Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/2jo8nJ0eUlaCrdXeCQLsnxqxv5c.roa
File: 2jo8nJ0eUlaCrdXeCQLsnxqxv5c.roa (raw, json)
Hash identifier: E5+CdpbMvk4x9kQVSv8lulj9PRBdhLSmoXYqO8KmtiE=
Subject key identifier: DA:3A:3C:9C:9D:1E:52:56:82:AD:D5:DE:09:02:EC:9F:1A:B1:BF:97
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019E82658E954AE0C14D4F50B086F79F06F5
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/2jo8nJ0eUlaCrdXeCQLsnxqxv5c.roa
Signing time: Mon 01 Jun 2026 08:55:53 +0000
ROA not before: Mon 01 Jun 2026 08:55:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 109.237.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:65:8e:95:4a:e0:c1:4d:4f:50:b0:86:f7:9f:06:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Jun 1 08:55:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da3a3c9c9d1e525682add5de0902ec9f1ab1bf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:73:7d:30:5a:23:6f:1f:ea:48:3f:95:cd:
48:34:a5:39:fd:94:1d:e0:7e:df:c9:16:88:86:fc:
17:64:d7:ec:d7:39:bf:9e:60:9d:f4:7a:62:51:77:
c4:e7:f3:f8:f0:87:87:24:83:83:01:f6:5f:67:19:
68:34:e7:7f:ce:6e:dd:a8:3e:dd:71:04:fc:83:55:
60:ab:2c:2c:06:31:51:42:39:b2:a6:e6:d2:08:8b:
e1:93:b5:1f:23:c7:c1:90:83:91:86:8e:41:d5:74:
e6:1c:58:cd:4c:8e:75:01:f6:52:f3:8e:6f:49:c8:
08:98:fd:6e:9f:9c:d7:b0:12:91:0b:5b:ae:07:d9:
ee:5b:58:b5:0d:94:cc:51:3d:17:97:d6:7b:c1:d0:
af:8a:59:8a:73:6a:9a:5a:14:88:ca:7a:f9:b2:ec:
14:b5:e6:15:7e:56:60:24:1b:f1:0f:bf:f0:e7:50:
f6:24:ea:cf:d8:a6:1a:2d:24:54:85:cd:80:68:4d:
5b:2f:ad:24:4b:08:b5:6b:04:9f:c0:9b:32:b1:c1:
15:30:d9:d1:d2:f4:7d:a8:90:f7:5d:fd:1f:61:c5:
10:cf:b6:30:4e:2d:ed:d3:db:94:84:71:ca:de:65:
be:14:3e:af:84:d0:a8:72:e5:21:8e:4e:1e:d8:66:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3A:3C:9C:9D:1E:52:56:82:AD:D5:DE:09:02:EC:9F:1A:B1:BF:97
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/2jo8nJ0eUlaCrdXeCQLsnxqxv5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.98.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e4:fd:ea:c1:7c:1f:74:72:85:4e:18:c9:c1:5a:35:f2:be:
7f:c6:90:1d:fe:f6:02:41:d7:ca:d8:12:df:8a:47:68:fc:ef:
57:60:9c:da:e2:0f:75:92:ef:53:d8:59:4a:dd:8e:6f:c9:c9:
47:ab:24:5d:20:e7:fa:f6:50:93:a4:58:df:94:eb:d5:8b:27:
5c:e3:4b:f7:57:e2:2e:48:0f:f2:d1:20:a7:f7:7d:b1:d4:3f:
79:7b:df:9f:1a:cf:6c:94:5c:19:4a:a7:4d:39:37:5a:c9:55:
76:e8:96:61:a8:a2:b9:cc:6d:01:7d:dd:0e:a0:3a:16:72:52:
71:02:d2:aa:5b:ae:39:78:01:80:f5:b2:7c:ab:be:86:16:c5:
b1:6b:e3:9b:7d:9c:17:6b:f7:84:94:d9:74:d5:40:42:44:7c:
c2:8d:12:52:4d:0e:69:9f:00:8d:09:13:f5:1c:a1:da:cc:e3:
3c:0e:ec:ae:ce:78:ad:6c:49:f4:0d:a7:43:90:e6:f6:a0:47:
e2:f7:0a:53:36:81:2c:03:fd:87:bc:0f:89:71:74:aa:60:28:
7d:12:e5:61:9f:e3:02:d2:19:1d:87:d3:13:5d:41:07:a1:fa:
09:7d:6f:43:99:69:ce:f4:8a:5d:c6:a9:da:7b:84:e4:85:b1:
96:92:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:32 2026 by rpki-client