Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/JGd-JNT1bvqX7nRNs_RaqRso_q0.roa
File: JGd-JNT1bvqX7nRNs_RaqRso_q0.roa (raw, json)
Hash identifier: /y4lw4ZJYEClXfjvdNMWCljoBImeZGZj9ri3IKKGhG8=
Subject key identifier: 24:67:7E:24:D4:F5:6E:FA:97:EE:74:4D:B3:F4:5A:A9:1B:28:FE:AD
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825A3927C2B0ACAF418278DA6042C9
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/JGd-JNT1bvqX7nRNs_RaqRso_q0.roa
Signing time: Tue 25 Aug 2026 15:20:39 +0000
ROA not before: Tue 25 Aug 2026 15:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218964
IP address blocks: 139.28.212.0/24 maxlen: 24
139.28.213.0/24 maxlen: 24
139.28.214.0/24 maxlen: 24
139.28.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:5a:39:27:c2:b0:ac:af:41:82:78:da:60:42:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24677e24d4f56efa97ee744db3f45aa91b28fead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:6b:80:bf:7e:fb:c4:71:4e:fe:65:0b:0d:
5b:cd:1c:64:1c:3d:72:a4:54:2e:5e:af:e7:2d:38:
35:f1:f6:31:26:29:8f:70:b6:a0:ef:d2:65:9e:18:
4f:fe:5d:f9:34:aa:cc:15:c7:ee:fb:fa:6a:1d:5f:
c5:a8:a0:f2:59:75:05:03:b4:89:74:74:ef:7a:87:
d6:37:49:2d:a2:a9:47:3a:b0:20:15:e1:19:ca:a2:
cf:3d:99:b7:af:f2:ec:95:52:29:18:1b:62:29:09:
c9:fe:59:b9:8e:e3:52:2d:12:70:f4:3e:13:cf:3d:
79:24:14:25:99:40:ae:6a:13:44:7d:6a:4f:e8:83:
4b:0b:65:02:4a:2a:ce:82:84:18:10:1d:56:26:b7:
db:3a:ec:28:ac:5f:fd:e9:98:0e:85:5a:d9:26:db:
c5:11:4e:22:cd:d5:1b:d7:ac:6e:e2:a9:44:7d:ae:
36:bb:ac:32:fe:e3:87:bd:66:e6:58:20:46:a5:22:
33:5b:58:5b:ad:60:29:8a:2a:75:6e:83:a4:d6:ed:
6c:34:03:cb:87:ba:dc:ff:7c:c8:52:53:d7:86:f2:
d7:77:af:4e:80:21:71:63:ad:36:11:b3:8f:47:22:
84:ea:de:8e:b0:cd:82:c9:e8:d8:02:83:83:d2:20:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:67:7E:24:D4:F5:6E:FA:97:EE:74:4D:B3:F4:5A:A9:1B:28:FE:AD
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/JGd-JNT1bvqX7nRNs_RaqRso_q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:c2:41:a7:d2:d1:61:9a:5b:d5:78:1f:1c:ce:48:1b:d5:37:
32:31:b7:a9:f4:e7:71:31:99:63:f3:2e:b4:78:3e:27:ab:97:
21:cd:d7:4d:ff:06:4a:ca:90:cc:47:e3:07:4b:1f:e5:5b:d7:
1c:63:f2:6b:54:49:60:f6:49:44:c4:22:44:d0:d8:70:2b:a9:
c3:85:d0:54:fc:f2:f3:5a:b5:50:4a:2b:2d:8b:6b:d6:a3:81:
8c:89:61:71:02:7e:f9:b8:20:e9:b0:5c:19:9f:f4:8d:57:d8:
8b:d3:bf:39:7c:4a:c3:3b:f2:65:c0:f7:e0:e1:ed:b1:3c:9f:
8e:3a:8f:e3:d7:be:63:2f:b2:b0:51:af:30:29:de:3f:68:91:
1d:76:1e:bd:b5:08:68:87:a1:2b:9c:2c:31:be:89:62:72:0f:
75:72:7a:70:f6:6d:57:01:c9:07:5f:ca:3c:57:a9:37:ff:71:
73:1f:4f:5a:4c:eb:83:f9:35:7e:a0:9b:90:4f:12:7d:0b:1e:
ee:97:fb:25:5c:b8:ad:1a:58:87:fd:52:7a:bc:6f:0c:b0:b8:
1d:5c:1b:c4:75:47:f6:41:fa:9e:11:73:44:21:cc:3d:94:35:
ea:63:98:63:ec:ee:6d:f6:4b:f2:dd:e7:cd:c3:a8:38:28:90:
26:f7:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:11 2026 by rpki-client