Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/jaxXvAizdbnOZ260E3D28kqdvDc.roa
File: jaxXvAizdbnOZ260E3D28kqdvDc.roa (raw, json)
Hash identifier: DfDxUm/qCB11xHbyJJCLMlzjpAVxvuDgSoZ8iUQR0iE=
Subject key identifier: 8D:AC:57:BC:08:B3:75:B9:CE:67:6E:B4:13:70:F6:F2:4A:9D:BC:37
Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial: 019EF0E53BE6E8519B76DAEAF863BA6E0B38
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/jaxXvAizdbnOZ260E3D28kqdvDc.roa
Signing time: Mon 22 Jun 2026 19:53:35 +0000
ROA not before: Mon 22 Jun 2026 19:53:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2613
IP address blocks: 91.218.38.0/24 maxlen: 24
193.135.150.0/24 maxlen: 24
2a0c:d0c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:e5:3b:e6:e8:51:9b:76:da:ea:f8:63:ba:6e:0b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Validity
Not Before: Jun 22 19:53:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dac57bc08b375b9ce676eb41370f6f24a9dbc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:00:5f:9f:5f:b8:59:c4:b1:8f:1f:20:05:
59:64:26:84:64:5a:fa:fc:22:b5:75:fd:a9:7f:86:
72:38:f4:f3:67:b9:40:63:b1:f3:99:bd:12:4e:6b:
45:41:ee:d3:93:9a:8e:23:a0:46:b5:43:71:0a:54:
a6:14:63:0a:4b:12:00:51:7f:3f:d5:07:0e:7a:73:
79:5e:80:49:ab:22:41:0f:91:db:e2:0e:08:e3:c3:
6b:a0:51:c1:9f:23:17:2f:98:ff:34:61:37:82:25:
be:f4:ac:c0:85:36:a6:6a:5b:ba:96:17:bf:21:f1:
71:cb:46:68:5c:2e:8a:a1:08:e7:7d:82:09:be:0c:
c6:8e:ec:1a:9e:87:2f:3b:6b:fa:e7:cd:0a:ef:b5:
93:c0:93:2a:9f:82:e2:66:1c:a7:52:49:a5:ed:c9:
30:79:9d:d3:75:ec:db:5b:ec:69:18:5b:20:a5:b9:
50:e4:95:0c:8e:f7:26:53:2f:ae:4d:e6:4d:19:43:
10:d0:cb:76:16:b2:04:6d:ea:12:e9:d9:6b:8a:3d:
e3:3c:b9:02:7c:a1:38:a9:46:fa:99:55:d2:7a:17:
d4:66:5b:a7:c0:c4:f2:15:b7:c4:c6:54:bf:74:25:
ef:bd:5a:03:7b:77:dc:81:86:66:8d:d5:c5:71:e6:
96:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AC:57:BC:08:B3:75:B9:CE:67:6E:B4:13:70:F6:F2:4A:9D:BC:37
X509v3 Authority Key Identifier:
keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/jaxXvAizdbnOZ260E3D28kqdvDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.38.0/24
193.135.150.0/24
IPv6:
2a0c:d0c1::/32
Signature Algorithm: sha256WithRSAEncryption
46:08:85:92:9b:ac:82:ec:4a:d3:b2:00:99:75:e5:73:eb:07:
8e:e0:09:0a:b0:5f:13:d0:1a:85:f0:fe:5f:10:9a:93:1c:ca:
1f:24:de:8d:de:ba:60:c2:a8:55:7d:d7:47:1c:ae:f8:1d:a9:
e3:58:d8:fb:b5:2c:ad:72:96:a1:d9:6e:00:b2:72:e1:bb:25:
64:19:35:2c:bf:00:c3:4e:df:54:17:c7:c6:9b:af:e8:62:41:
13:3c:a5:49:48:93:19:9d:ac:39:1b:d7:b1:6d:9c:bb:76:e5:
51:c6:bd:a7:5e:da:14:cf:cb:5b:39:88:aa:d0:5d:a2:b8:c2:
23:e8:1f:a9:db:b8:a6:8a:e1:e2:f3:58:8d:ba:3e:74:96:36:
e6:9e:02:5b:d4:72:8a:48:d7:64:a3:85:24:9d:3b:60:86:f8:
95:fc:f2:3d:cf:fa:86:49:f1:2f:8c:d5:ec:73:b0:de:72:50:
61:d1:2c:90:dd:b3:ff:48:00:2d:01:ec:6e:ff:ca:f9:61:af:
ad:02:ae:7f:06:db:37:32:d6:f4:40:70:6b:e8:f9:29:b6:48:
60:7e:19:e0:20:68:18:69:d9:ff:bf:d3:5c:69:a7:1f:4f:8b:
c0:b0:86:b6:6c:fb:7e:cf:05:6d:4c:14:b3:db:86:88:c6:92:
5d:14:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:26:13 2026 by rpki-client