Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/jMeAHDezuVzuHaxvqjYHJSX7K0g.roa
File: jMeAHDezuVzuHaxvqjYHJSX7K0g.roa (raw, json)
Hash identifier: FrzxuL4M9sPthBlOA5+O6LEvS4auN7ukqBW2uSIcT8c=
Subject key identifier: 8C:C7:80:1C:37:B3:B9:5C:EE:1D:AC:6F:AA:36:07:25:25:FB:2B:48
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 01A11C39B563E51FE62ADA40557E3B2F55E9
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/jMeAHDezuVzuHaxvqjYHJSX7K0g.roa
Signing time: Thu 08 Oct 2026 15:55:06 +0000
ROA not before: Thu 08 Oct 2026 15:55:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33659
IP address blocks: 91.200.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:39:b5:63:e5:1f:e6:2a:da:40:55:7e:3b:2f:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Oct 8 15:55:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cc7801c37b3b95cee1dac6faa36072525fb2b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:e0:ff:86:84:f8:03:96:ec:d8:75:28:cf:
d7:af:a2:cc:bd:80:94:d7:83:da:cd:72:38:b7:ed:
36:08:19:6b:ab:ca:fb:60:7a:27:10:41:31:46:66:
43:1e:a4:49:a0:00:01:52:7c:69:c9:27:3a:69:e5:
65:d4:5b:29:20:46:71:76:57:a0:85:70:63:79:9c:
5c:df:ce:a0:07:aa:dc:25:ae:4e:19:14:20:95:16:
8b:ee:23:e2:57:7f:7c:64:8e:ea:9e:4c:6b:26:49:
02:ed:41:c3:29:1d:43:db:d0:41:c9:88:80:47:f0:
05:db:f3:70:e2:a8:ea:46:48:d4:1f:57:6a:7c:6a:
88:bb:5e:94:72:c6:55:c5:5e:48:1c:04:b6:e1:38:
45:e6:76:af:1b:0c:2b:79:e2:35:3b:38:7c:d2:7a:
09:e9:57:b8:db:c2:8d:f5:b1:de:0c:b2:46:15:ac:
79:80:80:23:c0:73:4b:a7:86:a4:59:14:bb:ff:3f:
d2:63:de:47:7f:0c:da:82:69:ba:7e:35:92:b1:8b:
0b:a7:ab:bc:60:f7:1e:eb:cc:46:45:b1:67:2e:ba:
99:96:b8:5e:20:de:85:6d:c2:34:bc:ff:e7:9c:37:
0d:e4:57:98:1b:fa:05:64:e9:bb:6d:46:42:ef:0e:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:80:1C:37:B3:B9:5C:EE:1D:AC:6F:AA:36:07:25:25:FB:2B:48
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/jMeAHDezuVzuHaxvqjYHJSX7K0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.136.0/22
Signature Algorithm: sha256WithRSAEncryption
61:d8:70:9b:45:75:c2:bd:95:5a:0a:b0:c2:3d:41:bb:15:bb:
3a:c1:07:a2:2b:5f:5f:cf:10:f4:1d:30:6a:4e:bb:eb:dd:be:
4c:cf:f6:9d:5e:3c:1e:a9:01:ae:21:81:0b:58:cd:5c:1e:ab:
9a:48:0f:4d:64:ab:f4:a7:6d:24:82:79:15:0d:34:0b:e9:02:
af:10:89:52:7b:f4:ac:01:cc:70:d8:3a:48:01:bd:ed:1c:01:
64:1f:f9:12:18:b2:6c:ea:df:3f:19:78:5c:23:6a:48:88:15:
79:5c:a9:b1:56:da:71:9b:c1:e8:27:b1:2e:13:b5:32:09:76:
63:72:8a:27:09:2b:5c:54:af:69:87:ac:a0:a1:4a:c4:46:cd:
d7:e4:87:a7:fc:ae:a3:c6:b0:db:d2:d2:ee:09:79:54:d7:51:
a4:14:31:85:8e:9e:35:76:28:54:58:d8:55:29:2a:58:41:5a:
20:dc:3b:fb:cd:83:c2:0f:6a:d2:1d:e9:52:22:5d:97:b3:01:
45:e6:57:ab:59:a3:72:ff:1c:09:3f:ef:40:52:25:2b:77:7d:
5d:f9:18:c7:04:67:76:e2:d6:38:ca:43:d1:9c:64:86:3a:02:
0c:84:c3:ff:0d:e8:b6:28:9d:95:55:8a:30:26:e6:ba:eb:69:
35:ad:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:48:06 2026 by rpki-client