Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/JEARuQCJYCxHv8HfFe-lBL03uK0.roa
File: JEARuQCJYCxHv8HfFe-lBL03uK0.roa (raw, json)
Hash identifier: 9gO9GtcUyz8FCoLJvfirYDrRc/ywQ/+q2nFc+c77mQw=
Subject key identifier: 24:40:11:B9:00:89:60:2C:47:BF:C1:DF:15:EF:A5:04:BD:37:B8:AD
Certificate issuer: /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial: 019D6770F95D5334C30D148A04C77889B533
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/JEARuQCJYCxHv8HfFe-lBL03uK0.roa
Signing time: Tue 07 Apr 2026 10:15:50 +0000
ROA not before: Tue 07 Apr 2026 10:15:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201622
IP address blocks: 188.126.96.0/19 maxlen: 19
188.126.96.0/20 maxlen: 20
188.126.112.0/21 maxlen: 21
188.126.120.0/21 maxlen: 21
188.126.120.0/22 maxlen: 22
2a09:f400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:70:f9:5d:53:34:c3:0d:14:8a:04:c7:78:89:b5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Validity
Not Before: Apr 7 10:15:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=244011b90089602c47bfc1df15efa504bd37b8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:ba:01:bb:8a:79:f7:7e:27:ab:7a:9d:28:
e1:44:af:9e:10:a5:ee:74:d2:ce:13:3b:e6:af:e8:
59:3d:03:86:1e:32:1a:88:cb:77:eb:7e:4a:85:71:
cb:75:d9:51:6e:35:75:f0:03:09:fd:47:5c:0f:66:
5d:49:d3:09:04:ca:03:13:08:ce:33:82:8c:ae:eb:
4b:7c:e4:df:cf:67:c6:55:e3:e3:63:d3:05:a3:9c:
eb:b9:9f:6e:21:1d:54:a0:82:22:b2:06:02:ff:b9:
23:0c:26:d1:29:ce:69:7f:13:d8:f7:cb:0f:26:1a:
51:81:8b:9a:f1:7e:63:0f:1b:9e:da:0b:63:aa:e7:
f2:31:2a:26:d9:2b:31:42:3f:7c:44:49:6f:ca:d4:
5c:67:11:39:fc:fe:ba:2f:09:a7:09:cd:c9:f5:65:
90:97:93:c0:4e:2e:97:b8:fe:2c:d7:ce:42:03:29:
aa:fa:6e:ed:e7:e1:3a:37:56:fc:7b:a7:b2:f2:99:
ba:42:1b:a1:db:9d:49:ac:d7:cc:0e:4c:11:27:8e:
df:6d:15:3f:5e:69:46:37:7d:0d:c9:0a:02:b8:21:
9e:c3:de:42:0d:61:53:cf:eb:98:19:96:f4:f7:ce:
ff:0c:d6:6b:a9:52:c1:bf:a3:8e:a4:50:9e:dc:4c:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:40:11:B9:00:89:60:2C:47:BF:C1:DF:15:EF:A5:04:BD:37:B8:AD
X509v3 Authority Key Identifier:
keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/JEARuQCJYCxHv8HfFe-lBL03uK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.126.96.0/19
IPv6:
2a09:f400::/29
Signature Algorithm: sha256WithRSAEncryption
44:70:e2:67:92:98:6a:cd:8b:4b:8b:55:d2:73:bb:42:86:92:
56:f5:59:aa:fe:28:1d:72:1c:15:24:b3:e9:c9:8e:3c:8d:86:
09:2a:59:87:01:1e:a5:34:67:8f:03:2e:8b:76:a3:82:e1:68:
d7:b2:d4:7b:5d:85:82:e9:90:f5:a3:ef:dc:62:a6:09:53:0c:
96:c8:df:30:7f:2e:db:24:12:f1:d6:58:48:b1:4d:5e:38:2c:
fb:83:36:d1:21:00:c1:45:f8:b3:cd:8f:44:42:c1:73:b2:87:
bc:70:e7:ed:05:ff:63:2e:76:79:70:f0:79:03:a2:7b:19:f5:
fd:e6:ce:43:5c:a1:97:e2:40:98:48:29:44:7e:bc:86:dd:e8:
d1:d5:cc:4f:70:c7:0f:f9:d0:9a:81:7d:4b:48:6f:c2:39:57:
d3:70:ab:77:0d:32:05:e2:6a:a4:fc:01:ba:a3:f4:b8:61:54:
71:67:40:8f:09:64:da:d3:73:6a:6c:70:5e:15:11:06:a8:b6:
7b:a4:4d:9c:13:dc:d2:a8:c7:87:a5:ab:39:21:65:52:41:55:
ce:a1:58:37:c2:ac:93:4a:3f:49:62:40:b7:ce:06:43:cc:dd:
dc:5b:73:0c:42:e1:56:f5:94:e4:1e:d2:f4:f9:73:fa:9c:d5:
ac:c2:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:23:55 2026 by rpki-client