Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/JDbJ4jj6LMlC-0bdOFoUGyLzn3o.roa
File: JDbJ4jj6LMlC-0bdOFoUGyLzn3o.roa (raw, json)
Hash identifier: YHGXUN1Q0a2Vx/s6owli3h6abJzr4EpARqQpGM7kkOI=
Subject key identifier: 24:36:C9:E2:38:FA:2C:C9:42:FB:46:DD:38:5A:14:1B:22:F3:9F:7A
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 019B7EA72E2FF14F0EDFC95917D6F1FB5A17
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/JDbJ4jj6LMlC-0bdOFoUGyLzn3o.roa
Signing time: Fri 02 Jan 2026 12:20:44 +0000
ROA not before: Fri 02 Jan 2026 12:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200354
IP address blocks: 194.107.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:2e:2f:f1:4f:0e:df:c9:59:17:d6:f1:fb:5a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Jan 2 12:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2436c9e238fa2cc942fb46dd385a141b22f39f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:8b:a6:a9:21:b6:ab:48:b5:22:71:d0:90:
f7:d6:da:2b:59:26:4d:a6:0b:ea:0e:42:a1:5b:5a:
7a:de:ea:f1:cf:83:04:05:06:14:f1:f0:3e:a9:3d:
b3:fa:80:c8:f6:14:b6:09:6b:43:cb:46:be:4a:e9:
bf:fa:5c:ee:7c:94:5d:ac:ba:ef:a8:fb:b4:4b:50:
9b:b6:d2:02:ff:31:bf:d8:89:bf:4a:1c:95:4f:ae:
e0:05:60:67:63:f8:25:15:34:53:1e:57:57:f4:42:
a6:5a:4e:61:22:d2:34:c5:65:08:e3:e7:c4:9c:bb:
cc:d6:bc:30:15:19:7a:7e:ba:72:67:1b:ee:19:14:
94:d5:25:a7:0a:60:0e:2d:11:d6:d5:5f:6e:ed:0d:
04:3f:a7:4e:5f:5b:7b:ee:09:94:8c:9c:e4:97:0a:
65:5c:b1:a9:fb:0c:2f:dd:57:a7:2e:00:3d:33:f8:
58:fe:cd:8c:39:d4:4d:55:7f:65:72:46:90:79:8b:
c7:7f:7f:43:68:ae:b4:93:a4:a1:fb:d8:46:a9:cb:
f5:1c:f9:83:54:dd:4b:79:1e:ba:0d:2a:de:13:cc:
3a:05:f9:22:e6:28:d7:d7:ff:0d:a9:05:e8:40:5c:
f3:0a:86:41:41:8c:e0:45:ee:6a:37:0b:a7:83:24:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:36:C9:E2:38:FA:2C:C9:42:FB:46:DD:38:5A:14:1B:22:F3:9F:7A
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/JDbJ4jj6LMlC-0bdOFoUGyLzn3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:90:ba:c8:e4:09:d8:d4:c6:ae:83:a3:cd:df:b6:0e:19:1f:
5a:7e:92:49:c5:a4:c1:b4:33:7d:91:72:74:78:b9:98:2a:9f:
a6:61:dd:10:f2:68:5b:41:d5:2c:cf:51:37:e3:e4:b8:8c:c3:
40:a9:ae:85:87:45:44:14:d1:ba:e5:d0:1a:fe:c2:14:65:cd:
3b:7a:31:eb:dd:c9:49:34:a8:2d:fa:4a:89:8f:b7:f7:89:56:
8e:e2:2a:98:38:ab:3b:91:67:4f:59:7f:53:ac:4c:8b:94:ce:
20:da:ed:86:01:f7:ef:a7:79:e6:98:27:a0:11:7f:19:ff:7a:
7e:d2:0a:0a:16:db:04:60:65:aa:eb:31:76:39:fd:b0:d4:40:
17:fc:5c:98:2f:10:25:82:22:bd:19:45:fc:08:a1:d9:29:1d:
43:73:03:b2:fa:9c:4c:eb:93:5d:5c:44:46:70:15:6e:9e:7a:
f7:f1:6f:06:62:7b:37:18:2a:32:ba:4a:26:80:d0:85:9c:de:
4f:ff:5d:07:6e:f7:03:d7:df:54:21:d1:09:05:3b:60:51:f7:
4b:90:79:22:fd:d8:05:00:a6:52:2b:8a:3a:11:db:9f:18:d6:
b6:25:b3:7e:f2:ad:f6:82:15:eb:33:1c:50:b1:b1:42:5d:41:
e5:da:12:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:48:53 2026 by rpki-client