Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JMxqx0TxO26zpCa11SjlHODmHjk.roa
File: JMxqx0TxO26zpCa11SjlHODmHjk.roa (raw, json)
Hash identifier: RX+wnXRgJnG7Iv0hD68ykN6TeOhMeeUuYwSECOIdKuw=
Subject key identifier: 24:CC:6A:C7:44:F1:3B:6E:B3:A4:26:B5:D5:28:E5:1C:E0:E6:1E:39
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F353EEE058B4ECD1CB056C07ACA1560C3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JMxqx0TxO26zpCa11SjlHODmHjk.roa
Signing time: Mon 06 Jul 2026 02:25:44 +0000
ROA not before: Mon 06 Jul 2026 02:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:35:3e:ee:05:8b:4e:cd:1c:b0:56:c0:7a:ca:15:60:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 6 02:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24cc6ac744f13b6eb3a426b5d528e51ce0e61e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:92:df:71:3d:14:8d:aa:dc:80:ed:66:e6:b9:
38:14:a2:f1:31:12:31:ab:2a:9f:3b:af:3c:39:13:
39:2c:3b:9b:7b:ef:8f:a7:a6:c4:7b:bb:b3:43:ed:
d8:5f:89:aa:b6:f7:78:78:c5:e6:b1:90:7a:ca:e0:
7d:3a:4c:b9:ba:d0:c4:c0:05:db:a6:ac:00:41:e2:
10:ff:2d:52:05:e5:46:4a:7c:5c:0a:7c:45:06:d5:
66:71:da:6d:c2:11:58:4f:b1:50:da:d6:12:de:be:
0d:ce:24:a7:f9:92:f2:b8:b4:d5:d8:a6:11:ba:8f:
4d:35:dd:be:16:93:5f:4a:86:16:ee:4b:d5:f0:0c:
6c:e6:8f:a0:70:8b:d4:2d:c3:27:7d:32:86:f3:92:
0d:ba:66:ce:d4:b0:b7:38:dc:84:c4:4a:06:e8:78:
2a:b4:6d:88:9d:75:cd:62:ab:64:32:4a:51:1a:e5:
90:a3:3e:d8:13:9b:e3:ee:10:48:08:32:58:de:f8:
cb:68:cb:6f:05:7a:2d:92:cf:6d:cc:86:96:29:b6:
0a:df:1e:8b:31:91:9f:8e:9f:e7:e4:ce:b6:41:4e:
2a:0a:39:f4:63:c7:49:21:71:51:73:7e:ce:59:8c:
26:b7:61:b2:ce:e7:e0:28:27:69:a1:ac:03:32:18:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:6A:C7:44:F1:3B:6E:B3:A4:26:B5:D5:28:E5:1C:E0:E6:1E:39
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JMxqx0TxO26zpCa11SjlHODmHjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.200.0/24
217.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:09:3d:58:32:f8:dc:e0:2c:1d:6e:d2:8d:5c:61:aa:15:9e:
1d:a9:94:21:49:e3:1a:64:ba:8d:cb:57:47:53:bf:55:2a:1b:
40:97:01:2a:7f:1f:0d:53:3d:5d:09:a1:f0:67:51:03:b8:e4:
98:9d:cf:8c:b3:ff:3b:07:6f:fb:0d:22:9d:7b:3a:38:17:41:
79:9f:65:24:71:8e:35:9c:a9:a2:bb:06:d0:e8:82:98:8d:c7:
6c:30:59:32:90:95:0a:3b:15:b8:9d:fb:cc:9b:f8:7e:76:fa:
61:9f:33:24:aa:81:2b:31:f7:c6:a2:da:9d:14:b5:7b:29:a7:
2a:8b:fe:a9:74:e2:2c:61:c7:a2:8a:fd:b3:33:c2:ef:9c:77:
9f:6d:70:53:52:aa:23:95:4e:dc:08:24:25:ea:e6:1e:09:5b:
7e:65:12:14:2c:b2:e1:72:48:f4:f7:16:94:1d:6c:c4:05:56:
41:b9:f6:44:0f:b0:a8:f9:eb:61:f1:35:88:54:bf:b9:6a:cf:
5b:6b:67:53:26:19:d2:34:55:b0:ec:75:fb:f9:78:ab:ec:c6:
fb:ea:67:d2:45:de:e0:0d:1b:45:6d:4a:97:fb:c7:fc:65:d6:
01:b4:e7:16:fa:cb:45:7d:30:40:a7:af:e2:01:22:8e:b1:b4:
3f:c1:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 19:18:34 2026 by rpki-client