Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/JvuP52u49nS5V6IMZISRawwAmk0.roa
File: JvuP52u49nS5V6IMZISRawwAmk0.roa (raw, json)
Hash identifier: gX2rm16o1te3H0IUA5THl3W4lAqtMPAhLGlk7BuJ2hY=
Subject key identifier: 26:FB:8F:E7:6B:B8:F6:74:B9:57:A2:0C:64:84:91:6B:0C:00:9A:4D
Certificate issuer: /CN=e589279269cc363a6da2e60aed3f1a850310169f
Certificate serial: 01A0634151FA6CAFE307F81C404E5B6D9AAA
Authority key identifier: E5:89:27:92:69:CC:36:3A:6D:A2:E6:0A:ED:3F:1A:85:03:10:16:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/JvuP52u49nS5V6IMZISRawwAmk0.roa
Signing time: Wed 02 Sep 2026 17:53:40 +0000
ROA not before: Wed 02 Sep 2026 17:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213024
IP address blocks: 213.110.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:41:51:fa:6c:af:e3:07:f8:1c:40:4e:5b:6d:9a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e589279269cc363a6da2e60aed3f1a850310169f
Validity
Not Before: Sep 2 17:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26fb8fe76bb8f674b957a20c6484916b0c009a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:b2:8a:42:86:b4:08:6d:5e:08:ae:89:00:
93:fe:f8:cc:38:fa:08:b5:eb:d8:e2:f5:ad:d3:a0:
28:22:ab:df:bd:1c:70:0f:f4:65:0c:1c:38:15:e5:
38:a8:9c:86:70:44:eb:c8:2b:17:12:a4:ec:f7:3c:
08:85:1c:b4:20:bb:9a:96:42:71:a5:a7:f6:bd:5d:
87:77:06:d7:96:c5:90:bd:ac:94:26:6a:f1:08:c0:
c1:2f:cd:b6:30:0b:32:77:32:ea:71:d0:ac:17:c5:
52:a0:aa:07:b9:ca:5a:af:38:75:21:a1:52:53:ce:
fc:b3:6d:fe:2a:82:6d:ee:6b:86:df:a1:16:fd:d4:
bf:e0:62:18:90:4f:5b:4a:e7:a7:0e:b4:ea:ea:9e:
a0:11:25:cf:e8:9c:64:b8:e1:d1:63:da:a0:58:57:
c9:2c:b3:d6:06:99:9d:94:fd:ce:f9:4e:4e:7f:c6:
08:c2:72:01:71:ed:cc:96:89:e9:f7:26:ee:74:3f:
56:69:3f:e4:97:60:12:cf:85:a4:fc:ac:b5:07:af:
2e:30:50:91:43:ad:c4:4e:2c:b3:7d:06:40:63:e5:
d5:a3:d3:82:b5:75:a6:3a:de:ac:51:ce:c4:f9:04:
c5:63:a8:21:71:1e:ea:1e:7f:45:e4:ce:d9:ff:b6:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:8F:E7:6B:B8:F6:74:B9:57:A2:0C:64:84:91:6B:0C:00:9A:4D
X509v3 Authority Key Identifier:
keyid:E5:89:27:92:69:CC:36:3A:6D:A2:E6:0A:ED:3F:1A:85:03:10:16:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/JvuP52u49nS5V6IMZISRawwAmk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.110.126.0/24
Signature Algorithm: sha256WithRSAEncryption
45:01:20:bc:d4:e0:6c:73:2c:f8:01:0c:cd:7f:66:f3:6c:11:
83:ae:09:f9:b3:d5:03:44:43:c3:41:38:12:74:8d:59:e8:bb:
a9:f2:94:ce:3c:3e:82:d9:06:d6:0d:7c:13:4e:5b:0d:55:b3:
89:de:d0:82:7f:ed:38:30:5c:e8:f6:34:cc:23:45:40:d9:ac:
99:30:12:a8:c6:d3:f5:c6:25:76:d4:1a:eb:f9:7a:58:2f:f4:
21:88:32:d7:63:ad:1f:f6:02:5f:db:8f:0f:08:e1:b7:48:af:
7c:6d:88:1c:c9:44:de:34:52:96:b4:c8:4d:55:49:67:9e:8b:
85:bd:5e:1c:2b:8b:16:b9:28:0e:fd:03:23:4a:02:b0:d8:53:
b1:5d:b2:27:9e:72:6d:fd:a5:54:f1:a9:3f:13:74:c0:11:f0:
e4:f2:e3:5f:2d:75:f5:ce:21:7f:12:24:23:95:4e:f3:0e:e0:
df:84:86:1d:6e:35:93:65:6d:d4:3a:56:d4:59:90:f8:93:24:
28:ec:4e:44:0d:33:07:40:2d:4d:e3:ed:16:4a:b5:4e:91:80:
09:4b:71:40:9e:46:e7:50:ca:ea:37:0c:ec:5e:53:22:4c:03:
1c:bd:b0:94:fb:6f:7a:1a:7c:69:62:cc:58:a2:64:3e:1a:df:
34:5f:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 08:24:38 2026 by rpki-client