Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/jyscD2pBgVoqy4feXQjd095GuC8.roa
File: jyscD2pBgVoqy4feXQjd095GuC8.roa (raw, json)
Hash identifier: SW0xfycAXAZtW1Wb3Fj9RselS9auXSpN9Mk51pRMJqo=
Subject key identifier: 8F:2B:1C:0F:6A:41:81:5A:2A:CB:87:DE:5D:08:DD:D3:DE:46:B8:2F
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A18DD84F16CC3702D796339B1E118DD81C
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/jyscD2pBgVoqy4feXQjd095GuC8.roa
Signing time: Fri 30 Oct 2026 17:25:25 +0000
ROA not before: Fri 30 Oct 2026 17:25:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218998
IP address blocks: 201.3.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:d8:4f:16:cc:37:02:d7:96:33:9b:1e:11:8d:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 30 17:25:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f2b1c0f6a41815a2acb87de5d08ddd3de46b82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:fc:5b:a0:1c:26:b1:6f:da:75:07:de:37:
d5:e8:f1:85:ee:9c:d6:bf:7c:14:eb:6e:50:16:b3:
95:ea:45:72:7c:c5:55:7a:38:60:b8:ee:ea:e1:f6:
d8:60:38:d1:66:ab:9f:6b:91:e9:d1:85:5c:36:e7:
fe:2d:55:84:ae:e4:ce:86:ea:35:39:71:58:41:2f:
70:f1:f2:40:fb:11:8c:0f:cd:2f:82:02:7a:57:ce:
77:b4:af:97:7c:9b:76:0a:1c:a0:5a:fb:77:dc:5b:
66:2a:78:dc:e0:8a:25:67:46:09:3b:37:53:c0:49:
04:cc:c6:eb:6c:45:17:5f:07:7d:4d:60:f0:37:bd:
ef:ef:05:23:15:f9:81:9e:66:06:81:15:c0:e3:59:
50:ec:00:90:3e:93:60:56:f8:3f:7d:c4:92:20:c6:
c6:93:ad:74:a4:11:f4:3b:a1:52:70:dd:34:1c:06:
24:09:6e:06:70:31:2e:24:41:1a:97:dc:91:eb:90:
ca:3a:1e:4b:c1:5b:84:c1:1b:b2:4b:36:af:04:d3:
9b:89:36:f4:e3:bb:b0:61:6d:a0:58:b8:c7:bd:74:
22:5f:84:42:53:30:14:22:c0:3e:31:41:29:15:a8:
c9:d3:b7:89:d6:e0:2b:dd:99:df:4e:a7:16:ff:93:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2B:1C:0F:6A:41:81:5A:2A:CB:87:DE:5D:08:DD:D3:DE:46:B8:2F
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/jyscD2pBgVoqy4feXQjd095GuC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.122.0/24
Signature Algorithm: sha256WithRSAEncryption
64:20:4b:ae:20:6d:c9:b2:6a:ad:bc:1c:ca:50:34:8d:c5:6c:
85:f5:ce:6c:ec:b7:8e:13:30:94:78:9e:33:ec:2e:72:6c:b7:
d4:0f:ac:cb:92:94:d0:0b:78:5f:26:f5:72:a5:13:ec:c7:76:
00:de:9d:24:cb:6b:7f:b7:70:c8:74:98:81:38:95:b6:d2:fe:
be:d3:28:f0:26:50:a9:15:bc:88:ce:eb:29:a0:3a:d6:4e:89:
bb:9e:23:96:12:c1:d2:14:fc:90:3a:34:62:06:e1:36:35:d7:
25:ec:65:37:17:a9:33:a9:96:fd:07:f2:ad:41:1c:5a:5e:60:
53:d4:ec:87:4d:42:cc:64:37:5c:98:13:9d:b0:70:66:f0:82:
1d:3e:9f:05:bf:1e:6f:5c:2b:ee:27:1a:df:0e:36:62:9c:3e:
e8:eb:3b:17:f6:37:5f:db:db:d2:b8:d1:0b:9f:db:b2:03:80:
38:9d:77:90:c2:02:2a:d5:8a:fb:97:67:57:bc:e4:7b:cc:e1:
d6:fa:fb:ff:5a:70:3c:cc:e6:20:97:30:ed:51:e5:f3:a4:3b:
d4:3b:f0:eb:f1:0c:78:ef:3b:c5:c7:28:48:84:1c:29:35:11:
40:fd:ee:35:d5:8e:77:db:43:46:98:15:a3:fb:e1:a9:a3:61:
48:90:ed:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGN2E8WzDcC15Yzmx4RjdgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYxMDMwMTcyNTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjJiMWMwZjZhNDE4MTVhMmFjYjg3ZGU1ZDA4ZGRkM2RlNDZiODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfr8W6AcJrFv2nUH3jfV6PGF7pzW
v3wU625QFrOV6kVyfMVVejhguO7q4fbYYDjRZqufa5Hp0YVcNuf+LVWEruTOhuo1
OXFYQS9w8fJA+xGMD80vggJ6V853tK+XfJt2ChygWvt33FtmKnjc4IolZ0YJOzdT
wEkEzMbrbEUXXwd9TWDwN73v7wUjFfmBnmYGgRXA41lQ7ACQPpNgVvg/fcSSIMbG
k610pBH0O6FScN00HAYkCW4GcDEuJEEal9yR65DKOh5LwVuEwRuySzavBNObiTb0
47uwYW2gWLjHvXQiX4RCUzAUIsA+MUEpFajJ07eJ1uAr3ZnfTqcW/5PWjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI8rHA9qQYFaKsuH3l0I3dPeRrgvMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvanlzY0QycEJnVm9xeTRmZVhRamQwOTVHdUM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyQN6MA0G
CSqGSIb3DQEBCwUAA4IBAQBkIEuuIG3JsmqtvBzKUDSNxWyF9c5s7LeOEzCUeJ4z
7C5ybLfUD6zLkpTQC3hfJvVypRPsx3YA3p0ky2t/t3DIdJiBOJW20v6+0yjwJlCp
FbyIzuspoDrWTom7niOWEsHSFPyQOjRiBuE2Ndcl7GU3F6kzqZb9B/KtQRxaXmBT
1OyHTULMZDdcmBOdsHBm8IIdPp8Fvx5vXCvuJxrfDjZinD7o6zsX9jdf29vSuNEL
n9uyA4A4nXeQwgIq1Yr7l2dXvOR7zOHW+vv/WnA8zOYglzDtUeXzpDvUO/Dr8Qx4
7zvFxyhIhBwpNRFA/e411Y5320NGmBWj++Gpo2FIkO2B
-----END CERTIFICATE-----
Generated at Sun Nov 1 09:25:10 2026 by rpki-client