Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JX_eVEQ4hl6ZoDWaWf33tmfSFcg.roa
File: JX_eVEQ4hl6ZoDWaWf33tmfSFcg.roa (raw, json)
Hash identifier: X/AeH4jsihyTMqI3ZbhwUSvk6SAlMqsu6qlnVK43vO4=
Subject key identifier: 25:7F:DE:54:44:38:86:5E:99:A0:35:9A:59:FD:F7:B6:67:D2:15:C8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0B40C6D2C9F09DFD6D888315E48D200AE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JX_eVEQ4hl6ZoDWaWf33tmfSFcg.roa
Signing time: Fri 18 Sep 2026 10:25:08 +0000
ROA not before: Fri 18 Sep 2026 10:25:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208220
IP address blocks: 81.31.194.0/24 maxlen: 24
81.31.195.0/24 maxlen: 24
87.120.127.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:0c:6d:2c:9f:09:df:d6:d8:88:31:5e:48:d2:00:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 18 10:25:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=257fde544438865e99a0359a59fdf7b667d215c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:b9:83:7f:f4:34:76:50:1c:ce:ac:60:7e:
35:c7:a7:c1:bb:1f:a7:ad:6d:2a:61:85:f5:8c:41:
59:33:47:66:d5:63:0d:81:61:c5:7c:20:2f:93:c2:
4a:f1:93:52:3f:be:ba:2e:97:1e:cc:6e:3a:e6:ad:
71:92:b5:05:7b:31:06:ff:41:53:78:1a:3b:36:50:
86:44:72:7a:2c:d9:99:6b:b8:8b:78:ec:ba:8a:ba:
ba:df:1e:b7:f1:99:93:a3:03:1e:4f:06:7f:22:93:
75:74:03:07:ab:2c:c1:c3:de:1d:4a:48:b9:36:55:
40:b3:03:3a:93:b8:57:43:e4:ae:bc:ac:df:0f:f5:
2f:f5:3e:10:bc:63:3c:7b:b9:2f:b7:9f:b5:1a:26:
fc:31:ce:e0:a7:bd:87:f3:cf:87:aa:e7:e4:01:33:
fc:71:ed:ec:aa:80:d0:70:47:8a:15:e6:92:35:02:
83:c3:09:24:77:99:9a:22:da:fe:c2:6e:51:f4:52:
2e:40:26:ba:54:2d:63:69:c8:0d:ce:b3:a7:94:d1:
bf:ec:04:95:41:26:b1:3e:5b:d7:60:37:d8:6f:f8:
97:60:1f:b6:fa:41:f8:c2:07:ab:38:bb:fb:3d:e1:
ea:e3:77:88:e7:31:a9:ec:9e:84:b1:67:7c:1a:a0:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:DE:54:44:38:86:5E:99:A0:35:9A:59:FD:F7:B6:67:D2:15:C8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JX_eVEQ4hl6ZoDWaWf33tmfSFcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.194.0/23
87.120.127.0/24
94.156.167.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5e:fc:49:95:23:7d:ad:12:2f:fd:d6:c9:3d:e1:25:d6:95:
fb:5a:cf:8b:a1:35:13:19:97:cc:88:d6:4a:c6:c8:02:76:60:
c9:cd:0c:09:f4:18:ef:5d:70:ee:30:02:6e:1b:82:b0:95:fc:
f9:03:d6:12:5c:e2:d2:47:58:ee:21:8d:e3:b3:bf:75:a3:a1:
c0:a7:b5:77:47:1a:28:8c:51:9c:b9:13:0f:32:01:be:67:e0:
4b:5f:9e:49:5f:2a:9c:80:53:a1:6b:37:3e:ab:3c:a8:8b:a6:
66:4f:32:03:6a:e6:be:e9:58:7a:40:36:21:fa:ef:01:5d:4e:
4a:92:1e:47:8a:ff:a3:5f:fb:ea:a0:7c:af:0a:7a:83:f5:86:
ae:55:39:e1:3a:8e:3c:32:35:44:25:e4:d3:27:f5:97:31:7c:
97:29:03:56:35:59:2a:c6:6c:72:24:6a:53:09:24:51:b1:db:
a2:19:ee:ae:29:78:3a:c9:f6:84:46:82:3d:e8:8e:8c:7d:d3:
66:3d:2a:99:a3:7e:3f:d8:3b:58:53:b3:b2:7c:23:55:72:21:
bd:c5:ff:b3:7f:4a:32:39:86:bf:4c:bb:95:f7:3d:5c:17:0e:
1c:f8:86:99:75:30:d0:26:46:8e:9f:33:9a:2a:68:55:5c:15:
5c:dd:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:31 2026 by rpki-client