Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JxY3-FSt3SF8xjpn0J15rpZBCeE.roa
File: JxY3-FSt3SF8xjpn0J15rpZBCeE.roa (raw, json)
Hash identifier: Mk4omi3YY3VobqVwCAINUmbPI4jiTSJrcsqjo1i/eSc=
Subject key identifier: 27:16:37:F8:54:AD:DD:21:7C:C6:3A:67:D0:9D:79:AE:96:41:09:E1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F66F3E25D90EB265D98772C641E487BC3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JxY3-FSt3SF8xjpn0J15rpZBCeE.roa
Signing time: Wed 15 Jul 2026 18:04:46 +0000
ROA not before: Wed 15 Jul 2026 18:04:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 192.124.183.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:f3:e2:5d:90:eb:26:5d:98:77:2c:64:1e:48:7b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 15 18:04:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=271637f854addd217cc63a67d09d79ae964109e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:0b:b8:40:4b:57:22:ae:81:21:bc:6e:3e:
83:11:18:0a:38:ad:70:d5:58:9c:7e:3e:05:39:02:
4a:ba:b7:2f:b5:1b:5c:26:01:0c:1d:29:16:c4:2b:
99:5b:22:f4:a2:4a:58:22:b1:a0:92:37:cb:ce:45:
ef:93:6d:37:6c:a6:ed:41:3f:09:c0:c3:f3:1d:f2:
d3:05:0c:a8:4e:68:34:ea:e2:d7:33:ae:dd:4a:5c:
4d:00:3a:2d:5a:f6:f9:36:7d:53:65:f4:eb:70:37:
18:4d:6a:00:95:b1:4a:9c:9c:8c:93:2d:34:4e:0e:
5f:fa:87:7f:71:61:28:50:2d:11:3f:25:8c:9d:57:
e8:1b:4d:d5:be:3d:55:97:ae:44:21:a4:33:ba:58:
b8:47:18:58:56:b7:72:5a:a2:16:51:0f:ec:44:9f:
75:47:26:3d:60:41:0f:b5:4d:19:54:25:aa:c7:3e:
cc:0c:99:cb:8e:76:5a:96:53:6d:75:b4:45:b5:64:
10:09:80:cc:f1:8e:fc:de:a3:eb:99:11:1b:d3:a0:
e8:27:87:8e:0e:b5:fb:4d:32:6c:65:f5:61:95:83:
37:96:84:e3:5d:f9:6c:bf:ed:be:71:17:f0:6e:e8:
ab:29:a5:74:2e:7a:5e:ec:83:27:e6:94:f7:8f:4c:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:16:37:F8:54:AD:DD:21:7C:C6:3A:67:D0:9D:79:AE:96:41:09:E1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JxY3-FSt3SF8xjpn0J15rpZBCeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.183.0/24
194.87.34.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bc:dd:d1:5e:82:76:10:ce:6e:60:6f:be:ae:b7:8e:0c:ab:
6e:41:e8:a2:f9:cd:45:7e:10:37:7f:e8:c0:b2:25:ad:79:0d:
db:5d:46:e4:f0:8e:30:c8:24:8d:2b:81:0d:4f:7a:ea:a2:04:
77:c2:c9:ba:73:8f:5b:43:32:67:b3:af:d4:c6:cd:50:fe:b5:
23:99:57:8c:c4:1b:18:35:66:7c:a5:e4:70:e8:eb:37:59:a0:
b5:53:b4:51:99:cf:a6:91:b4:60:d4:b7:44:2a:fd:84:84:fa:
db:44:05:3f:62:86:d3:07:19:ec:75:a3:62:2d:30:10:04:b7:
ef:ef:0b:b0:f8:d3:38:d6:af:61:13:a2:86:9f:f8:c6:34:a3:
9a:b1:3c:b1:8d:64:f0:e2:0b:04:3d:d6:c0:16:9d:ab:5c:c5:
74:6c:db:02:e4:a4:3c:02:a4:ef:ec:1e:67:62:e0:a3:c0:4b:
ff:0f:b2:7c:be:c2:6c:bd:19:33:58:f5:8a:72:a3:8a:61:57:
d9:b9:6a:2b:7e:05:92:c7:84:84:8f:5e:87:d2:e9:f7:b9:77:
75:e8:da:96:fd:20:08:00:29:45:27:63:2a:fb:8b:2f:77:57:
6c:b0:b5:a9:1b:96:7f:e2:86:5b:e3:25:11:a2:57:cc:ad:aa:
d7:7b:ce:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:36 2026 by rpki-client