Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/JLTJ_djmepytzX8zTui4177ccPU.roa
File: JLTJ_djmepytzX8zTui4177ccPU.roa (raw, json)
Hash identifier: v8YNZSAHqPj+CfPDJGHMubfC0jWuRi99PbF/4ydAFi4=
Subject key identifier: 24:B4:C9:FD:D8:E6:7A:9C:AD:CD:7F:33:4E:E8:B8:D7:BE:DC:70:F5
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A081CC3BBD0AE4863C746757ABAA9DCB08
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/JLTJ_djmepytzX8zTui4177ccPU.roa
Signing time: Tue 08 Sep 2026 16:14:00 +0000
ROA not before: Tue 08 Sep 2026 16:14:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 79.98.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:cc:3b:bd:0a:e4:86:3c:74:67:57:ab:aa:9d:cb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Sep 8 16:14:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24b4c9fdd8e67a9cadcd7f334ee8b8d7bedc70f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:4d:4f:c2:0e:88:22:e6:e5:7b:8d:b9:5b:
03:8f:5d:ea:a2:83:20:6e:08:0e:9a:ec:86:47:09:
33:77:74:9d:4f:f2:ba:39:19:a1:b0:1b:74:d2:4a:
be:f6:ac:27:5f:37:78:5e:ea:a1:e7:90:c5:86:c7:
c3:52:f8:29:9e:0b:6b:54:e6:4a:32:0b:8e:b8:00:
fa:ca:99:8f:9a:a2:84:0c:cf:7d:76:51:b0:4f:54:
8c:59:78:bf:69:b7:7d:2c:94:ae:55:23:b0:6a:d8:
19:ec:c3:07:c0:d5:24:95:f1:51:20:c8:72:53:39:
fd:73:0c:6a:71:88:40:a3:ab:e1:65:79:17:81:17:
ec:af:24:7a:5f:b2:6e:ca:57:04:cc:8c:63:f6:60:
55:db:ca:93:bf:69:04:42:00:67:18:de:fa:b9:ce:
fa:af:10:cf:96:74:ff:8a:21:9a:2b:eb:f9:de:1f:
bc:7a:26:2c:36:90:8b:1e:5f:21:da:e2:56:45:da:
73:f7:b2:dd:9e:58:3d:e6:64:71:39:9d:e9:04:ce:
af:90:a6:4a:f2:98:97:89:44:7c:76:d1:c0:26:3e:
a9:04:2f:c7:9e:67:7e:ad:80:8c:e5:e8:9b:24:4d:
54:a0:e2:90:28:58:dc:00:22:ae:43:10:eb:0c:f0:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B4:C9:FD:D8:E6:7A:9C:AD:CD:7F:33:4E:E8:B8:D7:BE:DC:70:F5
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/JLTJ_djmepytzX8zTui4177ccPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f1:6c:91:dd:d8:70:c7:b7:3a:cc:95:2c:99:86:d8:de:02:
cf:bb:ad:7f:cc:ea:42:73:d9:28:f5:a1:92:57:a9:77:2f:7d:
1c:c4:88:48:01:49:ab:d1:cb:8c:5d:78:ef:03:0f:15:53:06:
98:be:5b:c4:63:fd:0b:cd:be:da:f5:18:06:cc:2d:e0:ed:20:
f3:1c:c5:cb:22:dc:fa:53:c5:88:d2:6f:3a:b3:f0:eb:87:e6:
c8:8e:ab:6a:05:5f:7c:f3:11:76:a7:de:3b:57:26:e8:39:ce:
5b:e6:2e:fd:2c:62:3d:67:17:a1:da:d9:e1:42:f8:6a:12:89:
90:8d:ee:6a:89:3e:94:dd:cf:d8:0c:ea:51:3c:ca:82:32:b2:
ef:c9:59:1f:81:a1:eb:fe:b9:d2:f1:75:9f:80:b9:ff:dd:c3:
44:19:dd:ec:7e:ae:cf:a5:38:24:04:c8:f3:e7:14:b0:cf:d9:
cb:46:f5:4f:99:f8:d6:d9:87:bc:b0:ed:bd:4c:db:c3:94:f7:
f9:c4:7e:84:65:e8:63:18:76:2f:71:6a:62:e3:56:15:2d:e6:
23:ab:2e:c0:11:2f:08:a6:cf:fd:cb:49:e9:04:ba:5f:22:4c:
cf:df:56:cc:83:25:33:a7:ce:b4:89:89:5c:97:80:2d:bf:f6:
94:f1:fd:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCBzDu9CuSGPHRnV6uqncsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2
ZDYzNDkwHhcNMjYwOTA4MTYxNDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGI0YzlmZGQ4ZTY3YTljYWRjZDdmMzM0ZWU4YjhkN2JlZGM3MGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LZNT8IOiCLm5XuNuVsDj13qooMg
bggOmuyGRwkzd3SdT/K6ORmhsBt00kq+9qwnXzd4Xuqh55DFhsfDUvgpngtrVOZK
MguOuAD6ypmPmqKEDM99dlGwT1SMWXi/abd9LJSuVSOwatgZ7MMHwNUklfFRIMhy
Uzn9cwxqcYhAo6vhZXkXgRfsryR6X7JuylcEzIxj9mBV28qTv2kEQgBnGN76uc76
rxDPlnT/iiGaK+v53h+8eiYsNpCLHl8h2uJWRdpz97Ldnlg95mRxOZ3pBM6vkKZK
8piXiUR8dtHAJj6pBC/Hnmd+rYCM5eibJE1UoOKQKFjcACKuQxDrDPA67QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCS0yf3Y5nqcrc1/M07ouNe+3HD1MB8GA1UdIwQY
MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct
MTY2ZmI5ZGI2ZGIzLzEvSkxUSl9kam1lcHl0elg4elR1aTQxNzdjY1BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz
LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2IlMA0G
CSqGSIb3DQEBCwUAA4IBAQCM8WyR3dhwx7c6zJUsmYbY3gLPu61/zOpCc9ko9aGS
V6l3L30cxIhIAUmr0cuMXXjvAw8VUwaYvlvEY/0Lzb7a9RgGzC3g7SDzHMXLItz6
U8WI0m86s/Drh+bIjqtqBV988xF2p947VyboOc5b5i79LGI9Zxeh2tnhQvhqEomQ
je5qiT6U3c/YDOpRPMqCMrLvyVkfgaHr/rnS8XWfgLn/3cNEGd3sfq7PpTgkBMjz
5xSwz9nLRvVPmfjW2Ye8sO29TNvDlPf5xH6EZehjGHYvcWpi41YVLeYjqy7AES8I
ps/9y0npBLpfIkzP31bMgyUzp860iYlcl4Atv/aU8f1B
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:48:00 2026 by rpki-client