Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/jowalr-ls0MsCjpvbaaWQKaF9kI.roa
File: jowalr-ls0MsCjpvbaaWQKaF9kI.roa (raw, json)
Hash identifier: 1ipoVHn+B5RMfiZmj1y+53YIu/xxrw2/kOy3gddg7jI=
Subject key identifier: 8E:8C:1A:96:BF:A5:B3:43:2C:0A:3A:6F:6D:A6:96:40:A6:85:F6:42
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 01A164B4684BAB61D2E817CF0E978A63AE84
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/jowalr-ls0MsCjpvbaaWQKaF9kI.roa
Signing time: Thu 22 Oct 2026 17:41:47 +0000
ROA not before: Thu 22 Oct 2026 17:41:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210656
IP address blocks: 46.243.218.0/23 maxlen: 32
89.223.6.0/23 maxlen: 32
89.223.20.0/24 maxlen: 32
92.255.16.0/24 maxlen: 32
92.255.58.0/23 maxlen: 32
94.126.204.0/22 maxlen: 32
94.139.248.0/22 maxlen: 32
185.184.128.0/22 maxlen: 32
185.216.194.0/23 maxlen: 32
2a0d:d6c2::/48 maxlen: 48
2a0d:d6c7:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:b4:68:4b:ab:61:d2:e8:17:cf:0e:97:8a:63:ae:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Oct 22 17:41:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e8c1a96bfa5b3432c0a3a6f6da69640a685f642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:14:e3:ef:98:4f:ce:10:6a:16:82:e5:fd:
29:33:42:67:2e:36:a0:08:07:dd:21:19:5c:c8:1e:
c0:a7:1e:d2:ed:92:e2:fa:e5:97:8f:9f:9a:eb:3f:
f4:05:9d:9f:01:77:60:c3:39:e7:0d:28:41:6d:4d:
0b:4d:25:43:4a:21:e6:e1:ff:3d:1e:dd:f5:3f:91:
2c:81:5e:cb:86:db:28:67:a2:7c:79:41:d7:f6:cd:
58:0f:00:d4:5a:d8:bb:b4:52:ba:83:86:eb:5a:df:
45:0e:86:5c:84:7b:14:d2:23:d5:6a:f0:a8:b6:07:
34:19:f9:23:6c:16:a8:c3:1b:fa:8d:3a:72:54:7b:
3c:22:f1:5c:52:90:f8:22:65:11:6b:e5:e3:d6:ff:
c3:c7:42:ec:d9:96:20:d4:0b:8d:47:25:da:a1:ec:
a9:18:7f:7e:a7:b7:e8:19:a6:bd:1f:6e:aa:03:dc:
46:94:c6:9e:f4:0e:77:ac:e5:fa:aa:58:93:14:1c:
c3:49:f0:34:9b:78:2d:7f:23:24:17:d1:12:fc:8a:
23:cc:ad:40:b5:70:53:e5:e4:fa:1e:29:2a:6b:79:
b3:b6:4f:5d:f8:85:98:c2:b4:69:72:d4:8e:10:3c:
f3:8e:3f:fb:54:6e:47:43:c0:92:25:e0:26:ec:d8:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8C:1A:96:BF:A5:B3:43:2C:0A:3A:6F:6D:A6:96:40:A6:85:F6:42
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/jowalr-ls0MsCjpvbaaWQKaF9kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.218.0/23
89.223.6.0/23
89.223.20.0/24
92.255.16.0/24
92.255.58.0/23
94.126.204.0/22
94.139.248.0/22
185.184.128.0/22
185.216.194.0/23
IPv6:
2a0d:d6c2::/48
2a0d:d6c7:3::/48
Signature Algorithm: sha256WithRSAEncryption
6b:60:a6:47:9a:a4:b6:f2:30:46:b1:95:07:78:63:38:40:75:
0b:c9:43:9c:9b:2a:65:ce:b4:73:92:82:ab:3e:cc:8c:ce:e2:
c4:9e:d1:e4:a0:10:a6:28:82:70:e0:bd:ed:9c:95:a5:65:ca:
f7:74:e6:e3:eb:47:b8:8e:c8:44:c7:05:b6:3a:12:37:d8:22:
63:f3:c5:3b:fc:75:8d:4c:19:6c:9e:b4:8b:34:ab:77:ea:64:
13:60:54:93:4c:9e:dd:a9:a6:ff:4b:78:b6:b0:aa:fd:bd:04:
9e:43:73:68:7f:c8:f8:ba:a8:2d:f7:95:74:d6:96:24:2f:5a:
2c:b6:8c:a3:d2:0d:bc:98:19:44:b9:1d:b9:4b:ca:19:52:55:
8a:7a:6e:e8:9f:35:00:be:1b:21:eb:ba:71:ac:b8:f8:2f:ea:
61:82:e2:27:a8:ce:bf:75:87:3d:db:a5:e0:43:bc:4c:b8:86:
8f:89:01:30:b2:c5:ba:0a:42:17:58:25:b0:01:b5:eb:ab:86:
57:56:31:16:3b:95:bf:9d:3a:a8:a3:4c:80:73:00:4c:11:f2:
2a:16:b7:27:04:f7:1b:32:76:bc:1c:a2:62:a9:71:de:4b:59:
d3:4a:65:22:f3:7b:37:5e:29:c9:73:93:3c:6c:67:43:f5:53:
7a:d9:fc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:14:02 2026 by rpki-client