Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/jEnUatV1_SEhSjb3lDhT-OJx_y4.roa
File: jEnUatV1_SEhSjb3lDhT-OJx_y4.roa (raw, json)
Hash identifier: aVu8qJMaxfh7cIHUjfKGtBtrMLn+MJI16CoDMroLUGY=
Subject key identifier: 8C:49:D4:6A:D5:75:FD:21:21:4A:36:F7:94:38:53:F8:E2:71:FF:2E
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A0667ECAB519168E19DD92AEE410A9AB01
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/jEnUatV1_SEhSjb3lDhT-OJx_y4.roa
Signing time: Thu 03 Sep 2026 08:59:40 +0000
ROA not before: Thu 03 Sep 2026 08:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 206.15.53.0/24 maxlen: 24
206.15.55.0/24 maxlen: 24
206.15.56.0/24 maxlen: 24
206.15.58.0/24 maxlen: 24
206.15.59.0/24 maxlen: 24
206.15.60.0/24 maxlen: 24
206.15.61.0/24 maxlen: 24
206.15.62.0/24 maxlen: 24
206.15.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:7e:ca:b5:19:16:8e:19:dd:92:ae:e4:10:a9:ab:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 3 08:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c49d46ad575fd21214a36f7943853f8e271ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:1f:f0:eb:52:3b:fc:3b:fe:14:95:99:20:
d8:0e:0f:3a:c9:fb:ee:c8:a8:b1:70:d3:f7:22:20:
24:7c:08:22:45:41:90:a5:fa:5c:60:7f:67:ed:d2:
86:ef:7d:dc:11:22:81:75:07:ff:2e:2e:bf:8e:b0:
9b:74:23:8e:7a:64:66:39:10:72:9a:5b:aa:7a:c0:
50:38:63:ff:1a:1e:16:a5:22:d2:4a:21:90:77:8d:
82:18:7d:2f:6d:b8:88:b4:65:e7:cd:9e:32:9a:49:
65:a3:fa:a8:ab:33:38:6d:a0:6a:34:f8:34:0b:13:
5d:55:8e:4b:47:4a:36:08:dc:de:b1:e4:95:22:04:
9a:c7:99:9f:33:e4:0a:47:54:e6:ab:99:32:0d:55:
15:b0:42:33:ce:53:2e:3c:27:63:ae:f3:19:09:4e:
74:7f:ac:4e:dc:95:fa:d2:3f:9e:72:a4:a6:e6:51:
eb:26:00:79:3f:3d:21:0a:c7:2c:51:9a:77:5c:07:
18:7b:d6:ca:56:b2:1d:20:c4:a6:59:ce:0e:62:8a:
80:8e:aa:1e:c5:57:40:6f:f7:22:cc:9d:7d:c5:e5:
98:5c:cd:c8:02:3d:af:0e:d3:93:36:25:10:2b:38:
65:5f:3b:3f:26:37:ea:92:3f:e5:d5:84:cd:e4:4d:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:49:D4:6A:D5:75:FD:21:21:4A:36:F7:94:38:53:F8:E2:71:FF:2E
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/jEnUatV1_SEhSjb3lDhT-OJx_y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.15.53.0/24
206.15.55.0-206.15.56.255
206.15.58.0-206.15.63.255
Signature Algorithm: sha256WithRSAEncryption
34:89:84:22:64:7b:72:7b:83:53:70:87:27:6c:81:ff:bd:86:
bd:84:eb:86:9f:10:78:09:4f:7f:7e:85:48:70:cf:84:43:77:
f5:ad:ef:68:cd:a8:a2:3e:c0:50:28:c2:ab:57:1c:4d:a9:41:
ed:57:e2:e4:ad:c6:ea:09:e8:5a:b2:86:49:2d:2d:be:f2:5c:
64:39:27:45:16:1c:31:0c:64:94:80:20:58:ea:1f:6c:21:70:
9a:30:c0:28:9b:a9:c7:d6:7c:8b:74:6c:fd:b3:4e:8c:68:e3:
22:df:e7:42:a9:0d:2a:ee:83:52:64:79:2f:a3:97:c0:b0:04:
f8:f8:52:03:ec:5e:04:ef:8e:9d:e0:a9:49:ea:7c:6e:4b:fb:
8a:11:63:c7:9f:17:81:6d:af:5d:c5:bb:54:15:e5:40:f5:85:
92:ec:31:a3:e0:0a:c0:2b:76:91:b6:c7:9d:ab:54:ef:86:60:
79:f6:44:fd:a4:27:7c:4d:ff:93:5a:7c:20:4a:0f:9a:7b:c7:
e4:23:8a:df:0d:65:5a:e7:d4:09:bc:61:66:21:05:07:65:90:
5f:14:14:01:57:70:e5:77:01:5c:61:31:2f:77:c2:38:bf:97:
12:54:b5:53:5e:eb:23:4e:77:d7:78:5a:fa:fc:2b:73:31:9c:
5d:82:d4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:26 2026 by rpki-client