Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/JRP5ovn---EWtL-bZCGivGnYETo.roa
File: JRP5ovn---EWtL-bZCGivGnYETo.roa (raw, json)
Hash identifier: eCnq4mLeF8zhsMi0H+sOPhfOpIVevs9iRcwDBx1K8J4=
Subject key identifier: 25:13:F9:A2:F9:FE:FB:E1:16:B4:BF:9B:64:21:A2:BC:69:D8:11:3A
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019D489E95A9F57C830B02639AB40F12CDF3
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/JRP5ovn---EWtL-bZCGivGnYETo.roa
Signing time: Wed 01 Apr 2026 10:37:25 +0000
ROA not before: Wed 01 Apr 2026 10:37:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 114.69.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:9e:95:a9:f5:7c:83:0b:02:63:9a:b4:0f:12:cd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Apr 1 10:37:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2513f9a2f9fefbe116b4bf9b6421a2bc69d8113a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:1e:91:6f:e2:cf:d8:0e:96:72:16:69:61:
e5:e9:10:fa:8e:8f:3a:d0:bf:27:30:31:42:d3:82:
2c:6f:e0:1c:0d:d4:0f:b9:52:3e:ba:de:81:08:34:
6c:fb:0a:fe:ab:f9:89:5a:58:0c:a2:72:f8:24:f7:
56:62:17:95:98:30:7d:32:e2:7e:99:cc:59:98:ff:
47:c5:06:c8:8a:9d:ee:0d:d6:5d:b3:0e:32:bc:13:
ff:10:66:87:e2:21:e6:32:f6:60:5e:52:69:9d:b6:
c6:4a:b9:6d:bd:0c:f3:87:03:08:89:48:7c:25:16:
1d:3e:89:7b:93:2f:18:7a:c6:86:77:ce:64:7b:e2:
fa:75:81:b5:31:f8:ca:43:e2:48:fb:67:0f:de:2e:
57:3b:77:ff:54:28:f9:20:cb:7b:be:67:91:a3:64:
c8:bb:9e:48:4f:28:aa:a5:d6:69:92:f3:01:21:31:
93:f5:ab:9d:62:18:69:98:50:e5:cd:38:5f:c9:50:
63:44:12:5e:3f:1c:6c:d4:b7:b5:b4:f3:6a:ae:d4:
9b:bd:75:5e:2d:74:d3:75:64:2f:ec:a2:9d:95:92:
1d:72:c6:1a:25:73:01:f9:93:f9:76:22:30:66:e3:
07:b4:c3:39:c4:93:9c:b1:bc:d2:dc:b7:cf:09:ce:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:13:F9:A2:F9:FE:FB:E1:16:B4:BF:9B:64:21:A2:BC:69:D8:11:3A
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/JRP5ovn---EWtL-bZCGivGnYETo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.69.245.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1c:98:72:ec:3b:77:de:45:b3:3a:b4:c5:c8:fb:de:ee:f9:
94:79:93:30:49:a8:c8:ad:a3:25:41:6b:5c:0b:ff:fa:27:e3:
2a:b3:91:72:17:81:1b:bb:c4:0a:39:26:d3:4a:b9:83:5b:23:
d9:7a:50:35:cb:51:25:a1:bf:6d:79:08:af:39:22:0c:91:49:
6a:4b:03:7f:d6:c0:ec:cf:32:77:b6:ae:c4:0f:8f:f1:f1:4d:
e9:50:20:2c:93:a3:af:e5:13:02:b4:66:89:d3:92:3b:c3:5c:
8e:b6:02:9b:57:75:2b:19:1f:ae:ce:79:74:88:84:87:31:12:
55:db:7e:58:24:3b:6a:b7:a0:56:69:d8:7d:52:aa:bd:86:75:
da:22:c2:95:e3:1a:e4:c3:88:d2:16:f6:e7:ca:f7:79:9e:7b:
a5:e4:2d:74:08:3f:2b:27:b5:36:a3:61:b2:19:b8:32:64:3d:
ea:18:b1:38:b7:df:c4:99:80:d1:0d:a5:ed:b2:02:d7:9d:65:
48:17:0a:af:a1:2b:46:cb:47:23:4e:dc:28:d0:da:17:25:ea:
c1:12:e2:f8:e1:be:c1:66:88:ff:49:bf:48:de:27:79:87:c3:
31:d1:4d:8f:a5:71:fb:91:06:68:24:7a:60:f1:90:9c:4e:ca:
f2:ad:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:00 2026 by rpki-client