Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/jLQvt7xt7c45_vSreDahi9DVpRY.roa
File: jLQvt7xt7c45_vSreDahi9DVpRY.roa (raw, json)
Hash identifier: ehpV8kVezAA0EZ6tWKcBeH2QxQBoWNRqgByIZ4i/lv8=
Subject key identifier: 8C:B4:2F:B7:BC:6D:ED:CE:39:FE:F4:AB:78:36:A1:8B:D0:D5:A5:16
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 019D68837CEF220FAF531A82BD8D8A1DB388
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/jLQvt7xt7c45_vSreDahi9DVpRY.roa
Signing time: Tue 07 Apr 2026 15:15:40 +0000
ROA not before: Tue 07 Apr 2026 15:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208570
IP address blocks: 185.239.177.0/24 maxlen: 24
185.239.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:83:7c:ef:22:0f:af:53:1a:82:bd:8d:8a:1d:b3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Apr 7 15:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cb42fb7bc6dedce39fef4ab7836a18bd0d5a516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:8c:01:89:76:83:74:4a:f3:e0:84:0a:02:
a7:a4:16:a7:15:34:aa:e3:36:20:9c:6e:a2:06:0d:
78:c0:26:c3:1b:44:4c:f5:5e:78:17:2a:e9:30:6f:
5e:44:92:51:76:d9:72:62:33:1e:c2:89:d4:9d:cd:
cb:6d:62:2e:11:16:33:79:69:53:2c:97:be:1a:00:
30:1f:17:c3:d2:ef:82:ce:a8:9b:d4:8c:59:cf:87:
62:85:7f:52:d8:93:63:e7:3a:f8:ec:41:a3:7f:38:
bd:e3:a3:31:99:5a:9a:49:cb:c5:77:30:9d:24:ef:
4d:e2:51:54:c8:5e:e0:12:04:17:06:27:18:e9:1a:
73:de:c7:e7:c3:3e:e6:0f:6b:1e:cf:89:a1:b3:1b:
9d:3b:83:fb:ea:21:d4:34:29:6c:9b:f0:73:69:84:
a9:b6:a3:66:d6:55:0d:88:99:67:27:d3:fd:29:12:
e8:d7:8d:8e:a7:23:62:21:86:06:3b:03:57:f4:28:
19:ea:83:6b:aa:a2:71:11:ed:1d:e3:1e:ad:6a:13:
4c:57:47:cc:d1:22:7c:e9:7e:6e:07:9f:ab:dd:82:
8d:7c:b2:9f:0a:73:2d:c8:fd:3a:f0:c6:e9:2d:19:
a9:23:ba:2b:d3:59:b9:87:b1:78:f4:a0:76:a6:3a:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B4:2F:B7:BC:6D:ED:CE:39:FE:F4:AB:78:36:A1:8B:D0:D5:A5:16
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/jLQvt7xt7c45_vSreDahi9DVpRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.177.0-185.239.178.255
Signature Algorithm: sha256WithRSAEncryption
59:3a:8c:b5:00:aa:e2:03:1c:f8:13:95:ef:a6:6e:48:30:7d:
c6:55:64:14:42:f1:42:c0:21:11:f6:87:eb:39:7f:cf:4b:ff:
b1:1b:c5:b6:c8:4f:b8:24:ff:fb:2e:89:45:30:4d:25:49:cf:
96:2e:01:ae:79:c7:8f:ea:8e:c5:97:3d:73:4e:69:26:07:ea:
68:e3:77:9a:f5:a8:9f:12:09:97:c3:37:5e:26:93:67:6f:9f:
32:f7:fd:8b:1b:e7:50:99:66:2e:ef:60:e7:3c:5d:1e:47:24:
3e:b6:14:d9:50:b8:23:a4:2e:2a:d8:b2:38:4d:53:e8:0c:b3:
43:8e:c8:40:ff:13:49:ac:c4:e7:38:25:44:0b:4a:3c:17:ec:
cf:c3:ad:43:e8:94:38:a2:e6:09:89:e6:1d:2c:74:8a:ea:b6:
44:71:d5:77:1c:6f:df:6c:cc:2a:ea:e1:2e:b4:93:f9:82:89:
7b:63:83:79:97:ef:cc:a0:82:93:ed:7a:c8:7a:c1:09:17:b2:
df:fa:60:08:0f:51:bd:6e:3f:a1:a5:37:96:59:7c:00:15:36:
ad:a9:ff:6f:c0:3b:0a:33:b8:c1:2b:9d:75:f3:ec:58:5d:19:
07:ea:5b:9d:a9:6a:b5:11:2c:38:3e:80:6e:fe:36:a1:c7:83:
c7:d3:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:30 2026 by rpki-client