hash identifier: RwShvg5rD/0/YSUaAR1xNnjMIINk+nGJ29Ri+9mwEx4=
Subject key identifier: 26:79:AC:E3:56:B4:D0:71:EC:64:06:83:52:A0:F0:5E:00:3C:CF:32
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01A0B0812023DE534892B1CA7F5FFA000C98
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Jnms41a00HHsZAaDUqDwXgA8zzI.roa
Signing time: Thu 17 Sep 2026 17:54:07 +0000
ROA not before: Thu 17 Sep 2026 17:54:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 94.26.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:81:20:23:de:53:48:92:b1:ca:7f:5f:fa:00:0c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Sep 17 17:54:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2679ace356b4d071ec64068352a0f05e003ccf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f9:8e:fc:86:9e:82:1f:ce:29:30:a1:7b:d8:
03:c0:5d:30:38:65:fd:1f:3b:c2:be:cd:54:ee:f7:
31:da:4c:d6:5d:96:60:75:6b:e5:66:73:e0:ae:71:
8d:1f:5a:5e:5e:62:fa:a2:31:eb:9f:b9:bf:a4:22:
fc:5b:f9:56:f3:be:c1:c8:c5:df:65:0d:10:6a:7f:
04:a1:bb:4b:3f:50:42:c4:02:02:84:da:15:cc:ed:
e3:d7:13:ba:3c:9e:21:22:61:1e:e1:c0:72:87:da:
8a:b4:03:24:ed:ed:59:52:67:cc:9b:f8:e4:33:b9:
72:0d:d8:ef:ec:2b:4f:21:32:be:bd:d3:15:b5:69:
a8:5a:64:03:c5:b2:77:85:df:d2:61:34:7f:7e:04:
a2:97:10:9f:00:80:22:07:11:67:cc:43:ae:53:a5:
0e:d6:bc:d9:d8:cc:ef:63:e8:8c:30:3d:2b:00:91:
ff:51:5b:1a:84:e1:2f:9c:f1:4d:bb:04:23:39:6f:
81:ab:b9:28:b0:4a:52:28:34:88:c1:6a:b3:b3:9b:
91:f3:e7:35:15:99:b9:29:86:73:e6:7e:4d:fc:10:
b6:21:52:bb:94:ea:c8:80:fd:59:c2:5d:46:6e:bd:
3a:1b:12:20:c6:bb:5d:f2:c9:5c:8e:e2:59:11:f3:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:AC:E3:56:B4:D0:71:EC:64:06:83:52:A0:F0:5E:00:3C:CF:32
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Jnms41a00HHsZAaDUqDwXgA8zzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.70.0/24
Signature Algorithm: sha256WithRSAEncryption
23:85:6f:49:cf:90:ff:ad:ad:1f:9d:86:a6:20:75:3f:0b:87:
43:af:26:f8:f6:a0:65:c2:38:e4:dc:3e:31:05:0c:e6:d7:19:
51:ff:0a:03:ce:c4:ac:68:fe:75:1c:48:67:0c:96:70:bd:83:
39:6d:40:1a:70:4c:b8:d5:b5:e8:c2:1c:d5:7c:44:b8:17:95:
02:fb:a0:f5:c7:10:96:f8:36:91:87:4c:94:04:64:fb:16:01:
ef:ed:33:2c:87:5e:f8:9e:d7:da:7f:c5:45:a3:8e:62:d5:94:
0a:c4:95:ae:ce:ed:5d:67:7e:c4:43:0f:0b:04:d8:07:03:64:
9d:f9:75:f7:6d:32:be:c1:f8:d0:8a:ec:7c:e9:90:46:a7:bd:
7b:19:98:0a:18:1a:b6:dc:54:66:0c:2b:1a:e7:cb:bd:db:5c:
e0:04:8b:c1:75:2d:7d:83:73:7d:41:03:3d:a3:22:2c:e6:d0:
c6:34:23:88:08:4c:50:ee:be:81:56:30:20:2e:e4:da:7a:9e:
2f:5a:0d:16:55:0a:f7:4b:61:5f:3a:37:89:94:38:20:01:80:
76:1e:eb:52:4d:f0:cb:84:71:12:0d:a5:67:58:e4:7d:0c:36:
53:02:28:24:26:02:4b:85:ec:78:7b:49:5d:b3:47:00:4a:e7:
83:66:18:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCwgSAj3lNIkrHKf1/6AAyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2
YzQzNDIwHhcNMjYwOTE3MTc1NDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjc5YWNlMzU2YjRkMDcxZWM2NDA2ODM1MmEwZjA1ZTAwM2NjZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/mO/Iaegh/OKTChe9gDwF0wOGX9
HzvCvs1U7vcx2kzWXZZgdWvlZnPgrnGNH1peXmL6ojHrn7m/pCL8W/lW877ByMXf
ZQ0Qan8EobtLP1BCxAIChNoVzO3j1xO6PJ4hImEe4cByh9qKtAMk7e1ZUmfMm/jk
M7lyDdjv7CtPITK+vdMVtWmoWmQDxbJ3hd/SYTR/fgSilxCfAIAiBxFnzEOuU6UO
1rzZ2MzvY+iMMD0rAJH/UVsahOEvnPFNuwQjOW+Bq7kosEpSKDSIwWqzs5uR8+c1
FZm5KYZz5n5N/BC2IVK7lOrIgP1Zwl1Gbr06GxIgxrtd8slcjuJZEfMVqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZ5rONWtNBx7GQGg1Kg8F4APM8yMB8GA1UdIwQY
MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt
YzE2Nzg3MjcyMDQ5LzEvSm5tczQxYTAwSEhzWkFhRFVxRHdYZ0E4enpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5
LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXhpGMA0G
CSqGSIb3DQEBCwUAA4IBAQAjhW9Jz5D/ra0fnYamIHU/C4dDryb49qBlwjjk3D4x
BQzm1xlR/woDzsSsaP51HEhnDJZwvYM5bUAacEy41bXowhzVfES4F5UC+6D1xxCW
+DaRh0yUBGT7FgHv7TMsh174ntfaf8VFo45i1ZQKxJWuzu1dZ37EQw8LBNgHA2Sd
+XX3bTK+wfjQiux86ZBGp717GZgKGBq23FRmDCsa58u921zgBIvBdS19g3N9QQM9
oyIs5tDGNCOICExQ7r6BVjAgLuTaep4vWg0WVQr3S2FfOjeJlDggAYB2HutSTfDL
hHESDaVnWOR9DDZTAigkJgJLhex4e0lds0cASueDZhh0
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:26:36 2026 by rpki-client