Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/jVvCjidFfK-8IL92OyEeuSlStW0.roa
File: jVvCjidFfK-8IL92OyEeuSlStW0.roa (raw, json)
Hash identifier: 95JD6YEa33c2IW5jEGSMsvaX4Vq46tjO1+Oed4maTyw=
Subject key identifier: 8D:5B:C2:8E:27:45:7C:AF:BC:20:BF:76:3B:21:1E:B9:29:52:B5:6D
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01A01AFC2A02CCA652A732E14840333728F1
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/jVvCjidFfK-8IL92OyEeuSlStW0.roa
Signing time: Wed 19 Aug 2026 17:05:28 +0000
ROA not before: Wed 19 Aug 2026 17:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 5.252.22.0/24 maxlen: 24
5.252.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:fc:2a:02:cc:a6:52:a7:32:e1:48:40:33:37:28:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Aug 19 17:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d5bc28e27457cafbc20bf763b211eb92952b56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:ad:5b:53:be:46:9e:b4:db:3c:98:e4:0c:
5a:5a:a8:ba:0d:70:cd:51:08:be:63:f7:c6:ea:65:
8a:3d:ae:75:28:5f:e8:76:c3:5e:16:09:8c:a3:2f:
d6:13:24:13:5d:03:7d:95:84:e6:23:00:56:94:ad:
89:8f:74:7d:3b:ec:56:4f:f4:a5:6e:26:c4:ff:ed:
00:a1:7c:3c:14:35:03:f8:5e:fc:f1:75:39:1a:76:
77:b9:aa:18:63:63:a4:67:e7:51:a8:8b:a7:6a:14:
87:21:f1:a4:e9:23:72:27:95:88:21:68:5a:a4:4f:
63:8c:a1:12:54:bb:e6:fd:55:4d:2b:c5:b8:2e:84:
b9:c4:23:53:b3:4a:a5:64:8c:71:59:20:12:32:62:
10:a9:54:85:f6:59:2b:90:0e:55:5e:11:e5:e5:06:
90:ff:bf:25:b6:55:f8:70:8d:ee:3e:74:b1:4a:1e:
25:e3:7a:b1:fa:70:c1:9d:2d:7d:07:36:ce:de:7e:
d3:33:ba:52:cf:42:9e:e8:f0:72:de:3a:18:2c:21:
6e:7b:a1:4e:31:a1:e4:14:55:bd:53:88:55:fc:6b:
79:da:8e:8b:1c:e7:43:a1:37:80:4c:4d:ae:0c:22:
f2:c9:de:c9:94:6c:80:84:3b:51:2b:05:c5:32:c0:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5B:C2:8E:27:45:7C:AF:BC:20:BF:76:3B:21:1E:B9:29:52:B5:6D
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/jVvCjidFfK-8IL92OyEeuSlStW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.22.0/23
Signature Algorithm: sha256WithRSAEncryption
49:3d:bc:c3:56:7f:e4:bc:5e:60:71:cb:c7:e9:a8:00:75:6a:
e6:98:69:17:01:26:00:0d:14:89:c0:21:9d:48:75:e3:8e:6e:
01:96:f6:49:a7:f9:79:bc:e7:1e:d3:34:fa:de:e9:4e:72:2d:
97:6b:bf:52:36:c4:fc:16:3e:2c:17:91:e6:da:9f:14:ce:0f:
15:89:bc:86:a1:4e:b5:3e:40:e8:4a:24:de:6d:4d:01:dd:16:
8d:ec:d6:db:0d:08:e3:3a:67:99:35:0c:1b:38:80:28:20:b5:
99:3e:f2:af:c5:ac:57:8b:4a:15:b7:da:1a:57:02:c0:ce:37:
12:44:35:1c:b6:c5:9b:c3:a7:2d:8a:86:b6:f9:c8:73:c2:6c:
fb:b7:25:6f:fe:2e:69:d9:12:53:dc:e3:b3:cb:83:bc:7f:9b:
8b:8a:af:04:13:38:dd:76:65:4a:54:c3:de:c1:f0:ba:63:a3:
27:4e:87:b5:aa:7d:4f:ef:7a:dd:19:6e:d7:35:aa:d9:a5:1b:
f5:ef:6b:9e:46:aa:e6:fd:c9:85:88:53:82:1e:06:46:d9:19:
bd:a1:14:21:dd:07:b0:c0:f3:45:a0:49:5e:1f:e2:57:52:fa:
99:74:fe:1a:16:f9:ab:61:0f:fc:f0:a9:ad:8b:c2:71:a9:37:
a5:f4:7b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:05 2026 by rpki-client