Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2JnNLW33UUDkVd4rGKBhX8qxIk4.roa
File: 2JnNLW33UUDkVd4rGKBhX8qxIk4.roa (raw, json)
Hash identifier: YGe8pU1KPvUWVVvWQbSICBOC9J9D0f+GIYYyqSMMMKU=
Subject key identifier: D8:99:CD:2D:6D:F7:51:40:E4:55:DE:2B:18:A0:61:5F:CA:B1:22:4E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1B72CCD245575FFFB288862F330F2B82F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2JnNLW33UUDkVd4rGKBhX8qxIk4.roa
Signing time: Sat 07 Nov 2026 18:02:08 +0000
ROA not before: Sat 07 Nov 2026 18:02:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 403093
IP address blocks: 5.231.50.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b7:2c:cd:24:55:75:ff:fb:28:88:62:f3:30:f2:b8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 7 18:02:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d899cd2d6df75140e455de2b18a0615fcab1224e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:3d:3a:25:b0:3b:d1:43:69:65:f1:9a:94:
89:57:0b:9c:30:38:c4:e2:42:a1:62:40:78:68:da:
86:cb:60:88:ff:22:8c:42:39:b1:ff:23:4d:13:c0:
5d:22:c8:66:6b:99:80:36:7b:4c:9c:8d:d8:55:f5:
0f:1f:c7:c6:39:21:7b:45:c3:a2:78:16:bc:28:e2:
c2:9b:b2:ec:61:fb:f4:06:e2:44:e1:c1:19:d3:ce:
49:37:6e:b5:8f:88:be:bd:53:e3:9c:53:11:04:19:
78:ea:d5:98:60:cd:0c:fd:ec:6f:d1:79:1e:ca:33:
b9:84:3b:fe:94:0f:17:76:cd:b6:36:ea:2a:15:31:
f5:12:49:48:03:2c:f6:da:8b:e4:89:be:ce:41:29:
2e:59:33:97:65:49:6d:5f:34:d6:1d:b2:84:f2:d5:
32:dc:e3:51:f2:e5:42:fb:26:a4:4e:a4:ec:2d:b2:
8b:72:89:f9:8a:ad:e2:00:df:57:21:83:aa:cb:97:
86:1f:b8:51:60:a1:47:17:22:da:86:44:71:30:0c:
f2:34:a6:93:64:3f:4f:68:68:3b:78:bf:93:38:be:
58:5b:a7:41:9d:2e:cb:0a:29:a7:24:20:65:fc:b4:
ac:e4:71:c7:18:61:76:2f:1e:2a:f8:d9:6e:7d:6c:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:CD:2D:6D:F7:51:40:E4:55:DE:2B:18:A0:61:5F:CA:B1:22:4E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2JnNLW33UUDkVd4rGKBhX8qxIk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.50.0/24
89.106.82.0/24
94.249.214.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:75:27:e4:a3:37:e5:ac:b2:58:18:46:35:f6:07:b1:d3:9c:
e0:f7:b9:21:1e:f7:85:29:9c:b5:1e:f8:c1:8e:ab:be:51:6a:
c1:49:8a:31:49:fa:4e:8c:73:8d:ad:4c:f4:4a:6b:ec:4c:35:
ea:32:71:ef:bd:b5:72:dc:69:fe:ea:92:4f:66:e1:41:f6:c0:
b8:6b:69:b3:24:6a:73:66:d3:1e:4f:91:a3:57:29:f5:bf:c8:
e4:1b:74:47:10:27:24:0d:78:4e:76:ff:4b:3f:79:88:36:6a:
9d:96:e1:d4:79:29:d9:48:d8:fb:cb:79:eb:d5:f3:a2:79:c3:
ca:93:a4:81:0f:e1:72:f1:3d:87:16:06:05:8b:21:2a:a8:d0:
15:c2:de:8a:f3:55:e3:e8:cd:a1:ce:21:ae:42:d8:e4:69:6c:
15:24:6c:18:80:1a:3a:c6:6e:bc:a1:91:7f:46:f0:7f:7c:de:
41:4f:67:a5:91:83:e5:cb:60:27:d1:1f:77:ed:4e:0c:ad:1f:
e0:20:ea:4d:91:35:89:8d:44:28:a8:2c:e3:35:13:0c:fd:ee:
13:56:8e:dd:b7:fe:74:33:e4:fc:96:c0:fe:e4:45:75:1f:eb:
56:a0:3f:d0:76:7b:f5:7a:de:e9:a6:8e:5b:47:9c:d5:61:f9:
aa:8f:05:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:56:23 2026 by rpki-client