Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JLxFGvUetAQ8fLIVYozuucAJwiE.roa
File: JLxFGvUetAQ8fLIVYozuucAJwiE.roa (raw, json)
Hash identifier: b9UAaaFaq8gAKSc+4kVofsiJwBVLtDidS3GXTRwJADE=
Subject key identifier: 24:BC:45:1A:F5:1E:B4:04:3C:7C:B2:15:62:8C:EE:B9:C0:09:C2:21
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E633E28A785C0174EA27EDD4D0F3EB8D1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JLxFGvUetAQ8fLIVYozuucAJwiE.roa
Signing time: Tue 26 May 2026 07:44:38 +0000
ROA not before: Tue 26 May 2026 07:44:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203076
IP address blocks: 213.130.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:3e:28:a7:85:c0:17:4e:a2:7e:dd:4d:0f:3e:b8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 26 07:44:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24bc451af51eb4043c7cb215628ceeb9c009c221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a3:8f:cb:26:76:43:2f:44:4e:2b:da:1d:3b:
a1:ba:b1:22:3a:4e:22:11:6b:b9:b7:64:04:67:1f:
4f:31:de:7f:ea:4b:3f:1f:f5:30:cf:15:b0:14:cb:
c6:72:63:fe:0d:91:3d:ef:5a:a6:61:54:4b:45:c4:
f4:1b:8b:f7:e7:b5:6e:90:03:43:a2:df:91:19:e4:
c2:a0:59:f2:54:da:88:42:b2:15:4c:9a:31:22:09:
1e:42:5b:a1:da:20:c1:d1:52:0f:26:ee:35:ef:ac:
76:18:d5:07:6f:4a:ee:92:e8:e6:1a:a3:7d:95:95:
99:62:45:32:0b:ec:43:82:5d:39:db:6e:c5:4c:f6:
ba:db:07:67:4e:28:d0:96:57:33:69:17:52:02:8b:
59:5a:b5:b0:2f:6e:2d:42:9c:43:c9:1e:98:d6:26:
71:d4:4c:9b:4e:e2:fb:fe:55:0a:33:bf:37:b6:15:
57:c0:41:4c:1a:8c:30:63:a6:4a:ae:35:53:01:dc:
40:c3:19:e8:16:49:ec:19:86:3e:5c:f9:b4:d1:f0:
48:bc:76:24:63:e8:cb:6b:8f:66:1b:62:dc:81:0d:
54:1a:30:30:31:4d:8a:ed:fb:39:53:bd:58:b6:63:
c0:7f:35:cd:88:dd:91:35:36:77:76:c8:fa:0b:02:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BC:45:1A:F5:1E:B4:04:3C:7C:B2:15:62:8C:EE:B9:C0:09:C2:21
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JLxFGvUetAQ8fLIVYozuucAJwiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.143.0/24
Signature Algorithm: sha256WithRSAEncryption
80:87:47:bc:f6:78:1c:b4:79:28:84:2b:4b:0b:56:a9:52:6e:
8c:46:ad:a8:71:98:d4:48:d8:70:00:89:0f:64:52:fe:cd:f5:
27:e2:9c:7e:7c:a6:dc:4a:05:f0:3c:ed:55:1d:18:df:f9:da:
e4:89:f1:09:7e:b2:1a:c2:1c:a8:d9:41:50:e9:bb:b8:11:9a:
36:2d:eb:11:c9:d0:17:6d:21:54:e1:d3:1c:0a:67:6a:ba:cb:
da:9f:07:81:b5:ac:d2:5f:19:9e:1b:b9:d4:78:be:d4:20:ee:
84:a8:9d:68:13:4a:75:0d:c1:6b:ca:45:c8:60:0b:fe:ea:eb:
49:6a:3a:7b:c8:94:a0:8d:98:69:f1:27:bf:af:d4:41:63:23:
62:db:9d:6b:e5:68:72:e0:b6:d1:cc:d2:fe:10:bd:ab:b0:c7:
12:94:e0:1b:d7:90:8f:db:02:da:e6:ce:77:88:28:c8:7d:a3:
13:23:4c:a4:52:33:a1:1a:62:16:78:b1:b6:16:1e:26:f2:e9:
d8:93:0f:80:fd:e1:28:02:12:47:2a:90:44:d4:97:30:81:f7:
e9:69:d2:87:e0:d4:35:71:c2:ef:a6:60:5e:35:49:1e:76:07:
45:c3:b2:b7:a7:e5:88:ae:12:9e:43:07:9a:bf:d0:4f:36:16:
8a:a4:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:42 2026 by rpki-client