Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa
File: Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa (raw, json)
Hash identifier: lv1y9n6SxRqEqaqKtDtqJfGE7WxXtWgMt7j43NvbuS8=
Subject key identifier: 26:DF:18:5D:09:D2:62:48:BF:69:9F:C5:E1:D0:9F:69:A2:4A:2A:8C
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019E2AA7C1283938833734DC56293C3E966A
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa
Signing time: Fri 15 May 2026 08:01:37 +0000
ROA not before: Fri 15 May 2026 08:01:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203714
IP address blocks: 176.53.180.0/23 maxlen: 23
176.53.182.0/23 maxlen: 23
185.53.104.0/23 maxlen: 23
185.53.104.0/24 maxlen: 24
185.207.2.0/24 maxlen: 24
194.36.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:c1:28:39:38:83:37:34:dc:56:29:3c:3e:96:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: May 15 08:01:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26df185d09d26248bf699fc5e1d09f69a24a2a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:25:fa:27:f8:90:01:57:35:dd:c1:2a:48:
15:42:b1:a8:7a:d4:f5:c0:d8:a1:35:60:a8:98:21:
eb:2c:9d:24:3f:bb:de:8d:9f:91:33:5d:7e:44:75:
63:3d:19:a1:e1:b9:ac:89:5b:57:93:aa:67:08:21:
82:07:0c:bd:46:d5:ee:cf:8c:0e:a6:b3:88:83:2a:
8b:3f:e6:5d:51:0e:39:cf:5e:75:e5:e7:ee:b0:a2:
09:65:7f:91:69:12:f7:b9:53:15:4a:09:48:7e:8f:
16:c7:32:d0:43:2e:29:bd:a0:b5:ae:20:b2:f9:c1:
6e:a1:20:96:29:29:1b:10:8c:2c:ce:cf:fc:e3:cf:
b9:21:67:a1:62:4d:9e:e0:db:06:66:5b:01:15:d1:
cc:ee:4b:a5:d4:50:70:11:9c:c3:49:01:e5:6b:ae:
bb:3d:c3:73:86:ab:7f:ef:ef:69:4c:cc:a1:1d:55:
31:a8:8e:ec:05:a4:bc:2c:25:4d:72:51:b2:5b:fb:
59:79:64:b5:c5:e8:e3:3e:12:5f:d6:cc:61:92:97:
e0:71:c0:44:bd:f6:11:76:c3:ac:33:d7:ec:b2:7e:
d6:90:45:ab:76:a0:52:89:af:17:bf:88:09:e6:d3:
d9:70:58:ef:da:5a:87:bc:6d:32:a1:d8:71:fb:57:
90:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DF:18:5D:09:D2:62:48:BF:69:9F:C5:E1:D0:9F:69:A2:4A:2A:8C
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.180.0/22
185.53.104.0/23
185.207.2.0/24
194.36.171.0/24
Signature Algorithm: sha256WithRSAEncryption
12:af:60:bc:05:1a:fe:ac:90:95:56:a9:92:9c:9c:22:a8:d0:
6e:58:be:c2:e9:9d:b7:83:4c:9d:e5:ee:73:87:b7:33:76:87:
8a:c7:e2:de:1d:7e:78:98:69:b5:9c:68:58:bf:c7:05:08:c9:
67:f6:33:db:aa:a1:41:e8:13:91:d7:99:9f:65:cd:a2:80:dc:
50:3b:5a:01:a9:cf:aa:fd:28:29:45:33:1f:86:70:b6:e9:f9:
0c:0c:b4:53:42:36:3f:d7:f7:9a:0c:5b:fa:25:09:c4:79:9f:
94:7e:7f:de:84:45:b3:84:af:73:ea:f8:1d:34:68:bc:59:12:
cc:77:27:c0:59:74:d2:78:b2:a2:72:07:9f:12:4a:a5:8a:fe:
28:4c:08:a2:95:78:7b:86:2e:14:f3:13:40:fd:f3:8c:1a:3c:
67:1e:fe:a8:f4:45:bb:93:16:b9:da:4d:1d:3c:33:bc:56:34:
bd:62:cd:16:50:c9:e3:46:84:49:1a:dc:87:ca:c3:03:d7:44:
cd:bb:42:b7:77:c7:4f:a7:cb:ec:98:8c:f6:82:96:47:ca:dd:
65:5f:92:b8:a0:0b:1d:98:eb:6d:f5:40:f1:5f:73:f4:38:d4:
88:16:c5:46:f1:bd:74:00:a9:a7:0e:3e:45:97:90:93:04:95:
c9:c9:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:53:08 2026 by rpki-client