Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa
File: JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa (raw, json)
Hash identifier: DeQSEcmHwOj2WKtSQug6fbXNxxnwRAwk/7WfO9A8/pc=
Subject key identifier: 25:63:AD:EA:FE:58:BF:BB:B2:24:18:6F:3A:14:36:C9:7D:AB:80:40
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019E501CF9B6D9837BFBDEDC7C1B6C4C88E9
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa
Signing time: Fri 22 May 2026 14:35:36 +0000
ROA not before: Fri 22 May 2026 14:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21221
IP address blocks: 45.14.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:1c:f9:b6:d9:83:7b:fb:de:dc:7c:1b:6c:4c:88:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: May 22 14:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2563adeafe58bfbbb224186f3a1436c97dab8040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:dc:25:aa:e5:f4:e3:f2:80:1f:c5:4c:05:
cb:f8:2c:c7:da:0f:74:12:57:ea:fa:fd:ec:54:a7:
f6:33:08:52:5f:d9:67:92:c8:41:38:b7:c7:91:82:
0a:9a:31:65:ee:64:72:34:b7:5e:84:5c:b7:e2:c6:
0d:11:ac:e1:98:90:04:ff:88:73:15:46:d2:fe:3f:
92:8c:b4:94:83:03:75:ec:6d:3d:37:fd:7e:bd:1e:
01:c4:c8:85:8b:83:72:cc:67:51:10:27:c0:72:8b:
c8:b6:19:a7:f4:5d:37:44:55:30:5d:47:2f:b0:f0:
6c:f8:9a:15:9f:bc:79:eb:a9:77:ff:b7:db:bd:2d:
be:3e:33:20:f6:ff:62:49:5e:f5:32:25:99:66:bc:
a9:96:47:ff:69:9e:cc:a4:27:f6:e3:df:86:07:26:
ba:2b:88:87:41:82:ba:dc:0d:cf:cb:93:8f:bf:73:
d6:e7:9c:60:37:98:a5:c2:64:57:31:97:83:89:c9:
33:ce:f4:95:42:dc:c4:1a:15:77:1e:59:47:bb:34:
12:bd:91:c8:6b:bc:3e:9e:8c:95:b0:87:c4:16:01:
3c:23:48:4a:8a:fd:b5:d2:1e:bd:f7:eb:5f:27:07:
60:ce:7c:d6:0b:62:07:59:6c:af:5e:35:2e:68:27:
37:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:63:AD:EA:FE:58:BF:BB:B2:24:18:6F:3A:14:36:C9:7D:AB:80:40
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/JWOt6v5Yv7uyJBhvOhQ2yX2rgEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.0.0/22
Signature Algorithm: sha256WithRSAEncryption
02:51:62:24:bc:3a:7f:69:ac:c6:18:c8:65:20:9c:91:0f:0f:
5b:6f:2f:11:20:36:45:02:85:bb:3b:37:7d:d8:ca:6d:7b:7e:
7f:55:dc:ea:ab:1d:e3:50:4b:a8:d9:cc:6f:fe:f4:53:5d:27:
52:68:e9:61:e1:78:ac:41:65:b8:ba:72:73:5d:e8:82:1d:dd:
be:01:a1:6b:25:ac:48:28:6e:c9:f5:71:ef:ae:7a:f5:8e:d8:
be:3f:ae:32:ed:ae:cb:59:1f:54:a3:e9:62:3c:c8:29:83:9e:
bc:70:9b:0f:28:f9:0e:81:9b:5b:01:ae:9e:23:dd:5a:df:5c:
b8:a2:3b:cc:5a:8d:c4:43:56:05:b3:cf:e8:01:97:29:50:bd:
ce:e3:4c:9f:a6:1f:95:5a:11:c4:dd:46:c5:24:4a:ac:ff:16:
c9:ca:dd:a6:1f:25:c8:c3:7e:0b:f6:62:50:0a:b4:c6:b6:25:
b5:d9:8c:c7:45:f6:ba:2f:22:10:0d:1a:c2:65:3f:60:9d:eb:
78:1e:e1:ea:bf:dd:0a:4f:6a:1b:c7:30:e0:b2:bc:48:f6:a1:
44:75:fc:6b:35:2d:96:70:36:2c:7f:7a:7f:a2:c9:8c:72:0c:
16:58:f3:2f:25:77:4a:e9:9c:cc:e9:1f:87:52:9d:00:e6:6f:
bc:6b:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:14:23 2026 by rpki-client