Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/je_JALPH_zpmULQ2WxOAawnhcoI.roa
File: je_JALPH_zpmULQ2WxOAawnhcoI.roa (raw, json)
Hash identifier: BnU6mzCYphrVfmJpB0mkaTWO5wMwxtZMp+QLb/Tak98=
Subject key identifier: 8D:EF:C9:00:B3:C7:FF:3A:66:50:B4:36:5B:13:80:6B:09:E1:72:82
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A145E4F2338548A0E3C6B7163AB1F6A88A
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/je_JALPH_zpmULQ2WxOAawnhcoI.roa
Signing time: Fri 16 Oct 2026 18:06:34 +0000
ROA not before: Fri 16 Oct 2026 18:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 130.78.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:e4:f2:33:85:48:a0:e3:c6:b7:16:3a:b1:f6:a8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Oct 16 18:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8defc900b3c7ff3a6650b4365b13806b09e17282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a3:0b:bf:cb:83:b8:b9:55:53:35:97:a4:30:
c9:bf:74:d9:fd:46:a8:c0:b3:52:90:4b:4c:4d:9c:
36:9f:2a:ba:42:ae:a4:85:40:d0:d6:ad:7d:f6:16:
53:4d:3f:4c:91:fb:88:d7:ca:b0:5e:64:c7:09:dc:
f1:00:fd:5f:60:89:bc:d1:c2:6a:e3:44:52:10:8f:
bc:17:1b:f9:a2:ac:27:51:1c:44:e6:c3:c4:8c:50:
d5:8c:ee:9b:ec:e8:4b:96:0d:54:71:82:41:b0:89:
ad:58:0d:3a:26:dd:16:b8:73:61:99:ba:56:c5:b8:
99:c0:da:92:71:8d:e9:ca:67:2d:a1:5a:af:c7:05:
f2:e7:92:9c:cd:ae:60:dc:89:15:98:f6:77:85:03:
80:fc:0c:a8:f7:3d:4c:1d:5e:00:33:8f:4e:e3:4f:
21:f1:cb:41:2f:92:75:72:ab:d4:e5:12:91:6b:b0:
63:7b:22:ba:32:ef:7b:2a:7c:30:6e:c0:c1:2b:e5:
4b:7b:f3:cb:60:43:2f:eb:fb:45:98:67:9e:19:7a:
08:61:16:b2:59:f9:ed:83:45:13:f7:77:cf:e5:49:
83:6b:7b:c5:82:f2:16:3e:31:bf:d2:20:ba:29:53:
99:04:be:66:a5:a5:25:d4:6d:04:c0:2d:82:d4:06:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EF:C9:00:B3:C7:FF:3A:66:50:B4:36:5B:13:80:6B:09:E1:72:82
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/je_JALPH_zpmULQ2WxOAawnhcoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.189.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b3:d0:7b:98:ce:e6:9b:3a:25:31:09:ed:d0:ce:54:b5:34:
2b:bd:ff:20:83:2f:0c:fc:6d:e7:b3:5e:07:10:3e:c9:08:a3:
1a:bc:e1:14:13:30:58:75:4f:14:cd:f5:2d:8d:bd:60:11:2a:
76:d8:b9:5b:ed:5b:46:c6:87:fc:87:22:9c:1a:5e:00:1c:6f:
ba:80:e9:46:b5:3e:2f:c8:10:47:58:f0:43:23:81:b8:94:ab:
f3:fb:de:a9:49:c9:67:cd:65:8a:dd:eb:3e:e1:b1:55:f5:b9:
8f:c8:e4:2c:1c:86:99:80:59:99:25:d8:94:93:e7:0a:cc:c7:
65:a9:c1:e8:55:fc:01:49:b2:c0:04:88:4b:1d:45:83:17:dc:
41:df:72:43:aa:de:f1:16:d0:46:7b:88:44:be:e8:10:86:7d:
07:ba:06:9d:87:6f:5e:d4:4c:e3:0c:c5:5b:e2:b0:3c:47:ca:
8a:3c:cb:8b:39:ee:0f:8d:84:4c:8a:8c:8a:8d:2b:93:72:48:
40:76:38:03:7f:fc:55:36:8f:3e:ef:43:61:bd:24:b6:6b:a1:
82:00:c7:e1:08:9f:b8:a9:91:26:77:5e:67:44:b6:f8:62:f0:
0b:1e:38:7f:15:f7:aa:d8:36:31:20:32:f5:60:9c:b7:62:dc:
a2:48:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:56:08 2026 by rpki-client