Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jtOmA5yEiJVDS1GM5mh6B24Ztn4.roa
File: jtOmA5yEiJVDS1GM5mh6B24Ztn4.roa (raw, json)
Hash identifier: mx8NHkss3TBwl5HiBnB80Y2LJHfn8DlIROLb++ashVQ=
Subject key identifier: 8E:D3:A6:03:9C:84:88:95:43:4B:51:8C:E6:68:7A:07:6E:19:B6:7E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019E4103A0067496BE41A07708835C6053B0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jtOmA5yEiJVDS1GM5mh6B24Ztn4.roa
Signing time: Tue 19 May 2026 16:13:36 +0000
ROA not before: Tue 19 May 2026 16:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29182
IP address blocks: 212.193.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:03:a0:06:74:96:be:41:a0:77:08:83:5c:60:53:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 19 16:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ed3a6039c848895434b518ce6687a076e19b67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:67:34:3b:7d:cd:df:aa:4f:f8:1f:18:6e:
0d:13:94:a6:5b:df:bd:38:2a:38:bf:64:fe:f8:62:
09:7d:da:9c:22:55:20:a9:bd:bc:38:e8:3e:f5:ce:
43:b9:b4:1f:b0:5b:03:02:3c:2d:64:63:9c:4a:16:
15:20:d1:b5:8f:a9:5d:38:76:4a:d1:85:0d:4d:74:
d3:06:e4:a8:8a:75:b1:d5:96:6c:1d:86:5a:56:34:
90:ce:54:ac:89:4c:1b:ca:75:0d:39:8a:03:eb:93:
15:ce:3f:d1:9a:7d:db:99:7a:a3:b7:87:f3:5b:e6:
6c:36:89:c2:ac:36:65:e5:fc:4a:06:19:7a:78:ca:
cf:f5:de:32:0a:8a:6e:58:ae:17:04:8f:09:1b:6e:
bd:53:52:42:ff:f9:17:29:e8:6c:c3:0f:2d:0c:a2:
b6:79:da:2d:41:25:56:0f:a6:18:4e:9b:06:a1:60:
21:e9:53:c0:2c:58:67:ec:66:03:9f:e0:2d:3d:20:
f2:0b:12:ad:c2:df:68:57:90:05:6f:8a:bc:15:c1:
ce:87:9d:43:d0:47:51:5b:08:c7:c2:ce:65:74:0f:
81:24:28:32:12:e9:dd:ae:27:8f:14:b6:15:13:2f:
a8:5a:88:1d:3e:81:c4:e1:fb:8e:23:53:19:38:ef:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D3:A6:03:9C:84:88:95:43:4B:51:8C:E6:68:7A:07:6E:19:B6:7E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jtOmA5yEiJVDS1GM5mh6B24Ztn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2f:17:6a:7b:c0:6a:a8:0e:14:f3:5f:71:50:85:a4:96:11:
c3:70:b5:3a:7f:41:4d:d5:27:51:22:94:79:d7:6b:61:8e:41:
76:87:0e:3b:32:73:46:a9:58:8b:e0:38:e8:62:00:2d:26:2d:
78:8e:bb:f5:69:48:17:34:95:2c:67:2a:bc:f0:4f:a5:57:70:
55:5b:4c:19:13:a0:d3:80:10:c5:29:95:bc:28:07:28:d5:c5:
e9:70:50:c8:a1:eb:2b:2f:2e:ff:d5:a5:e2:f7:55:0f:62:39:
ab:85:4e:2b:68:7d:48:f5:e2:31:2b:07:91:45:a6:5c:ca:45:
46:6d:a9:41:97:e6:18:e6:f3:e0:48:8d:46:a7:14:97:42:83:
cc:ac:1d:e9:94:a7:05:9a:e1:c6:2c:50:55:4b:ae:23:a5:3d:
7c:01:9a:e7:88:30:6a:54:a9:c3:fd:c4:a7:42:6e:95:fb:60:
90:c5:c0:17:f7:db:d4:ff:1f:2e:78:04:7d:d9:f3:12:71:6d:
e6:8d:c2:81:bf:b6:23:35:0a:98:65:83:da:bb:0f:2b:cd:ad:
6f:69:92:ef:31:42:aa:61:c6:9d:13:f1:62:f8:c3:26:af:43:
b7:27:07:24:38:8e:b8:8a:91:0b:4d:cf:cc:48:d2:a0:bc:e4:
43:f8:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:33 2026 by rpki-client