Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/JNGByvLCORoDL8wNxU-JXMLAuV8.roa
File: JNGByvLCORoDL8wNxU-JXMLAuV8.roa (raw, json)
Hash identifier: SkjekIzqohFRMggCiY1ZIbCi2ZI//ytV86ZiBkiCJgo=
Subject key identifier: 24:D1:81:CA:F2:C2:39:1A:03:2F:CC:0D:C5:4F:89:5C:C2:C0:B9:5F
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DBF1A06544F808416E50E7A993CE50300
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/JNGByvLCORoDL8wNxU-JXMLAuV8.roa
Signing time: Fri 24 Apr 2026 10:47:26 +0000
ROA not before: Fri 24 Apr 2026 10:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133944
IP address blocks: 160.19.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:1a:06:54:4f:80:84:16:e5:0e:7a:99:3c:e5:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 24 10:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24d181caf2c2391a032fcc0dc54f895cc2c0b95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:40:8d:c6:c9:e7:df:d0:22:1e:d7:06:95:
24:ed:9c:81:69:5f:73:da:a0:f1:4c:0d:aa:de:90:
89:60:1b:c2:07:82:7c:84:11:32:2b:cc:f6:d5:61:
03:3e:1e:8b:cd:97:b5:70:e5:b4:33:bc:df:93:1f:
c4:a2:63:46:0e:88:2a:80:66:8c:9d:6e:7b:16:6d:
32:f4:7c:e8:de:01:ad:5b:f3:cf:de:b5:44:00:22:
b5:7f:6c:8b:55:f8:9e:22:e5:2a:e2:05:f0:09:cb:
80:d8:29:be:f2:ae:1d:0a:3c:01:03:c6:00:f1:e3:
10:b2:2f:88:98:3e:e0:d9:58:f2:41:4a:54:4c:79:
ed:7d:17:45:2f:1a:9c:02:f4:7e:f3:93:90:c9:17:
0b:49:03:a6:1b:bf:48:50:f3:6e:8b:f7:7e:e8:dc:
43:55:11:1e:0d:5a:20:dd:93:d8:dd:68:4d:22:5c:
f8:70:ee:55:0f:a6:3e:60:cb:3a:70:99:a4:2d:bf:
a0:ec:90:ed:11:3c:2c:a2:90:72:37:bd:01:f3:b2:
94:00:1a:c2:76:10:57:1f:1e:78:32:ea:f9:9b:85:
2a:bd:7e:9b:c5:4a:f6:27:a6:ab:d2:e7:bb:cf:73:
17:4a:7b:c7:d0:77:ad:96:68:89:85:f2:2e:7d:a9:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D1:81:CA:F2:C2:39:1A:03:2F:CC:0D:C5:4F:89:5C:C2:C0:B9:5F
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/JNGByvLCORoDL8wNxU-JXMLAuV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.92.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:46:bd:98:c4:b7:9b:33:28:09:b8:a3:db:1f:02:bd:ab:c9:
78:69:74:31:17:70:ad:69:60:fa:2c:36:d1:77:50:32:f0:46:
50:9b:dd:9c:27:b8:9f:f9:c0:fd:c6:4b:58:46:25:8a:6a:70:
fb:92:ef:6d:ac:c5:85:b0:3a:36:ed:61:92:6d:cd:e0:56:3d:
6c:1e:d3:67:77:40:af:09:7f:ae:f8:20:e7:ee:83:25:64:a0:
bb:72:55:b7:91:1a:6d:ec:45:67:6b:78:67:32:e0:1e:b2:9f:
eb:9a:29:38:e3:25:3e:95:d4:a0:fd:ea:00:74:0d:d0:ad:85:
96:4a:7a:ab:f7:ca:7f:84:f8:aa:99:19:b1:aa:87:20:ab:87:
86:e8:73:c3:f9:42:f3:a1:49:95:53:45:ed:39:9d:0f:1e:6e:
4e:71:cd:55:34:b1:62:0a:09:46:08:d3:27:ac:5a:d1:03:87:
ae:72:ae:47:aa:a7:71:43:b4:59:51:70:2b:c6:57:2c:df:14:
36:70:9d:48:c7:1b:58:5f:d4:a0:d2:c7:ee:34:4c:08:a5:b5:
ea:01:a4:f8:e5:71:78:da:48:cf:9a:a8:1b:1b:f0:db:27:7e:
24:11:01:20:6d:7b:e2:a2:e6:fc:8c:ea:d0:04:28:64:2d:d5:
a9:d7:79:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2/GgZUT4CEFuUOepk85QMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNDI0MTA0NzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGQxODFjYWYyYzIzOTFhMDMyZmNjMGRjNTRmODk1Y2MyYzBiOTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAdAjcbJ59/QIh7XBpUk7ZyBaV9z
2qDxTA2q3pCJYBvCB4J8hBEyK8z21WEDPh6LzZe1cOW0M7zfkx/EomNGDogqgGaM
nW57Fm0y9Hzo3gGtW/PP3rVEACK1f2yLVfieIuUq4gXwCcuA2Cm+8q4dCjwBA8YA
8eMQsi+ImD7g2VjyQUpUTHntfRdFLxqcAvR+85OQyRcLSQOmG79IUPNui/d+6NxD
VREeDVog3ZPY3WhNIlz4cO5VD6Y+YMs6cJmkLb+g7JDtETwsopByN70B87KUABrC
dhBXHx54Mur5m4UqvX6bxUr2J6ar0ue7z3MXSnvH0HetlmiJhfIufamw+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCTRgcrywjkaAy/MDcVPiVzCwLlfMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvSk5HQnl2TENPUm9ETDh3TnhVLUpYTUxBdVY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBNcMA0G
CSqGSIb3DQEBCwUAA4IBAQCaRr2YxLebMygJuKPbHwK9q8l4aXQxF3CtaWD6LDbR
d1Ay8EZQm92cJ7if+cD9xktYRiWKanD7ku9trMWFsDo27WGSbc3gVj1sHtNnd0Cv
CX+u+CDn7oMlZKC7clW3kRpt7EVna3hnMuAesp/rmik44yU+ldSg/eoAdA3QrYWW
Snqr98p/hPiqmRmxqocgq4eG6HPD+ULzoUmVU0XtOZ0PHm5Occ1VNLFiCglGCNMn
rFrRA4eucq5HqqdxQ7RZUXArxlcs3xQ2cJ1IxxtYX9Sg0sfuNEwIpbXqAaT45XF4
2kjPmqgbG/DbJ34kEQEgbXvioub8jOrQBChkLdWp13nc
-----END CERTIFICATE-----
Generated at Sat Apr 25 03:35:49 2026 by rpki-client