Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/JXWlfKCYu2b-fOcNxrDAmkwMmnE.roa
File: JXWlfKCYu2b-fOcNxrDAmkwMmnE.roa (raw, json)
Hash identifier: m+0hLdPXAXcYzlKMgRx6reVlce8rXt+HZqACRc7nlLA=
Subject key identifier: 25:75:A5:7C:A0:98:BB:66:FE:7C:E7:0D:C6:B0:C0:9A:4C:0C:9A:71
Certificate issuer: /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial: 019EAAD2F1561DDD4FAEA0DF573914CDC55D
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/JXWlfKCYu2b-fOcNxrDAmkwMmnE.roa
Signing time: Tue 09 Jun 2026 05:20:11 +0000
ROA not before: Tue 09 Jun 2026 05:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61438
IP address blocks: 45.84.144.0/22 maxlen: 22
146.19.235.0/24 maxlen: 24
194.93.76.0/23 maxlen: 24
194.93.76.0/24 maxlen: 24
194.93.77.0/24 maxlen: 24
2a04:d200::/29 maxlen: 29
2a04:d200::/32 maxlen: 32
2a04:d201::/32 maxlen: 32
2a04:d207::/32 maxlen: 32
2a04:d207:a00::/40 maxlen: 40
2a04:d207:b00::/40 maxlen: 40
2a04:d207:c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:d2:f1:56:1d:dd:4f:ae:a0:df:57:39:14:cd:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Validity
Not Before: Jun 9 05:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2575a57ca098bb66fe7ce70dc6b0c09a4c0c9a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:da:8d:0e:3b:ef:3b:5e:8e:5d:27:5f:e4:
30:97:70:cc:43:67:d9:20:83:3d:8d:80:d7:00:c1:
73:07:ba:26:73:a1:e8:40:de:cf:2c:77:c6:a1:93:
a1:92:08:0e:2b:8c:02:ab:df:e8:3d:e4:08:14:3d:
e6:91:96:79:63:58:31:3d:cf:e5:52:ef:9d:5a:8d:
1a:2f:59:41:8c:3a:5d:74:c5:d3:2f:2c:20:ef:81:
c8:c2:12:78:d3:4a:ac:c7:21:5c:7f:3c:45:18:b1:
6d:5b:44:db:d2:93:80:cd:5d:fc:d3:2a:20:fd:5d:
e7:08:a7:56:24:36:7a:01:de:19:bf:bc:8d:67:ac:
04:26:04:fa:d2:df:2f:6c:7a:13:46:e4:00:d3:9a:
75:b5:63:c7:24:09:fc:c0:0e:3a:c5:a6:1a:28:a2:
f4:69:b3:54:66:e9:73:45:c7:b5:8d:30:25:28:ba:
20:c6:c4:30:4e:e7:de:90:49:3c:c5:2a:74:c5:9b:
89:bc:4c:ec:d3:f7:fa:8c:59:76:51:82:0c:75:cb:
b3:af:26:3c:de:9a:2e:d9:e1:a8:5f:f1:1c:77:b0:
38:1a:3f:b3:9f:c7:4e:fc:f4:62:b5:e5:74:42:62:
19:9e:dc:cf:46:10:af:a4:89:bd:89:f0:de:d8:96:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:75:A5:7C:A0:98:BB:66:FE:7C:E7:0D:C6:B0:C0:9A:4C:0C:9A:71
X509v3 Authority Key Identifier:
keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/JXWlfKCYu2b-fOcNxrDAmkwMmnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.144.0/22
146.19.235.0/24
194.93.76.0/23
IPv6:
2a04:d200::/29
Signature Algorithm: sha256WithRSAEncryption
8d:a0:01:d4:4a:be:49:98:c2:16:94:17:f1:a8:fc:a9:49:cf:
d6:0e:b7:77:1b:b0:68:4e:51:ea:88:fa:21:d3:47:e9:95:d5:
63:cf:5d:da:86:ee:e6:72:8a:d2:61:0c:70:7d:2c:44:7a:a6:
40:06:f7:42:fd:e8:6f:c2:fb:42:8c:78:74:28:26:d0:62:bc:
13:b7:bf:93:d2:15:99:50:a1:04:87:4d:86:6e:f5:24:11:2c:
35:47:a2:eb:f3:81:88:55:5e:34:e5:56:c1:cc:e2:ba:6b:66:
07:51:21:86:b6:17:45:7d:91:0b:12:e0:41:97:4a:ef:cc:39:
c7:63:7b:b7:a4:b1:db:99:45:56:6d:95:5f:75:ac:db:dc:4e:
5e:ff:e7:87:86:6b:d4:00:89:2b:52:c7:2f:b8:42:7f:ee:ff:
99:50:71:a5:07:d4:4d:98:0f:b3:5a:3d:a4:1c:34:01:0e:9c:
73:7c:01:a6:ae:cd:af:d4:e0:50:22:16:03:80:67:5e:ee:44:
d3:48:5a:e4:b6:23:7d:e4:73:dc:64:b5:46:63:83:21:79:62:
a0:1b:bc:e1:c5:0f:ca:26:e4:ad:69:8c:63:67:56:15:41:ec:
bf:7f:77:89:4b:ff:5a:49:46:ac:fe:51:a8:3b:45:89:a3:bf:
b7:a0:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:56 2026 by rpki-client