Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jizoxosQSTJ5-V846UhzrFybNP0.roa
File: jizoxosQSTJ5-V846UhzrFybNP0.roa (raw, json)
Hash identifier: WC7sGtpdWLh0jzPyJwTkr3UUmEQSFveDVXO2/YvbgNA=
Subject key identifier: 8E:2C:E8:C6:8B:10:49:32:79:F9:5F:38:E9:48:73:AC:5C:9B:34:FD
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A163BE21CECA1A32685FCDF97D6E80C78B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jizoxosQSTJ5-V846UhzrFybNP0.roa
Signing time: Thu 22 Oct 2026 13:12:47 +0000
ROA not before: Thu 22 Oct 2026 13:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219502
IP address blocks: 89.251.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:be:21:ce:ca:1a:32:68:5f:cd:f9:7d:6e:80:c7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 22 13:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e2ce8c68b10493279f95f38e94873ac5c9b34fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:e3:9e:f7:54:a3:6f:d4:5b:5c:0e:2d:fe:
32:84:ee:8e:37:fd:4f:b2:2f:35:8c:7c:ff:29:44:
e3:0b:54:38:2a:44:bd:cd:d0:20:19:7e:e4:e1:ff:
67:40:75:cb:0a:82:5b:04:76:19:93:5d:64:ee:3f:
8a:e7:06:46:95:f5:ba:65:43:00:79:25:6a:fe:51:
fe:7c:2b:a7:77:aa:2e:e7:2f:5f:48:d8:b3:cd:99:
98:45:51:bf:58:99:f3:a9:82:05:4c:9e:51:43:86:
72:a9:27:64:0c:c3:c5:bc:68:4e:bd:4f:77:11:e2:
45:59:af:2d:69:d4:5c:c5:4f:b8:dd:26:c4:21:b9:
ca:42:e2:f6:37:a3:02:c7:3d:af:57:d7:22:c3:43:
25:d1:9b:d4:e9:56:ed:ea:09:f9:59:07:f4:3b:de:
52:a8:22:5c:5a:10:5e:34:a2:f5:4b:51:b5:60:9d:
01:dc:5d:15:b8:0b:15:fd:1e:50:a9:ad:9a:64:7a:
46:d4:e9:0c:1b:18:19:80:25:56:98:08:74:22:fa:
c5:2b:74:3a:80:02:07:74:c1:c7:34:08:f7:5f:1e:
3d:a1:ec:f1:04:4d:e3:fe:17:35:f1:55:a0:73:02:
73:c0:2c:77:06:d6:53:c4:19:9b:9a:04:a0:a9:b4:
0c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2C:E8:C6:8B:10:49:32:79:F9:5F:38:E9:48:73:AC:5C:9B:34:FD
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jizoxosQSTJ5-V846UhzrFybNP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.29.0/24
Signature Algorithm: sha256WithRSAEncryption
46:05:c0:b2:2c:52:c9:97:ed:d7:d3:c7:62:59:db:00:bf:aa:
29:6a:ac:bc:bd:08:8a:d0:95:ab:4e:0d:bc:21:c8:2b:cc:84:
42:5e:71:61:93:30:db:45:05:60:a9:5b:9e:66:0a:fc:16:52:
01:39:5e:31:fa:27:d2:f7:33:7c:f4:67:d6:52:a8:23:51:12:
fb:21:4c:9e:5f:41:f2:16:44:40:16:15:41:76:df:d8:78:4b:
cb:44:25:29:26:81:76:cb:78:01:76:83:fe:ad:7f:29:bf:31:
50:9b:be:79:17:f4:c1:f4:65:d7:5b:05:6c:91:a6:17:c1:8e:
36:c8:ff:78:84:a2:08:cc:ba:6a:66:bc:0f:0f:69:80:05:e3:
58:68:65:ed:d4:2d:f1:0c:b9:79:c3:5e:d6:d2:f2:22:e4:f2:
73:58:fc:13:40:9d:be:7e:41:c2:8d:24:41:e0:f1:60:aa:de:
64:e2:0f:55:dc:19:a7:90:bb:a8:2f:de:e6:52:30:e6:dc:16:
0a:63:38:97:30:fd:22:90:0a:9c:43:b3:1d:16:4c:2c:a3:59:
7e:f3:54:0d:b5:f7:59:be:ed:86:d7:e2:40:fd:f1:c8:5c:91:
ae:25:8a:2e:a4:99:eb:a4:58:25:bf:51:db:44:9c:58:11:36:
c5:0b:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:57 2026 by rpki-client