Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/joIcOJETp2NzSdFDbKnUXZLmyLQ.roa
File: joIcOJETp2NzSdFDbKnUXZLmyLQ.roa (raw, json)
Hash identifier: Ak3/H/aVrrB0+tQyw+9XlYgSUcekWn7CfQZZDNkj274=
Subject key identifier: 8E:82:1C:38:91:13:A7:63:73:49:D1:43:6C:A9:D4:5D:92:E6:C8:B4
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 01A1348E6C98DFD1BAF3529A5A783F762FE1
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/joIcOJETp2NzSdFDbKnUXZLmyLQ.roa
Signing time: Tue 13 Oct 2026 09:18:31 +0000
ROA not before: Tue 13 Oct 2026 09:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209007
IP address blocks: 45.11.42.0/24 maxlen: 24
45.11.43.0/24 maxlen: 24
185.188.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:8e:6c:98:df:d1:ba:f3:52:9a:5a:78:3f:76:2f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Oct 13 09:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e821c389113a7637349d1436ca9d45d92e6c8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:ec:8c:8f:58:90:ff:30:b6:91:73:aa:ba:
aa:f7:b2:0b:9e:de:53:e1:24:d7:e2:ac:3b:b6:32:
01:57:9d:0b:4d:5c:10:13:cd:b8:3a:74:a7:4e:cf:
0b:07:6e:e7:82:17:65:d7:ff:2e:06:b3:bf:69:2e:
c9:39:3d:70:3a:e6:cd:24:e1:58:1f:5c:ab:49:1d:
2d:3d:91:fe:a7:22:e3:bf:f8:fc:ba:89:5d:1b:f5:
00:71:99:4d:63:dd:35:5b:e9:80:d4:93:62:6d:dc:
1b:be:a1:ef:7c:3f:51:2f:42:87:ab:73:e7:ae:2a:
09:1a:93:42:a3:c3:d2:2f:a5:3a:0c:ec:f0:24:16:
57:28:33:3a:76:69:67:1c:23:d5:39:88:e8:25:02:
15:41:78:e2:6f:10:a3:e8:95:21:5e:29:3c:07:06:
a7:ff:a5:da:b6:51:6c:81:53:05:7d:59:02:8e:32:
2d:b2:32:68:64:40:d9:3b:bc:d9:dc:fc:73:95:29:
f6:9a:ad:a0:15:f4:77:0f:bd:f0:f9:95:d0:ed:e1:
e7:dc:8e:50:b3:12:98:eb:35:f8:67:87:8b:3d:6a:
68:9c:bf:49:ca:84:29:02:6e:03:85:eb:09:36:d7:
23:78:0c:3c:18:32:f1:16:ab:c5:19:28:6f:64:9d:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:1C:38:91:13:A7:63:73:49:D1:43:6C:A9:D4:5D:92:E6:C8:B4
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/joIcOJETp2NzSdFDbKnUXZLmyLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.42.0/23
185.188.29.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ff:1f:de:f7:ab:5f:74:25:ad:8f:b3:f2:0a:42:5a:27:aa:
dc:c6:ad:db:12:69:48:1d:b7:6a:ae:44:97:d1:d6:b8:e8:6d:
7b:63:d2:5b:d3:15:55:7f:a6:ad:44:5f:8f:f1:c6:7e:94:34:
81:d7:62:54:66:c2:55:dd:c5:d5:66:4a:3b:3f:2e:44:de:76:
54:f1:f0:b3:d9:9f:6e:98:12:5d:d6:55:b1:c1:19:0e:bf:c9:
17:8c:b5:80:4f:f9:64:27:ab:25:1a:d0:66:2b:1a:c7:f8:b6:
e2:dd:dd:5c:3c:d3:a8:da:35:0a:a1:55:1c:8f:89:3a:7a:30:
89:2b:10:a9:da:90:43:61:ea:ac:0d:74:d1:2a:a8:39:0c:88:
13:6e:8f:df:18:01:f2:8e:3b:a1:f7:46:88:96:29:5a:d5:17:
6e:b5:87:e1:fd:d9:62:69:9b:e2:9a:01:cd:c1:d2:de:ca:70:
4a:c0:b6:22:52:f1:d8:1e:1d:60:c3:5e:83:63:8a:06:51:45:
ea:86:c7:18:2a:e6:ac:93:bd:b2:64:ae:56:69:d9:b1:19:0c:
0d:56:27:f2:a2:3f:db:59:69:4a:3b:cd:9a:1b:30:87:ce:d6:
60:e5:a0:de:97:0f:7f:65:8f:59:37:83:dd:25:a0:6a:e8:a9:
5a:4b:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:53 2026 by rpki-client