Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/jLVj4ZuhR3JjaH9_akwcJaOeELU.roa
File: jLVj4ZuhR3JjaH9_akwcJaOeELU.roa (raw, json)
Hash identifier: +w5/PZnUrLcDHdlbnvjMR4b0JCAiivJMC3bjJohn0gY=
Subject key identifier: 8C:B5:63:E1:9B:A1:47:72:63:68:7F:7F:6A:4C:1C:25:A3:9E:10:B5
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6A14590271CE7AF7A16C6D9559D532C
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/jLVj4ZuhR3JjaH9_akwcJaOeELU.roa
Signing time: Thu 01 Oct 2026 08:42:39 +0000
ROA not before: Thu 01 Oct 2026 08:42:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138190
IP address blocks: 82.144.171.0/24 maxlen: 24
2001:1aa1:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a1:45:90:27:1c:e7:af:7a:16:c6:d9:55:9d:53:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:42:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cb563e19ba1477263687f7f6a4c1c25a39e10b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:0d:ce:b9:c1:a7:51:57:80:35:b8:ac:8f:
70:a5:e6:f9:dd:eb:51:c1:e4:30:2b:ba:95:93:e5:
78:e4:41:3a:7d:06:a2:48:26:a3:b9:a3:e8:01:2a:
81:d6:56:5b:4b:21:a7:34:2f:9c:86:8b:09:e7:da:
a0:38:22:ff:1e:b2:91:53:85:36:51:3c:7c:70:13:
3a:d5:f5:1b:a6:a6:69:2b:83:6f:15:6b:21:70:7a:
60:d7:4f:f6:4c:b0:e4:04:d4:24:28:75:20:57:10:
e3:34:70:52:96:da:9f:f8:1d:84:91:96:9a:20:9e:
6f:6c:9d:f4:1f:7a:23:c2:ef:59:44:2b:00:5a:11:
6d:53:f0:c3:60:55:9a:fa:28:0c:57:fd:80:5a:66:
c7:99:2d:cf:bd:1b:d6:6f:5a:d1:e9:15:7c:49:9b:
74:2e:22:e3:9e:67:36:cd:ec:b9:f9:b8:21:fd:16:
76:7d:2b:68:c5:ee:d7:a2:94:37:99:ce:c3:52:fb:
68:ae:e2:11:64:90:d3:a3:a9:c3:47:e4:12:62:83:
e5:98:8a:45:f0:f6:8a:17:9e:0e:6b:8e:54:df:ac:
5e:e9:2c:45:7f:7c:d9:52:81:b7:97:b7:78:36:c3:
56:50:fa:9c:0b:37:b8:2e:f6:de:bc:44:b1:c0:f6:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:63:E1:9B:A1:47:72:63:68:7F:7F:6A:4C:1C:25:A3:9E:10:B5
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/jLVj4ZuhR3JjaH9_akwcJaOeELU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.171.0/24
IPv6:
2001:1aa1:22::/48
Signature Algorithm: sha256WithRSAEncryption
9d:11:96:89:38:ba:93:ac:d0:56:a8:b4:41:21:05:d7:e4:13:
0a:77:10:0b:27:33:37:f8:bd:b6:45:a4:60:9f:f1:c3:9f:28:
6c:8a:91:2d:7f:05:ee:4d:5c:d4:43:aa:04:01:f2:93:4f:41:
fc:bd:dc:59:62:6f:dc:71:a0:20:a6:a2:98:71:94:45:5b:64:
40:6a:10:a0:8d:f2:f2:f8:6c:d9:57:16:b1:08:30:53:35:dc:
01:3d:51:e0:ba:ed:c7:c0:fc:93:f2:03:a1:ec:11:9d:5a:23:
49:13:07:70:85:54:a4:a5:6c:ab:46:db:81:46:9f:c4:60:00:
a1:02:dc:bd:84:0f:fd:89:f9:f9:c6:56:26:a1:41:13:c7:3e:
3f:d0:a2:fd:d1:94:69:0f:90:c2:6e:ee:b2:1f:48:41:0c:15:
c5:e7:07:7a:ad:88:fd:57:26:b7:42:b3:36:ea:34:c2:1c:44:
f2:3d:ad:91:17:9e:08:56:e5:68:8c:4d:3b:0a:27:b0:64:19:
19:01:6c:87:55:da:71:47:e0:c9:46:34:ce:e3:b9:72:be:37:
7e:b6:a0:2f:61:e6:57:ac:63:92:d9:e7:c4:8d:f6:fa:8c:26:
52:e4:dc:70:b9:f1:3b:ec:f2:11:00:e8:3c:a7:14:40:41:08:
cc:84:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:22:25 2026 by rpki-client