Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Jbnk91CXp24k71fY45YI8A6qCqU.roa
File: Jbnk91CXp24k71fY45YI8A6qCqU.roa (raw, json)
Hash identifier: M5uf8MYOII8bPGQRYUZSbGVYURTBQ6Lxd3uvbUHUY3g=
Subject key identifier: 25:B9:E4:F7:50:97:A7:6E:24:EF:57:D8:E3:96:08:F0:0E:AA:0A:A5
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A154554D6A17797E5E5FC4CFC60D324638
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Jbnk91CXp24k71fY45YI8A6qCqU.roa
Signing time: Mon 19 Oct 2026 13:23:58 +0000
ROA not before: Mon 19 Oct 2026 13:23:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214374
IP address blocks: 193.233.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:55:4d:6a:17:79:7e:5e:5f:c4:cf:c6:0d:32:46:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 19 13:23:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25b9e4f75097a76e24ef57d8e39608f00eaa0aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:13:d8:f4:fd:c0:8a:f0:56:a9:97:83:ec:
3d:0b:3a:8e:b5:c7:c4:e8:a5:5c:7b:25:63:e9:8f:
31:b8:ae:6b:e3:ce:c1:27:46:75:7a:68:af:62:ff:
58:da:14:de:c6:0b:50:f6:67:d3:e8:92:f8:54:b3:
63:75:0a:2b:26:11:40:f9:27:ee:98:03:70:a7:a0:
18:7b:99:bc:99:3f:ba:74:a5:59:9a:c2:7e:9f:43:
6a:f7:62:a4:dc:74:a9:3b:48:dc:f1:bd:47:2e:76:
43:0f:b1:f3:1f:1d:ff:d9:ba:b6:58:a6:b5:83:0b:
3d:61:65:02:c2:e6:6a:60:93:c8:27:97:84:9f:c9:
12:7d:38:d5:1b:91:34:72:8f:16:ec:ab:ed:30:be:
dd:f4:09:b1:ff:f0:5a:13:6b:60:c6:4d:20:13:d7:
63:8b:7d:29:79:cb:ae:b0:e2:43:20:9e:cb:3e:16:
26:b9:cb:70:15:10:30:eb:48:25:da:9a:1e:ab:60:
33:c2:72:da:4c:76:0b:d6:f7:25:b2:f7:ec:b7:b9:
cb:92:77:7d:c2:6a:30:60:ff:0d:be:f1:45:a8:73:
98:21:59:cc:26:ef:c8:5a:2a:1f:38:a9:cc:97:cc:
ad:84:ed:c6:89:ed:af:10:73:ec:11:9c:7f:f8:d7:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B9:E4:F7:50:97:A7:6E:24:EF:57:D8:E3:96:08:F0:0E:AA:0A:A5
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Jbnk91CXp24k71fY45YI8A6qCqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.140.0/22
Signature Algorithm: sha256WithRSAEncryption
68:a1:1e:5c:67:12:aa:25:3e:a2:56:f0:04:e7:04:21:c3:d3:
ae:bf:cc:06:6e:40:58:98:8a:34:e5:c4:62:0b:0c:ef:ba:7e:
db:42:eb:ae:2a:29:c3:bd:2d:71:8a:6d:ac:94:45:8c:b9:71:
6a:fa:74:ad:03:76:5a:d9:a4:a9:81:50:99:d8:f4:17:d9:2c:
68:e5:a1:99:fa:be:35:f0:17:17:34:a1:4e:34:89:fd:40:1b:
08:75:b3:76:1a:1b:24:45:72:7f:fe:f2:5e:3c:c5:bb:d6:f9:
92:fa:4b:01:03:4e:d2:ed:7e:28:6c:42:29:f0:a0:11:9b:87:
52:14:14:bc:7c:76:fa:c7:95:bb:41:89:b9:fa:29:a3:b2:90:
4e:bc:a3:05:6f:5a:d6:12:6f:65:38:54:e0:6c:d2:b2:58:f3:
28:f8:92:a6:93:a7:e8:72:92:b5:b4:36:fc:af:bf:32:c1:18:
de:fb:f3:70:7a:55:72:6c:87:0e:81:49:c3:f7:05:97:b9:8e:
f9:2b:13:67:3d:15:35:85:c1:c0:d7:d8:25:19:fd:f0:f7:e4:
95:96:ab:e7:19:2d:40:54:6c:da:41:59:c7:c2:1e:6d:6c:e2:
2d:cf:b8:e3:d7:19:90:36:75:d1:c9:7a:60:6f:8a:99:4d:b7:
59:60:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:19 2026 by rpki-client