Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/jojxbXnJkIuV8V659NT3CHY8D-A.roa
File: jojxbXnJkIuV8V659NT3CHY8D-A.roa (raw, json)
Hash identifier: WdgJ3jfcaFI+UIc6f+cqpxi6WPShgn8WduAGCEF3v4M=
Subject key identifier: 8E:88:F1:6D:79:C9:90:8B:95:F1:5E:B9:F4:D4:F7:08:76:3C:0F:E0
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 019EFA46A78D2D268D0BBFF6E0F7ABFE69B8
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/jojxbXnJkIuV8V659NT3CHY8D-A.roa
Signing time: Wed 24 Jun 2026 15:36:34 +0000
ROA not before: Wed 24 Jun 2026 15:36:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42397
IP address blocks: 185.232.65.0/24 maxlen: 24
193.29.13.0/24 maxlen: 24
193.29.14.0/24 maxlen: 24
193.29.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:46:a7:8d:2d:26:8d:0b:bf:f6:e0:f7:ab:fe:69:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jun 24 15:36:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e88f16d79c9908b95f15eb9f4d4f708763c0fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:e1:95:00:95:0f:25:f3:3a:6b:51:06:eb:
a8:3d:09:c8:d9:11:44:da:30:7d:f1:bd:0c:d3:34:
28:64:04:63:41:1d:40:0d:6c:58:d7:69:3c:af:52:
99:e3:52:90:a8:46:15:c1:b4:61:17:c6:80:2f:3a:
2f:ff:d1:24:5c:28:57:96:9c:2b:eb:5c:8b:cc:a9:
94:d5:9d:39:36:4b:c1:f0:b4:3a:fd:a3:54:6c:4d:
48:b2:71:f3:d3:df:9e:9f:f5:26:c8:21:2c:76:7a:
36:b1:de:2a:32:e9:35:96:99:fc:89:f5:0e:85:d6:
4d:be:85:15:00:bc:15:be:40:b4:61:c2:4b:3c:dd:
5a:e1:7b:83:61:d4:4d:82:e5:a1:ab:b8:5e:3a:61:
06:e1:e1:95:e4:9c:46:fa:3b:ce:9e:fa:95:1c:64:
34:c6:f6:1b:f6:3e:6c:d2:80:c1:41:03:d8:fc:8c:
48:6d:4e:c4:9a:b2:2d:c0:02:57:14:f5:35:ea:83:
42:35:aa:d3:3c:1c:0b:8d:a0:0b:29:50:2d:5b:23:
6f:e7:a1:f8:e2:24:ee:90:c2:a4:43:e9:76:7b:62:
85:1d:97:10:96:fc:c4:84:b6:80:89:37:33:17:e5:
4b:5d:97:9e:c5:f0:fb:09:ed:93:7e:2f:20:88:dc:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:88:F1:6D:79:C9:90:8B:95:F1:5E:B9:F4:D4:F7:08:76:3C:0F:E0
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/jojxbXnJkIuV8V659NT3CHY8D-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.65.0/24
193.29.13.0-193.29.15.255
Signature Algorithm: sha256WithRSAEncryption
80:39:76:2d:a8:11:ea:19:0b:9d:6d:e1:36:ba:9b:0d:6c:27:
5e:5e:ff:49:53:8f:3d:55:d4:30:d3:7a:b6:b4:53:f0:b8:04:
32:db:0f:8e:e4:1a:dc:55:8e:38:ea:ab:35:4c:05:07:81:f9:
a1:14:0e:50:f9:8d:f8:a1:b7:45:24:b6:d5:3c:1a:c7:e9:f5:
56:3b:41:27:8f:f1:a4:bb:19:52:df:0d:03:5e:48:e6:1f:dd:
a4:9a:98:7d:4e:0c:5f:9f:eb:a9:45:b7:5c:40:e9:0d:34:4d:
85:15:3e:eb:0e:26:15:72:fd:89:de:af:39:90:82:53:68:18:
f1:03:85:0b:13:90:f3:c0:5f:b6:25:3b:17:85:1f:29:34:49:
b4:91:ae:13:3d:91:d4:83:61:cb:fa:8a:7c:b6:1d:e8:f5:10:
56:f0:56:3d:cc:06:b4:e1:6e:d8:11:a8:81:da:6b:69:dc:80:
4f:f6:e7:7e:b2:1f:06:2b:3a:f4:fb:8b:87:89:34:fb:cc:75:
10:7e:90:bf:b0:3a:e7:70:65:76:4a:eb:ef:90:3e:22:99:60:
e2:66:94:d5:9f:26:3a:86:e0:bd:c3:c8:e1:bd:09:5d:50:17:
9c:20:11:23:ae:fd:a8:c2:04:96:71:13:a4:1f:19:77:a5:11:
d3:cd:f4:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:49 2026 by rpki-client