Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/jwUITEDlQy87pZEq-SRjBl82u54.roa
File: jwUITEDlQy87pZEq-SRjBl82u54.roa (raw, json)
Hash identifier: HqhHIiWDUiwTfQhbTW0inXFYsA2y/bXGUsSJqG90xro=
Subject key identifier: 8F:05:08:4C:40:E5:43:2F:3B:A5:91:2A:F9:24:63:06:5F:36:BB:9E
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F2369435ECF61A232DBE12F99E42B5D7B
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/jwUITEDlQy87pZEq-SRjBl82u54.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214969
IP address blocks: 45.94.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:43:5e:cf:61:a2:32:db:e1:2f:99:e4:2b:5d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f05084c40e5432f3ba5912af92463065f36bb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:05:69:de:a2:5c:d5:52:fe:f6:25:e3:ec:
ef:f1:1a:66:39:d1:f6:06:27:5a:db:01:d8:f6:f5:
f9:00:33:91:5a:85:c9:cb:46:cf:66:d9:08:8b:99:
ba:49:cc:11:d6:96:37:a0:ff:40:fb:a2:3e:27:8c:
3c:44:6a:2d:51:d7:ab:55:89:2a:e8:4d:6d:4e:8b:
44:c5:92:fe:9d:90:9c:75:c4:58:c8:52:aa:a0:8a:
5c:c1:f5:ea:68:9b:5c:00:da:56:61:46:d8:0c:71:
f6:36:82:01:e9:7b:4a:10:c4:d4:8d:6d:6f:e3:a8:
2a:96:75:5e:1c:d3:b8:d7:64:ff:d5:4d:d5:bf:7b:
6a:74:ac:82:5c:8d:9d:2a:70:a2:69:80:9a:33:fe:
28:f2:fc:88:10:79:57:b2:60:9b:b1:03:20:f2:07:
08:10:69:95:df:e1:fe:16:a0:1f:be:b4:88:20:01:
d6:0a:54:8f:a3:79:71:5b:55:b2:70:c1:5f:fe:e2:
b6:14:1a:d7:2e:88:3b:cc:bc:83:29:94:66:18:f7:
fc:90:9f:23:84:54:f1:89:04:c4:ae:c3:5b:7f:cb:
0f:93:a7:ed:79:30:c0:96:2d:89:de:12:0a:96:42:
3a:b8:c2:da:04:ae:51:9e:e5:52:9f:39:d1:93:20:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:05:08:4C:40:E5:43:2F:3B:A5:91:2A:F9:24:63:06:5F:36:BB:9E
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/jwUITEDlQy87pZEq-SRjBl82u54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9a:0a:d8:3e:26:6c:21:49:46:23:a0:c5:c8:2d:61:84:d6:
1a:b9:45:a5:61:de:6d:81:42:68:dc:49:95:97:49:ef:35:46:
53:93:d6:97:f9:53:1d:61:13:f4:ac:c4:15:fc:40:75:90:1b:
75:c5:8f:06:fd:5c:b5:be:14:7a:3d:eb:cf:55:bf:4a:5d:a8:
a1:5e:dc:a5:6b:4a:15:d9:78:7e:10:3f:36:be:e7:af:9d:86:
ed:13:15:dd:6a:78:eb:94:52:4c:66:aa:8b:a9:b9:83:ef:e0:
75:dd:e7:6d:57:86:aa:83:b6:f3:75:57:a5:a1:07:5e:cd:6b:
e8:43:5a:3a:2e:57:8e:ab:14:23:71:97:9f:c0:90:9b:b4:e8:
3e:1d:30:8a:c6:b0:ee:af:e6:7c:85:9c:35:4a:9d:b7:da:5e:
98:58:bd:98:33:0f:b6:b5:35:1d:77:45:40:76:f9:33:6d:4f:
79:2e:3b:bf:da:1e:8d:27:11:68:26:4b:6e:8f:5c:69:b2:22:
9e:8e:25:ec:00:c6:f8:f3:ac:a6:c1:3b:91:d0:54:9d:c6:e1:
0a:5a:3b:8d:6f:24:71:c4:49:71:04:e5:a2:5d:33:d6:3c:c7:
02:3f:5a:3f:79:7c:67:8c:a9:33:eb:99:e1:e5:60:f3:be:6d:
b4:2d:e5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:50:56 2026 by rpki-client