Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/jKNT_AJmqKLUzRsNV17SW2IxOf8.roa
File: jKNT_AJmqKLUzRsNV17SW2IxOf8.roa (raw, json)
Hash identifier: YzX7y6hNOozFt4OF66OKcy+9YHHPACtTPRFr+JGkOjc=
Subject key identifier: 8C:A3:53:FC:02:66:A8:A2:D4:CD:1B:0D:57:5E:D2:5B:62:31:39:FF
Certificate issuer: /CN=866571b406976c9faf8877302819cf550e79e29d
Certificate serial: 019E4F3CABC208D87B4E563E77AE570DA4DB
Authority key identifier: 86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/jKNT_AJmqKLUzRsNV17SW2IxOf8.roa
Signing time: Fri 22 May 2026 10:30:36 +0000
ROA not before: Fri 22 May 2026 10:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2263
IP address blocks: 157.159.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:3c:ab:c2:08:d8:7b:4e:56:3e:77:ae:57:0d:a4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866571b406976c9faf8877302819cf550e79e29d
Validity
Not Before: May 22 10:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ca353fc0266a8a2d4cd1b0d575ed25b623139ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:33:8b:2b:0e:49:0d:b9:cb:d9:66:42:10:
b3:45:b8:1f:8d:ec:ce:b8:5a:f4:af:43:e1:5b:cf:
05:bb:5b:e6:02:d5:2b:01:78:a6:0f:b5:b3:a4:01:
0f:24:c2:fe:6c:13:64:0f:da:25:dc:1d:93:08:a7:
c7:de:c4:5c:34:6c:20:d1:81:17:3d:ab:78:31:ab:
e2:c3:97:13:7b:0d:ca:92:79:de:0a:cb:e1:e0:c4:
d7:b5:90:b0:11:b5:d4:d7:5f:dd:a1:c7:87:dc:bb:
0b:d0:98:f3:d0:d6:18:57:1c:1e:da:b6:80:55:72:
76:55:f9:78:02:2f:e9:72:fd:1a:15:18:87:06:ce:
62:4f:65:d7:e5:d9:c9:7f:be:17:dc:73:1e:f4:c7:
f5:84:75:e3:85:44:fe:93:fb:f4:4b:d2:47:41:d5:
61:99:08:65:2d:93:78:53:fb:8c:2b:3f:5c:eb:9a:
f7:eb:76:95:21:86:8c:32:c4:c7:0b:f8:bf:6a:d3:
84:08:87:5f:3c:f0:e3:5d:8c:e6:60:76:f6:4d:3c:
98:03:dd:e2:f0:0a:1f:e3:64:ba:1d:02:3f:55:3c:
b8:9d:f9:4d:03:c2:b0:1c:39:e1:95:51:2f:02:77:
63:9c:f6:0d:56:fb:01:f8:4f:d5:e3:ba:c9:1f:11:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A3:53:FC:02:66:A8:A2:D4:CD:1B:0D:57:5E:D2:5B:62:31:39:FF
X509v3 Authority Key Identifier:
keyid:86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/jKNT_AJmqKLUzRsNV17SW2IxOf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.159.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0b:41:57:c1:cf:d6:78:72:d9:c2:5c:46:25:f1:79:2a:63:
07:90:df:9c:06:b4:12:52:d3:9f:39:6e:ed:ce:45:a2:f6:d0:
7b:96:c8:c0:42:9b:fe:8b:67:70:1a:e5:7c:67:08:20:8d:61:
fe:c3:5c:40:5b:98:90:bf:8a:33:b2:97:c2:5c:79:b2:37:88:
54:eb:52:5b:a8:f2:58:99:7d:64:74:85:56:ac:5a:95:58:54:
38:bf:c8:8a:a8:7f:0f:89:ed:f9:0a:eb:24:2f:d4:c5:6a:e2:
41:5a:35:04:d8:84:9e:e8:e0:7f:e9:c9:8b:77:40:82:1f:e5:
6f:57:3d:60:ff:73:63:ff:40:28:f5:ab:1d:39:ea:4b:76:ed:
21:96:8e:61:79:ad:b1:d9:c8:08:e8:ba:74:5b:96:8a:72:75:
31:4f:79:5b:5c:65:26:a2:46:5e:7a:17:62:07:4a:c4:4c:ac:
06:30:d1:8c:89:6b:16:77:bb:f9:f4:71:da:af:5a:cc:ff:51:
33:fc:eb:9a:64:2b:ec:e3:ec:ce:9f:b2:2d:90:ff:ad:42:be:
f5:a7:5c:40:3f:24:72:04:5e:c2:e3:a9:1f:67:dc:10:1f:89:
c8:71:81:d7:47:f0:07:58:42:af:5d:8e:e1:88:46:6e:d6:a5:
34:1f:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:16:59 2026 by rpki-client