Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/jLnRiuqaeMjm778rNoTsOOpbmqk.roa
File: jLnRiuqaeMjm778rNoTsOOpbmqk.roa (raw, json)
Hash identifier: O+LqSjIvdiGCJU85S8encdf0tP/8HNlkHBkVyyeQEYw=
Subject key identifier: 8C:B9:D1:8A:EA:9A:78:C8:E6:EF:BF:2B:36:84:EC:38:EA:5B:9A:A9
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019C9419889FBBA9957F85DA04692E2BE5DC
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/jLnRiuqaeMjm778rNoTsOOpbmqk.roa
Signing time: Wed 25 Feb 2026 09:20:27 +0000
ROA not before: Wed 25 Feb 2026 09:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204240
IP address blocks: 70.40.142.0/24 maxlen: 24
70.40.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:19:88:9f:bb:a9:95:7f:85:da:04:69:2e:2b:e5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Feb 25 09:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cb9d18aea9a78c8e6efbf2b3684ec38ea5b9aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:c8:de:d8:4d:61:c1:fb:c5:47:ce:60:ad:
4d:ec:c2:55:06:74:aa:09:42:86:e0:d2:10:81:1d:
03:89:1d:3e:ae:b2:0a:49:23:c5:3e:94:ba:b9:3e:
a8:0b:9a:f0:ec:6a:75:7d:b7:af:db:a0:29:49:04:
bd:4e:df:ba:7b:19:84:3b:92:e9:c9:81:5e:4b:e0:
91:9c:06:25:eb:88:ac:c2:51:d8:ac:fc:b7:a8:1e:
69:b2:73:f3:b7:e0:55:7e:f9:14:37:54:80:eb:18:
ec:e4:c7:12:83:ab:34:2b:49:7b:75:97:00:e1:a4:
11:7b:2f:07:c2:aa:1d:d2:9a:9f:d9:b4:0a:c3:6d:
44:14:2b:42:58:4c:cb:72:3e:cb:f0:4a:2f:96:1a:
87:1a:17:86:08:17:6b:ba:69:74:0b:b7:84:41:2e:
cb:c9:02:ae:48:5f:4e:bd:9f:97:6f:64:37:3e:3a:
d2:a3:3a:de:2e:99:c3:79:a2:61:4e:6f:23:9b:97:
4b:93:c8:4b:ac:54:99:d6:e6:51:c4:b1:77:f4:dc:
3b:b8:f7:77:5d:63:75:54:ba:a2:62:c5:30:68:15:
c0:6c:6d:33:6c:41:05:e9:15:ce:23:d5:f0:ab:f5:
2c:68:ad:f9:08:aa:e9:94:29:3a:82:4b:a0:4d:8c:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B9:D1:8A:EA:9A:78:C8:E6:EF:BF:2B:36:84:EC:38:EA:5B:9A:A9
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/jLnRiuqaeMjm778rNoTsOOpbmqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.40.142.0/23
Signature Algorithm: sha256WithRSAEncryption
86:12:86:a6:53:0f:4d:db:22:1f:4d:49:c6:74:a1:27:be:11:
85:fd:22:82:01:e6:4a:62:78:0e:9a:a2:db:8a:c6:1f:6d:7a:
3b:49:2f:10:e5:25:c2:78:bc:e7:ea:b6:84:67:b6:a8:78:96:
29:db:41:20:ca:03:20:24:24:3f:a9:31:c3:0f:d8:b3:c5:93:
ef:10:48:15:17:25:15:e3:ff:c2:50:80:10:8b:e2:a2:34:cb:
67:9a:af:92:e8:12:98:16:af:1d:d5:88:7b:bd:2f:ad:38:d0:
3b:3b:d4:22:6d:93:b9:57:77:2a:f4:8b:b2:a1:f8:66:8a:91:
35:dd:e0:6a:71:75:3b:a5:13:a4:ac:69:5d:56:15:a4:da:59:
4f:2e:ff:fd:04:d2:44:a5:e8:f2:80:95:15:38:7f:f4:71:cf:
ef:be:fd:4d:02:9c:e7:0e:b8:a3:62:48:c2:9c:6b:c4:f0:38:
e3:d1:9e:6b:43:56:df:4c:ae:bf:bc:72:08:8e:94:82:21:78:
14:87:d8:17:70:a2:f1:49:1d:17:a0:96:bd:30:0f:2b:18:ec:
a9:08:6f:9b:6d:bf:1b:ec:7d:ad:fd:9a:22:3d:10:d8:80:2c:
c3:8d:7f:c3:9d:77:0e:af:9e:93:10:c0:2f:89:e0:bf:92:59:
43:88:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:04:41 2026 by rpki-client