Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Jd31qx-yiqUqWWo7jPzPNCOki0I.roa
File: Jd31qx-yiqUqWWo7jPzPNCOki0I.roa (raw, json)
Hash identifier: rFu9Hzpz6Ul+Q0D/N0VeQ9NOX2DGu7TJn85l90Uus3Y=
Subject key identifier: 25:DD:F5:AB:1F:B2:8A:A5:2A:59:6A:3B:8C:FC:CF:34:23:A4:8B:42
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019D76636A9285E2DEBF186C172C196852D2
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Jd31qx-yiqUqWWo7jPzPNCOki0I.roa
Signing time: Fri 10 Apr 2026 07:55:20 +0000
ROA not before: Fri 10 Apr 2026 07:55:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203436
IP address blocks: 176.97.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:63:6a:92:85:e2:de:bf:18:6c:17:2c:19:68:52:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 10 07:55:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25ddf5ab1fb28aa52a596a3b8cfccf3423a48b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:90:51:1e:64:df:c8:03:ca:d0:d9:b9:a5:
ca:1f:85:f2:d1:1d:3c:9a:19:b0:fc:4d:c6:6b:4f:
03:20:9c:6f:29:69:80:e9:ec:be:bb:2e:15:b8:74:
9e:40:c7:6a:9e:63:1f:cc:02:f5:95:7b:9e:ca:01:
8f:22:f4:49:bf:02:4a:20:b6:45:41:b4:3a:ab:94:
eb:64:17:6e:1a:fb:99:cf:f1:4e:a7:96:e7:df:d0:
78:6b:f4:1b:ad:f0:28:06:e1:7f:0b:b1:1b:d6:5d:
21:40:71:24:21:0c:e9:54:21:73:29:99:ef:1b:b1:
4a:4e:91:09:07:ce:14:4a:07:3a:da:56:08:72:ac:
c7:07:02:df:60:6a:b4:52:2b:26:94:87:34:a2:83:
9a:ea:3f:17:e8:6a:c3:62:6e:b3:5b:4c:6d:c7:0a:
33:87:d1:70:14:e7:b0:99:a8:fa:45:05:30:3c:aa:
ac:95:3c:d7:59:03:ee:f8:fc:61:e4:05:ca:04:ab:
56:d3:34:36:b6:04:95:4e:1c:f9:39:a3:41:67:01:
20:7f:cc:a1:42:0d:95:61:24:54:8c:be:db:5d:cd:
f0:5d:c0:e7:c7:bb:5f:e0:76:01:f6:37:07:7b:e3:
01:be:c3:ff:b5:af:39:03:d5:cb:27:64:bb:35:06:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DD:F5:AB:1F:B2:8A:A5:2A:59:6A:3B:8C:FC:CF:34:23:A4:8B:42
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Jd31qx-yiqUqWWo7jPzPNCOki0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b5:61:7b:7b:e0:9a:ed:25:14:35:f3:db:c0:73:a9:0b:f6:
81:95:c0:d9:a8:7b:56:08:64:b0:b3:ba:59:7d:cf:df:90:17:
6c:35:03:bf:0f:fe:7d:8b:aa:3a:14:1c:48:5c:7c:0a:80:df:
23:66:ac:49:20:86:38:82:34:a6:cf:e7:9c:15:e8:33:21:be:
94:65:de:7b:47:d9:4e:6b:33:ad:fc:33:c3:7e:e6:d4:b9:4f:
26:f5:35:e6:4c:97:be:fd:5e:4f:c2:86:c7:9b:a5:53:d2:2a:
86:de:40:6b:28:ae:3e:db:ab:86:da:bd:2e:c2:da:5f:39:81:
51:c0:0f:25:a1:02:ff:fb:ec:89:87:55:f0:ee:36:08:0d:c2:
38:75:ed:c4:f5:1c:49:d0:23:a4:ff:1e:48:a8:8d:60:81:36:
f0:b1:1c:1e:24:f0:45:85:13:eb:05:47:39:3b:82:43:e7:4c:
74:60:2f:64:f0:93:a1:a4:61:07:13:1c:b8:e1:28:f6:1d:8c:
c3:f4:f7:69:72:b2:a3:72:72:b0:b4:8c:32:40:3a:00:8e:09:
c6:d6:65:d8:24:78:b8:a9:0f:3a:aa:a4:01:03:95:dd:e3:28:
ec:06:33:8f:9e:23:44:10:c4:ad:d5:ab:92:5c:f0:69:3e:73:
c9:a2:70:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:31 2026 by rpki-client