Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/jswe1oQGjk3VnX42P-4UtSO0zTE.roa
File: jswe1oQGjk3VnX42P-4UtSO0zTE.roa (raw, json)
Hash identifier: tEyibc/laHgLnkyTKGwcO3f6+sN18A1HCg/9bYHuDxU=
Subject key identifier: 8E:CC:1E:D6:84:06:8E:4D:D5:9D:7E:36:3F:EE:14:B5:23:B4:CD:31
Certificate issuer: /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Certificate serial: 019D5A58DA82B6AEFE080B7DF5C72384754F
Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/jswe1oQGjk3VnX42P-4UtSO0zTE.roa
Signing time: Sat 04 Apr 2026 21:14:25 +0000
ROA not before: Sat 04 Apr 2026 21:14:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 45.14.234.0/24 maxlen: 24
45.14.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5a:58:da:82:b6:ae:fe:08:0b:7d:f5:c7:23:84:75:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Validity
Not Before: Apr 4 21:14:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ecc1ed684068e4dd59d7e363fee14b523b4cd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:86:97:8b:3c:a9:7a:35:da:b3:2d:5c:01:df:
e0:0b:9a:89:c1:6c:18:21:d0:38:73:62:f6:de:3d:
e7:3d:46:a2:68:71:02:44:26:1e:f7:37:03:90:0f:
bd:b6:16:fb:f8:d9:98:68:55:eb:00:7f:43:7c:59:
b3:98:f6:1d:f8:dd:24:4b:5e:13:4e:02:ab:6c:32:
2f:56:8d:65:56:f8:07:7f:a9:c2:23:8d:96:80:28:
f8:82:0f:55:8f:35:f0:e8:93:d3:f5:47:e8:bf:f2:
60:e3:28:77:85:85:1d:52:17:81:cb:5e:74:c9:75:
d5:89:e6:6a:de:09:40:cb:5f:2b:95:de:4b:a4:52:
c2:c2:b0:0f:07:6c:03:b5:c0:44:8e:ee:a4:a8:a9:
8f:dd:b4:a5:3d:0c:05:07:be:c3:70:2f:fd:11:b9:
4c:7e:b9:9c:b1:e1:e9:c3:6e:35:ca:e4:c6:02:d2:
be:7d:04:3d:36:62:c2:42:a6:f4:af:33:c1:59:e3:
b2:92:21:65:c4:1c:69:23:c4:9c:21:e4:ff:44:61:
2e:22:e3:9b:5a:27:6d:51:21:b5:8b:3a:d8:61:ca:
91:2d:16:8c:0a:2a:1f:5f:54:16:4d:73:68:a3:d6:
d1:71:e1:3b:3b:f3:0c:6f:ba:f5:d5:9c:ca:6a:84:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CC:1E:D6:84:06:8E:4D:D5:9D:7E:36:3F:EE:14:B5:23:B4:CD:31
X509v3 Authority Key Identifier:
keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/jswe1oQGjk3VnX42P-4UtSO0zTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.234.0/23
Signature Algorithm: sha256WithRSAEncryption
19:f3:3c:3d:00:80:d8:3e:a5:ce:6e:40:dc:73:ed:0b:54:ba:
2a:7f:48:8f:82:43:a0:bc:c1:a6:85:dd:b1:44:b5:09:7f:e8:
7c:e7:09:3e:ba:38:b4:41:e2:b9:31:39:86:f4:a0:9b:ad:e9:
8b:b7:5f:89:97:cf:d8:a2:06:1e:48:0f:73:f7:b3:62:ee:5d:
f0:58:97:16:9e:df:c6:7a:5f:27:91:56:8c:2f:c1:cc:32:f5:
6d:36:5e:a8:39:a1:39:89:65:fb:6f:ca:15:3d:02:2f:6c:5d:
f2:89:cf:63:d5:48:a1:a4:14:71:a6:73:63:48:a9:21:d7:e8:
cb:ca:7b:d8:eb:67:6d:59:f2:8d:57:55:85:df:82:06:89:f7:
99:7e:de:8d:1a:ed:7c:4c:35:55:b3:27:e0:22:ef:23:d0:96:
90:c4:d8:29:ad:dc:c0:b2:ac:0c:bb:f4:76:d4:c1:64:af:08:
da:d5:b3:07:a1:47:78:4b:f3:a4:73:3b:ef:5e:8d:3e:1b:76:
41:38:ba:3f:70:fa:1d:c5:a5:d4:61:4c:00:df:f6:3d:74:44:
ea:5d:5f:8a:ec:9e:e7:29:33:7c:05:04:bb:19:2c:f6:a3:93:
82:0e:6b:9e:82:b2:21:7e:34:c6:cf:dc:4a:65:5d:07:66:37:
cd:48:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:10 2026 by rpki-client