Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/JxJo9qALLP7eJJE5vuTtbxNKarg.roa
File: JxJo9qALLP7eJJE5vuTtbxNKarg.roa (raw, json)
Hash identifier: HkVv74vSVM+BvE4aRbMZl6E3E6sT2RpvFk2i93TTTiE=
Subject key identifier: 27:12:68:F6:A0:0B:2C:FE:DE:24:91:39:BE:E4:ED:6F:13:4A:6A:B8
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019D9534855D0ADD2B42B1FD9CE773E2EF0F
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/JxJo9qALLP7eJJE5vuTtbxNKarg.roa
Signing time: Thu 16 Apr 2026 07:32:20 +0000
ROA not before: Thu 16 Apr 2026 07:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 85.232.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:34:85:5d:0a:dd:2b:42:b1:fd:9c:e7:73:e2:ef:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Apr 16 07:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=271268f6a00b2cfede249139bee4ed6f134a6ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:f2:bd:9d:d4:2b:a8:33:de:ae:c4:7b:c8:
6b:40:1e:ab:d6:d1:24:36:ca:33:bb:31:93:0f:b7:
64:5b:02:71:ae:1a:88:ad:84:5c:d7:18:e2:39:e0:
be:38:07:11:f0:63:81:3b:3d:c9:60:f3:8b:dd:ee:
7a:26:b2:0f:22:c0:2b:4d:23:3e:d2:e9:4c:0a:c5:
d6:18:38:f5:9e:7a:8d:c2:9d:a5:01:b2:ef:8e:7b:
c7:e4:b6:3c:9b:06:81:69:a7:27:b3:46:2c:ba:fa:
1d:b8:33:3e:8f:58:9b:00:3e:30:4e:a2:98:50:b5:
7c:00:aa:11:1b:af:a6:a7:41:84:d9:41:81:e9:a2:
a0:f6:e4:b5:3b:77:25:26:77:e6:a8:34:c2:d8:41:
a9:f3:ee:b0:75:d3:c9:64:51:9d:85:b5:45:7e:e9:
1e:54:ec:11:65:5f:ed:58:37:f5:fa:e0:97:d9:94:
a2:bd:68:23:a2:f7:2b:5a:37:26:f3:bf:2b:ca:25:
4e:7c:66:b7:fc:9d:cb:40:7b:ff:8e:de:81:82:90:
1e:b3:02:b4:30:6a:38:61:3a:6f:94:6a:e6:60:19:
95:c7:c1:c5:27:43:d1:bf:32:11:70:64:13:e8:7b:
17:bc:43:c5:e5:39:fd:2b:95:4f:bc:0b:0e:a7:e9:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:68:F6:A0:0B:2C:FE:DE:24:91:39:BE:E4:ED:6F:13:4A:6A:B8
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/JxJo9qALLP7eJJE5vuTtbxNKarg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.180.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:34:62:dd:8e:95:14:da:0f:3d:c3:03:19:30:9b:d9:35:5b:
42:c8:c6:42:ca:b9:9c:8c:d5:a7:60:17:7e:7e:cd:05:e5:1c:
d5:d3:d6:68:3f:be:e7:68:62:88:e1:e3:ad:bb:ed:56:26:65:
cb:d7:44:ed:12:50:71:17:e2:3f:a2:a8:50:9a:b2:37:55:ca:
b1:29:1f:5a:bc:7e:88:f3:d1:86:a4:57:c1:78:83:60:15:c0:
3a:9d:f1:83:d5:83:ef:7b:3e:6c:1c:b1:ea:fa:a8:b1:e2:3a:
80:25:1a:16:8d:e1:1a:9f:32:7e:b3:01:dd:56:df:20:97:e0:
96:79:f6:9c:57:33:ac:33:0b:04:5e:dc:f8:78:81:5f:3b:5c:
1d:71:9e:43:33:bf:9e:9b:b1:40:d1:0e:2f:b6:ba:28:f0:68:
30:41:92:a9:5a:04:fc:68:01:5e:72:e7:ba:db:4c:e1:22:3e:
ec:e0:df:a3:be:97:dd:bd:1b:ed:bb:16:ec:5d:39:46:d7:eb:
ec:fe:cb:b8:ea:30:15:78:4d:e8:a0:11:8b:32:89:37:f5:74:
1e:98:af:5f:6e:c3:e7:53:8e:70:f4:1a:40:60:81:3c:c5:87:
e2:49:56:8d:4e:c1:d7:c6:4f:66:0b:c7:db:12:ac:50:d0:c6:
ac:ef:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:58 2026 by rpki-client