Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/JG0kWB2lcANSZ4icVMdox6PnmQU.roa
File: JG0kWB2lcANSZ4icVMdox6PnmQU.roa (raw, json)
Hash identifier: S3i14g9db5TMp6vh+BHfXGO+xfDTvXvHBvOwS1Pp8sE=
Subject key identifier: 24:6D:24:58:1D:A5:70:03:52:67:88:9C:54:C7:68:C7:A3:E7:99:05
Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial: 019E9D0C4F1B60CD51B41D2A046D0C33C4D6
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/JG0kWB2lcANSZ4icVMdox6PnmQU.roa
Signing time: Sat 06 Jun 2026 13:08:10 +0000
ROA not before: Sat 06 Jun 2026 13:08:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 185.19.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:0c:4f:1b:60:cd:51:b4:1d:2a:04:6d:0c:33:c4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Validity
Not Before: Jun 6 13:08:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=246d24581da570035267889c54c768c7a3e79905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2d:f3:20:7c:dc:9b:9e:d7:df:9c:0b:7e:9a:
01:1a:3c:aa:8d:11:40:1d:2b:e0:cf:bd:18:18:06:
f8:3e:7d:a2:eb:ad:54:0a:05:b3:43:47:65:fc:58:
69:ae:4f:4f:52:7d:b2:92:68:44:ad:22:66:7a:a8:
02:c8:29:ec:9b:ba:c9:f4:53:88:2a:d5:83:06:04:
4f:2a:88:ac:e2:5e:04:86:01:60:57:80:8a:eb:c8:
b6:a1:be:20:2d:10:e5:87:2c:4e:e5:48:91:4f:b5:
02:6f:54:f5:14:76:3c:06:46:98:23:03:83:31:ed:
6f:91:db:37:7c:05:39:d9:72:11:50:02:c7:ab:4a:
1e:f8:1d:d4:f4:31:79:f7:e2:de:79:7b:4f:85:d5:
df:d5:47:96:5a:4d:c0:5a:c1:9d:32:ca:a6:ae:de:
b1:26:4d:9a:53:7f:93:3b:b7:13:ef:16:bb:3e:b6:
a4:b3:a9:f1:bd:98:b2:3b:9e:09:93:cb:3f:96:ed:
ed:d1:80:ee:c0:a3:d5:89:a8:45:66:b7:c9:19:1f:
5d:61:39:45:f4:45:fe:24:28:ae:3f:1a:10:dc:38:
90:c3:90:45:92:19:71:6e:df:64:40:7c:31:87:9f:
88:fd:0c:1b:4b:c6:9e:4d:1d:e4:83:8f:1d:50:87:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6D:24:58:1D:A5:70:03:52:67:88:9C:54:C7:68:C7:A3:E7:99:05
X509v3 Authority Key Identifier:
keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/JG0kWB2lcANSZ4icVMdox6PnmQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.33.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d2:88:c6:43:c0:25:e0:ce:84:0b:b7:57:7d:ab:c2:de:63:
b6:f4:6c:9d:63:07:00:4b:41:dc:2a:55:92:78:23:95:95:d3:
9e:35:2c:25:d0:4e:f2:16:88:2d:f2:22:44:61:de:84:30:95:
0b:3d:e0:bc:d5:e9:89:9d:e2:a3:77:e8:3b:85:31:85:ac:86:
dd:9e:39:97:2d:8f:5b:07:03:79:cb:95:54:74:81:f6:4a:d4:
53:2b:95:8e:69:4e:71:fc:4f:ce:4e:58:47:d9:ad:a0:9b:3a:
2a:51:6a:f6:4e:c0:9b:f7:23:59:45:8b:ed:10:f2:03:3c:0a:
35:00:b4:88:57:26:97:3a:26:19:fd:71:6b:44:1b:64:0a:e2:
b3:d5:6e:61:80:41:99:fe:76:ec:29:3f:f7:95:8f:83:60:6d:
bb:e5:c6:e1:c1:96:04:c9:88:21:53:d7:88:91:53:d1:15:2d:
de:3b:38:d8:1b:3c:7f:73:41:71:3a:d2:f6:a6:49:bc:06:2d:
16:9f:9a:49:a0:72:eb:a6:c8:61:eb:1a:aa:69:0a:a5:39:ee:
d1:5a:df:35:35:12:b1:21:92:1e:0d:1d:20:7b:86:7f:ef:28:
b2:5b:5d:e9:9b:ce:d1:82:1f:7f:92:f3:d6:e6:b9:1c:8c:c5:
cd:8f:3d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:33 2026 by rpki-client