Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/JdS9AIvTNFnWMLbj2uY-A0dltyE.roa
File: JdS9AIvTNFnWMLbj2uY-A0dltyE.roa (raw, json)
Hash identifier: W6dF2+oD6FDUHBAVqUbBoWQ3Q0emOs6UcEdSVQzVLHU=
Subject key identifier: 25:D4:BD:00:8B:D3:34:59:D6:30:B6:E3:DA:E6:3E:03:47:65:B7:21
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 01A1BB433E1136D1354AD006E45EA44C21CC
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/JdS9AIvTNFnWMLbj2uY-A0dltyE.roa
Signing time: Sun 08 Nov 2026 13:05:08 +0000
ROA not before: Sun 08 Nov 2026 13:05:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58224
IP address blocks: 37.156.12.0/22 maxlen: 22
77.238.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:43:3e:11:36:d1:35:4a:d0:06:e4:5e:a4:4c:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Nov 8 13:05:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25d4bd008bd33459d630b6e3dae63e034765b721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:f6:35:ad:1d:ce:63:71:69:8a:2f:b6:4e:
c2:e7:5c:b4:65:8a:8e:83:98:58:1f:47:56:71:69:
33:44:e0:d1:d3:94:ec:9f:0c:ea:d6:72:eb:01:4a:
8b:5a:d9:3d:34:49:51:fc:43:ec:56:2f:4c:0c:4e:
da:0c:e8:14:00:f7:15:f7:85:62:cd:90:88:b3:0d:
24:60:0f:1b:f8:bf:0b:a5:12:3e:b9:d5:b7:0d:b3:
bf:2b:52:b8:6b:cf:85:66:a8:b4:4d:e0:27:fa:3e:
1a:b0:6a:e9:5b:4e:52:c4:5a:2d:7b:f5:58:46:d4:
21:37:ed:7c:e1:89:0f:7c:3f:89:95:3c:8e:38:c2:
b4:39:91:15:62:d8:e5:68:6e:e7:e3:38:c9:62:c5:
b9:3e:43:3e:5d:5e:35:bb:2c:be:6e:c5:ec:f9:ae:
a5:23:ce:d8:01:b7:95:20:42:5d:d3:0f:76:4c:0c:
cf:18:fc:58:f2:f0:a4:44:ca:d7:c1:3a:0c:70:c6:
b5:34:f9:03:79:2a:8c:24:e6:bd:60:4b:e7:9e:d5:
21:de:3e:61:46:30:da:ff:be:15:8c:e2:2f:6a:ac:
2b:fc:fc:b3:57:f7:51:66:49:cd:5a:be:8a:a7:c1:
78:10:fd:0b:1c:e6:8b:a4:a5:a1:b2:fd:13:be:fc:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D4:BD:00:8B:D3:34:59:D6:30:B6:E3:DA:E6:3E:03:47:65:B7:21
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/JdS9AIvTNFnWMLbj2uY-A0dltyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.12.0/22
77.238.108.0/22
Signature Algorithm: sha256WithRSAEncryption
99:d1:8e:25:ec:f3:30:2f:14:67:12:b3:be:98:40:7f:1c:f8:
b5:f2:ce:3e:f9:f5:67:12:ec:82:22:10:3d:93:33:0e:e3:92:
dc:ae:0a:27:b1:6f:72:9e:0b:c5:57:46:e2:e7:f2:14:cb:6c:
8d:7a:7c:56:b8:da:f2:03:8f:c8:53:08:45:60:2d:6b:46:b4:
34:03:26:13:8d:c2:0d:98:70:d8:2e:1d:9f:30:1a:41:66:81:
c8:64:28:59:72:19:51:fb:df:c3:52:f0:d0:c3:50:1b:e1:b4:
cb:b0:48:17:ea:0a:26:7c:23:ef:db:e3:92:4f:31:ce:33:92:
c4:f0:8f:0d:5e:d3:23:72:ed:50:58:39:43:24:74:52:31:59:
0f:7e:97:be:e3:6c:aa:d1:8d:17:89:4b:2e:7d:43:52:5f:12:
bc:f3:90:04:c8:e5:e9:94:0d:da:25:02:44:95:e4:95:5f:bc:
4b:d5:7e:32:43:c7:2d:15:07:82:4b:a7:fc:3a:a2:4f:3b:06:
68:20:d0:e6:e5:33:f2:a9:ea:38:11:ba:2c:46:d0:3c:fc:ac:
9c:4a:ba:4c:cd:70:e3:bf:11:dd:51:32:1a:0e:e2:61:80:67:
86:c0:0c:f1:0e:77:8e:6b:f1:0d:dc:0b:fd:25:a9:ef:87:39:
ad:b1:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:16:15 2026 by rpki-client