Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/ji_D0lu8-y4VWEPwVDrnZMjnkCo.roa
File: ji_D0lu8-y4VWEPwVDrnZMjnkCo.roa (raw, json)
Hash identifier: uFQdIyoiRuksO7VRFSUB+sSOM0uBJC1xPTt3zV/H5hU=
Subject key identifier: 8E:2F:C3:D2:5B:BC:FB:2E:15:58:43:F0:54:3A:E7:64:C8:E7:90:2A
Certificate issuer: /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial: 01A101D973ACE6FC8D4BCAFA3AA448B6F58B
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/ji_D0lu8-y4VWEPwVDrnZMjnkCo.roa
Signing time: Sat 03 Oct 2026 12:59:50 +0000
ROA not before: Sat 03 Oct 2026 12:59:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214078
IP address blocks: 195.24.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:d9:73:ac:e6:fc:8d:4b:ca:fa:3a:a4:48:b6:f5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Validity
Not Before: Oct 3 12:59:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e2fc3d25bbcfb2e155843f0543ae764c8e7902a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:7e:ec:6f:a0:d6:47:59:3f:89:23:4e:8e:
88:33:02:fe:1d:b6:46:85:f6:6b:4a:e5:3e:3f:ff:
ab:42:20:89:ff:b2:69:a7:80:9e:17:83:23:5c:36:
f5:1b:91:c7:6e:46:76:e9:2a:81:e7:94:a5:0a:c6:
71:f8:35:56:9f:0a:4b:4a:f7:13:bb:17:e4:0a:14:
ed:f9:ec:f2:89:77:fd:70:4d:79:a6:75:6c:72:14:
8e:c5:7d:ee:0d:6c:21:fd:8f:fc:17:ad:90:f4:1d:
40:36:5d:ed:ba:69:41:33:32:fe:ce:4f:45:86:3c:
9c:29:45:f4:db:3f:87:44:8b:b3:93:9b:6b:eb:98:
77:8a:41:6c:a0:5b:fe:34:c2:4c:48:0c:85:11:4c:
3f:9b:60:ef:84:1e:72:13:83:4b:03:57:92:58:83:
ff:6e:d6:c3:4b:3a:63:43:af:24:0e:93:05:f4:50:
59:1d:bc:2a:d9:a0:10:00:47:9f:70:6d:e7:91:04:
52:96:b4:fd:94:c7:67:ea:87:85:69:28:ba:93:42:
c2:0b:ce:3e:bc:0f:bb:da:35:db:66:2e:ab:48:96:
85:ae:02:18:34:0a:5f:fb:31:19:2c:1f:6a:64:4d:
3a:12:d8:6d:14:b9:8a:2c:3e:e0:11:d5:7e:4e:e5:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2F:C3:D2:5B:BC:FB:2E:15:58:43:F0:54:3A:E7:64:C8:E7:90:2A
X509v3 Authority Key Identifier:
keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/ji_D0lu8-y4VWEPwVDrnZMjnkCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.236.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fc:c2:45:9f:92:8e:e6:1f:ae:4d:c9:a5:2d:48:e5:79:8b:
bb:ce:42:a2:40:7f:0f:de:0b:e9:f0:c7:c6:4a:84:34:04:02:
f9:55:30:0e:10:75:ef:df:a8:be:ed:dc:cc:f8:c4:02:56:da:
57:cf:ac:a0:ae:74:af:44:59:a6:d8:bb:53:f8:fa:09:12:53:
e2:51:7a:68:72:42:14:28:50:73:38:d2:70:de:67:30:7a:14:
53:2f:fa:ac:15:ad:b5:8e:b0:ad:0f:e2:62:b4:52:e5:71:9f:
b8:50:7c:9a:a3:ba:db:3c:ed:11:52:de:6f:b7:fc:bf:d4:54:
e0:31:98:8f:33:b6:c7:ee:fa:48:3b:f3:9e:14:e6:c6:13:48:
82:46:6d:75:a6:4d:e8:c6:77:12:99:7a:88:4e:8a:20:9d:55:
74:c5:ab:db:fa:e5:eb:99:c3:05:33:e8:3e:97:f1:b8:91:d9:
bc:7e:0c:4a:a9:e1:4f:a2:23:89:4f:2d:07:e2:9e:3c:5f:76:
35:57:70:38:6c:a8:35:68:84:f9:d1:86:a4:80:68:d5:9a:aa:
79:a8:5c:3a:41:7f:a1:2b:6b:1c:6c:64:b1:a9:41:69:30:ac:
d1:30:22:19:a0:a4:70:2c:62:0d:fa:37:04:b6:80:3e:b4:f9:
ee:1b:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:49:00 2026 by rpki-client