Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JsBsKjcNQmRBLlfjucDC6WPDzpU.roa
File: JsBsKjcNQmRBLlfjucDC6WPDzpU.roa (raw, json)
Hash identifier: DeLRjVuqu5/jBl2j/HWd4wOjL77y7s5wB4ifOnbNUT4=
Subject key identifier: 26:C0:6C:2A:37:0D:42:64:41:2E:57:E3:B9:C0:C2:E9:63:C3:CE:95
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0611774AC797E16AD3AC40F45424CC58D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JsBsKjcNQmRBLlfjucDC6WPDzpU.roa
Signing time: Wed 02 Sep 2026 07:48:41 +0000
ROA not before: Wed 02 Sep 2026 07:48:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 94.183.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:17:74:ac:79:7e:16:ad:3a:c4:0f:45:42:4c:c5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 07:48:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26c06c2a370d4264412e57e3b9c0c2e963c3ce95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:fa:1f:37:ff:d5:d7:30:27:16:1e:b4:52:
62:bd:47:20:0f:a8:23:96:9e:99:a8:58:a0:b2:34:
f4:0a:fa:d9:fc:5b:22:a6:d9:05:aa:46:31:6f:e3:
07:64:c8:0e:14:89:30:15:2a:38:2a:69:e7:d2:92:
9b:62:27:6b:ff:16:d1:34:fc:b2:b7:e9:61:4d:4d:
16:59:24:89:7e:f7:d1:27:bf:fe:a2:2a:05:24:0c:
ba:39:3f:57:be:29:d2:c7:6b:bc:48:21:76:eb:32:
8b:bf:cd:79:af:18:81:50:18:ec:8b:bc:7f:3e:7a:
93:0e:a7:0e:04:13:be:39:4b:7c:c6:a9:38:88:0a:
d9:88:30:18:a2:2e:43:bf:ac:d6:d4:1e:55:79:03:
09:ba:11:89:83:b8:bd:cb:ec:a2:02:35:c0:e1:f1:
d2:64:e4:f1:d2:1c:7b:a1:68:3f:8a:d4:f9:59:da:
75:a8:51:40:9f:72:5b:10:55:54:98:8f:68:59:59:
0d:b6:e1:22:24:14:72:ae:02:ff:c8:19:af:54:c7:
e0:52:e2:10:76:a1:30:6c:fe:d0:fe:7d:3c:bf:14:
84:fb:b5:19:d6:8a:70:61:b1:2b:80:0b:8c:6e:11:
7f:47:3b:45:02:37:6d:e6:61:cb:74:fd:a3:b7:3a:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C0:6C:2A:37:0D:42:64:41:2E:57:E3:B9:C0:C2:E9:63:C3:CE:95
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JsBsKjcNQmRBLlfjucDC6WPDzpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.158.0/24
Signature Algorithm: sha256WithRSAEncryption
61:80:3e:9a:9c:d8:53:71:7f:7c:90:f5:cd:84:60:ed:53:27:
5e:a6:ec:47:be:ca:36:80:c3:9d:7a:c5:66:3e:92:86:96:03:
a7:b7:1c:34:ca:10:7d:a5:17:96:b3:70:52:3a:03:3d:51:08:
e5:9d:4d:22:28:15:76:c8:bc:d9:8a:8a:74:e7:33:b3:cb:90:
0a:18:7c:c1:cb:73:4e:e9:4e:09:e6:9b:70:a9:ab:82:28:b9:
de:d6:63:28:f9:7f:ef:86:fc:c7:e6:e4:ed:be:d2:03:2b:49:
26:24:3e:1f:8a:e8:de:ff:b4:88:1c:28:99:a2:df:db:87:5b:
51:aa:af:a7:c5:27:c3:9a:3b:a6:84:2b:dd:f6:3c:b5:52:88:
58:5e:bd:a8:a6:cb:7b:af:59:fe:73:81:d1:11:cd:14:57:2f:
c5:36:c9:9c:a8:07:27:79:ba:63:68:7f:cb:fc:d8:b2:ea:ee:
da:92:cc:e6:96:ec:74:5c:7b:a3:74:ec:88:31:46:98:d1:a5:
7c:5a:ce:c7:a6:78:e2:ec:94:16:fc:d6:ed:dc:43:37:83:9a:
fe:7b:0d:b7:9a:74:d8:fb:fa:e4:27:bb:de:cc:56:33:48:6e:
a6:20:54:99:7e:cd:c1:ee:3d:57:64:15:6b:47:3c:85:67:f4:
e6:0c:8e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:04:55 2026 by rpki-client