Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/jbhpweVxvqHx9iUgFePmmEKTB0o.roa
File: jbhpweVxvqHx9iUgFePmmEKTB0o.roa (raw, json)
Hash identifier: qnKLr3s/P3uzBC1O7P51ocSp/Gdd2Nk4CeL6u6vfdYg=
Subject key identifier: 8D:B8:69:C1:E5:71:BE:A1:F1:F6:25:20:15:E3:E6:98:42:93:07:4A
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019C65EB1D32BF337F92CE5609EE6510958B
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/jbhpweVxvqHx9iUgFePmmEKTB0o.roa
Signing time: Mon 16 Feb 2026 10:07:12 +0000
ROA not before: Mon 16 Feb 2026 10:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 46.34.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:eb:1d:32:bf:33:7f:92:ce:56:09:ee:65:10:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Feb 16 10:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db869c1e571bea1f1f6252015e3e6984293074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:2d:e2:20:d2:c9:5f:64:fe:80:5a:02:63:
5c:23:31:a3:47:8b:5c:e0:5b:95:11:63:85:86:d9:
3d:24:26:32:7f:f5:1e:58:7a:74:22:7e:43:f2:e9:
ed:ca:b3:1f:13:c5:50:ff:9c:a9:09:76:b9:72:c9:
84:7f:9e:df:f3:61:3c:a9:ca:e0:6b:3a:d8:85:92:
66:ba:1f:2f:1d:47:46:65:d0:77:6b:2e:73:93:a1:
68:5b:a8:98:f5:aa:ab:57:65:e0:0f:70:83:b2:18:
32:90:a0:89:c5:6a:83:82:4f:90:7c:24:eb:22:67:
1f:f6:58:9e:5b:0f:d3:77:c9:f2:0a:22:3e:06:1c:
50:9d:9e:fe:ee:07:2b:b2:2b:c2:19:29:0d:fa:ea:
d4:80:17:e0:a6:e0:c3:f5:af:b1:e4:4e:d0:31:85:
c0:2e:b2:62:d5:8c:b5:92:03:65:79:55:57:17:7c:
e4:11:51:01:9a:ca:0b:05:1d:29:09:1e:8b:d4:80:
8e:1f:56:fe:d0:21:9e:cf:80:72:e2:e0:ff:e4:2a:
47:e4:17:35:77:3a:f6:2e:78:d7:ec:2a:20:51:1a:
64:55:f3:82:93:17:a5:4a:d7:88:71:79:98:8d:be:
b0:0e:62:d1:97:6a:8c:60:a7:00:44:d2:8c:a2:a7:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B8:69:C1:E5:71:BE:A1:F1:F6:25:20:15:E3:E6:98:42:93:07:4A
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/jbhpweVxvqHx9iUgFePmmEKTB0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:02:1d:af:8c:24:23:54:05:0b:2d:bc:e6:4d:ca:e0:4b:ee:
cd:16:a1:a0:c9:31:bd:e8:9a:8d:e0:ba:fd:74:00:9e:be:8f:
96:c1:20:79:e7:fb:b5:27:bf:e8:40:81:8b:97:34:0f:b2:a6:
d3:18:26:cd:f4:fe:85:7b:8f:86:ac:c0:82:5a:0b:ed:54:12:
9f:41:4a:f8:ff:dd:4e:04:80:b0:0f:93:8a:b1:44:ab:0e:a0:
74:b7:41:f8:fc:42:85:c1:b7:1f:91:67:9b:10:49:a7:bf:8a:
2f:29:79:90:de:47:ea:6d:22:c8:0f:d2:d6:7b:fd:03:92:fc:
4f:ad:09:7a:19:e6:0c:47:be:40:65:f7:9c:f5:8a:4a:49:e9:
55:49:8f:b3:3e:e3:d6:68:cb:63:eb:fd:96:ca:09:22:b3:c9:
be:c7:f5:fe:31:3d:6c:1b:ba:56:24:5c:c6:57:60:02:4c:10:
ca:b6:86:d2:d6:13:f7:98:b2:77:d7:b0:4a:df:b9:d9:db:c1:
d4:f4:e5:15:b9:68:5f:21:ac:e9:ff:bb:cc:fd:02:eb:2b:9e:
83:57:c6:5a:59:ff:1b:54:00:1a:be:c2:d2:71:63:ac:3f:40:
d1:33:98:34:ee:bd:08:03:79:02:ba:bb:99:87:b8:fe:2b:6b:
62:c6:c0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:57 2026 by rpki-client