Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/joJwAldtDGbEkTvGD-Bv3UaplNo.roa
File: joJwAldtDGbEkTvGD-Bv3UaplNo.roa (raw, json)
Hash identifier: foF+qjBiI2yoF5TbudCiWDOMHzC63CztepRDyZr1v10=
Subject key identifier: 8E:82:70:02:57:6D:0C:66:C4:91:3B:C6:0F:E0:6F:DD:46:A9:94:DA
Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Certificate serial: 019D4449C189BCC9AA5D6B9C0786E9ABE01B
Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/joJwAldtDGbEkTvGD-Bv3UaplNo.roa
Signing time: Tue 31 Mar 2026 14:26:17 +0000
ROA not before: Tue 31 Mar 2026 14:26:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8434
IP address blocks: 193.178.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:49:c1:89:bc:c9:aa:5d:6b:9c:07:86:e9:ab:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c
Validity
Not Before: Mar 31 14:26:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e827002576d0c66c4913bc60fe06fdd46a994da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:2f:2b:42:8e:62:53:21:0a:ff:aa:11:36:
5e:dd:1a:14:29:ce:36:e6:4f:a7:e1:d9:8a:8d:47:
3c:23:70:9d:79:e3:de:90:09:b4:c6:54:7f:98:e7:
1e:ab:4a:94:78:ec:c2:81:9b:6e:91:21:23:14:67:
fc:50:f6:9c:e6:89:86:79:a9:db:bc:8b:d9:b2:e4:
4a:17:4f:8c:15:a3:f0:10:0a:ae:02:db:25:f2:4e:
a3:b3:d9:0e:64:50:cc:41:67:c9:ca:c5:f1:f6:22:
e7:fa:d6:c6:68:09:7f:e7:e9:c3:ef:c2:fc:9a:63:
36:10:4d:3d:8a:06:10:9e:2c:79:df:9e:54:54:02:
eb:7a:34:f2:99:a6:7c:02:72:60:91:5c:e0:bd:bd:
4b:e4:d7:05:28:29:60:39:ec:f2:06:67:5c:c9:c4:
84:42:1b:d5:49:9e:3d:67:60:66:b2:95:ae:5e:3f:
5a:cf:8d:ad:51:57:d8:12:9d:4f:7b:fd:87:a7:72:
3c:81:0a:82:2d:7d:1f:07:0b:69:45:f7:e7:8e:44:
84:ab:5b:98:56:a0:5e:81:03:6b:2b:db:66:73:df:
d2:7d:1d:54:ae:ec:93:fa:c1:95:ca:a4:a0:29:87:
d6:52:6a:09:59:0a:8f:c9:5a:ca:d0:e5:e2:2a:38:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:70:02:57:6D:0C:66:C4:91:3B:C6:0F:E0:6F:DD:46:A9:94:DA
X509v3 Authority Key Identifier:
keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/joJwAldtDGbEkTvGD-Bv3UaplNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.130.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:37:0a:9e:7b:b5:15:e5:fa:cd:5f:d5:90:26:0f:f9:6b:20:
09:f3:b1:97:4d:73:6c:55:fc:5b:29:a5:14:c2:8d:bd:3d:1f:
fe:5e:6e:19:89:03:c4:84:bf:bc:b7:9d:98:4b:c8:31:f0:e1:
23:74:fa:5a:9f:8a:05:d0:19:1d:dc:0b:3f:9d:46:a4:e1:54:
b7:47:d5:2a:71:c8:aa:a6:86:0f:6c:ef:6d:92:b0:02:e7:fb:
80:4e:d2:62:18:bf:c0:ca:3c:fe:a6:c2:92:6e:dd:fe:ec:d2:
7c:b4:60:b2:3a:8a:ae:4e:3f:dc:9b:f2:d8:bd:d3:19:da:10:
75:26:4d:68:a3:6c:fb:26:f6:90:51:3a:5c:6c:c8:50:e3:70:
59:92:e8:79:c3:38:ed:27:2b:06:96:24:14:70:7c:af:f1:90:
a0:4d:c3:6c:3f:fd:5e:57:31:f3:16:19:43:9f:0b:c3:ad:04:
51:df:63:ae:7d:62:d0:c2:f4:1c:82:df:2b:4d:29:e0:10:b1:
61:e8:de:cb:da:c2:71:f9:4b:8b:4c:30:19:69:8d:fa:d7:f7:
1a:79:55:34:37:a5:d6:d4:f1:51:cc:c1:d0:66:b6:d0:56:ba:
2b:a6:c3:a4:60:3c:37:84:5d:6d:b8:50:22:d2:32:29:2c:df:
e3:61:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:05 2026 by rpki-client