Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/jqhUhXsXQ7K_u96jgICzFnHVPOs.roa
File: jqhUhXsXQ7K_u96jgICzFnHVPOs.roa (raw, json)
Hash identifier: kW+05Jp9vvcHZC0AH3oTIkMPyOVVPYOcmWNG/K5yRoI=
Subject key identifier: 8E:A8:54:85:7B:17:43:B2:BF:BB:DE:A3:80:80:B3:16:71:D5:3C:EB
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01A0CD4FB289546797FA6E27A79B91C896A4
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/jqhUhXsXQ7K_u96jgICzFnHVPOs.roa
Signing time: Wed 23 Sep 2026 08:09:07 +0000
ROA not before: Wed 23 Sep 2026 08:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 94.154.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:4f:b2:89:54:67:97:fa:6e:27:a7:9b:91:c8:96:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Sep 23 08:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ea854857b1743b2bfbbdea38080b31671d53ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:d2:23:ed:89:ac:fe:1d:32:29:ac:3e:27:
33:73:7c:e5:46:95:f7:1a:b7:e1:b5:b8:fd:c7:f0:
59:98:5c:87:23:02:b7:e1:c2:7e:6a:6f:71:66:0a:
03:96:7d:6b:60:99:0e:e6:e6:aa:38:d2:a1:01:37:
01:19:f0:1f:79:3a:91:9d:00:5f:9e:68:d0:3a:c9:
3d:b7:ee:e9:c8:3d:03:e4:82:c2:00:a8:c5:ce:af:
9e:ef:d3:17:d3:db:86:f9:d8:0d:a6:f6:6b:73:d2:
da:87:6c:26:74:5b:e7:5b:ca:62:eb:63:cd:05:18:
7f:72:e0:ec:9c:f9:9a:17:83:7c:64:a5:57:2c:1b:
66:e8:e7:c2:db:b8:ed:5d:c6:50:e8:58:dd:97:09:
ec:a6:0b:d1:8f:0c:33:ba:fb:24:4f:e4:fa:fa:fe:
45:74:46:2c:52:f7:4b:1b:2c:2c:0d:48:0f:44:7b:
c3:99:ca:c0:dc:5c:9a:ce:b5:70:ab:81:1c:a4:f3:
4c:ce:ed:96:44:d7:f4:07:c0:80:ef:30:19:e3:b5:
86:18:f5:24:8f:03:ca:72:60:3d:7a:77:30:11:e0:
b9:cd:fd:6f:17:ae:d9:80:d2:e7:65:fb:45:35:60:
80:29:8a:cc:cf:aa:96:63:59:f4:47:79:ec:b4:a5:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:54:85:7B:17:43:B2:BF:BB:DE:A3:80:80:B3:16:71:D5:3C:EB
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/jqhUhXsXQ7K_u96jgICzFnHVPOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.45.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b0:ee:2f:23:02:b3:7f:e6:ca:fd:ff:2c:b4:8d:93:94:fd:
47:9a:57:6f:d0:30:d7:8f:3a:2a:fe:9e:c5:b2:f3:58:0f:1b:
a2:32:d1:90:6e:15:2b:7d:22:13:49:7a:f2:6f:f6:8d:bc:77:
0f:0d:4e:f9:97:eb:b9:86:38:f6:34:9c:45:27:e4:51:e5:88:
53:85:89:d7:90:b6:5f:40:e7:21:dc:0f:67:a8:c3:f5:4f:ea:
95:db:c2:b9:4c:7c:b2:98:17:82:ff:88:4d:9a:84:a6:8b:54:
83:ad:0d:d9:37:ad:cb:d4:10:64:a9:84:97:37:1b:d1:cd:7b:
81:96:4f:2f:ab:cc:d5:2b:f2:1f:a7:10:be:72:40:c4:25:d3:
85:ca:3b:d8:c1:f5:f9:18:92:20:88:f8:67:27:99:8e:25:11:
f4:9b:e1:ff:ab:e1:5c:71:e4:ce:94:45:96:f1:ce:7d:e7:45:
41:91:43:ca:d6:2b:3a:85:98:bc:32:9d:2d:ac:06:56:63:ca:
bd:86:2e:6b:64:cf:20:80:a4:93:06:b2:7d:85:14:f7:7b:8a:
a0:ab:2a:4f:b4:50:8f:f8:b5:52:e2:95:2e:b5:7e:42:6d:f9:
65:47:52:28:f6:c8:fa:78:fb:22:52:2c:b7:83:25:e9:b4:d0:
77:16:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:29:03 2026 by rpki-client