Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JNAtz6lKC6opjv-onvBc38dOiqw.roa
File: JNAtz6lKC6opjv-onvBc38dOiqw.roa (raw, json)
Hash identifier: 1DdxjsBSpxiSrdgxwEhrFKEC0l6XIwsNFRguJWV82pk=
Subject key identifier: 24:D0:2D:CF:A9:4A:0B:AA:29:8E:FF:A8:9E:F0:5C:DF:C7:4E:8A:AC
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019D4976A7052F254291504E57B8A99930E6
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JNAtz6lKC6opjv-onvBc38dOiqw.roa
Signing time: Wed 01 Apr 2026 14:33:25 +0000
ROA not before: Wed 01 Apr 2026 14:33:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214687
IP address blocks: 46.243.136.0/24 maxlen: 24
46.243.137.0/24 maxlen: 24
46.243.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:76:a7:05:2f:25:42:91:50:4e:57:b8:a9:99:30:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Apr 1 14:33:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24d02dcfa94a0baa298effa89ef05cdfc74e8aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:2e:47:ab:13:d4:58:c0:43:9a:1b:8f:1a:
06:5e:87:ec:f0:5d:26:e9:ef:05:d6:2f:34:ec:ae:
67:13:be:a1:f1:07:bd:fe:25:2c:aa:7c:7e:30:74:
ef:73:05:79:33:ca:bc:be:12:81:24:ef:42:f2:6b:
27:4f:6d:a8:76:b6:4e:33:a5:b1:f9:35:5c:a9:f5:
6a:86:8e:31:af:dc:da:8c:67:33:d3:34:06:dc:b9:
9e:1c:d2:33:01:07:f6:cc:2f:df:68:8f:44:02:1e:
2b:47:df:04:0c:63:3c:9d:af:e1:ee:13:91:3b:cc:
56:49:40:d4:33:43:ad:18:7e:0c:a2:bf:4e:24:4b:
fc:9a:6e:48:9a:d4:7e:84:61:5a:08:9a:43:e6:49:
18:c4:73:1c:da:56:11:10:51:39:eb:d8:aa:96:84:
1a:67:df:2a:82:39:7c:b8:e8:a7:0a:63:79:f3:c5:
c8:1f:b9:31:6a:56:f0:96:77:84:df:52:63:89:e9:
96:6f:77:75:8e:5e:7c:95:3d:ba:c9:06:81:bb:32:
3d:3d:8e:c2:d9:a7:02:e1:15:18:fe:9a:75:8f:fc:
7c:4e:3b:f1:02:84:58:02:ed:36:0d:94:90:50:09:
b5:7c:7e:e1:fa:47:ae:9c:9a:59:52:f2:c9:3a:7f:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:2D:CF:A9:4A:0B:AA:29:8E:FF:A8:9E:F0:5C:DF:C7:4E:8A:AC
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JNAtz6lKC6opjv-onvBc38dOiqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.136.0/22
Signature Algorithm: sha256WithRSAEncryption
73:ac:71:4a:55:bb:07:02:c2:13:68:37:13:76:05:44:de:38:
78:c0:31:b5:31:f3:ea:cf:9d:7e:eb:58:48:c5:0d:9e:f4:c0:
d4:09:b5:2e:8a:c4:df:1d:59:da:2f:6d:7d:c8:f0:f7:9b:65:
6e:e1:4c:bb:05:8f:a7:97:05:d9:a3:23:7d:b2:ea:8c:0c:43:
b9:ed:7a:f2:29:f2:b2:5b:17:e0:a1:de:07:f5:b9:b3:7f:bc:
f3:53:0f:9b:fe:49:8f:16:cf:50:06:21:1c:be:4e:dc:21:55:
e0:b2:0a:f0:03:30:4f:41:6a:6e:21:18:b5:3c:6b:81:12:98:
61:72:ee:7e:a5:5f:f4:11:0e:db:3c:4d:dd:e2:8f:20:df:fe:
b5:b4:bb:9e:3f:78:34:12:77:1f:1e:41:1d:89:18:a6:69:ef:
f9:fc:01:1f:a0:c9:d4:65:06:67:1f:7d:4c:14:c2:28:f0:1c:
1e:51:bc:06:a9:2b:8a:53:7a:cd:04:d6:a8:d2:e5:92:cc:a4:
dd:67:ff:47:82:13:73:f5:d5:aa:89:a0:d8:e1:d3:2d:db:47:
65:9d:65:f3:93:a6:56:3a:5e:21:1d:44:e4:1e:d8:f4:1c:b4:
7f:b6:42:9f:40:f4:51:4a:c4:c3:f6:f3:4f:fb:4d:c0:53:d8:
1d:33:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:52 2026 by rpki-client