Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JKok68d0olyBdJ1bSSI4sl4ZVWs.roa
File: JKok68d0olyBdJ1bSSI4sl4ZVWs.roa (raw, json)
Hash identifier: ACoEqIVnJI2CWC6Mfq6UXR93M/5x4N5Lt1aKZ0/7+Ik=
Subject key identifier: 24:AA:24:EB:C7:74:A2:5C:81:74:9D:5B:49:22:38:B2:5E:19:55:6B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0866B84F81A6A6854DB76CCBB8B3869D9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JKok68d0olyBdJ1bSSI4sl4ZVWs.roa
Signing time: Wed 09 Sep 2026 13:46:28 +0000
ROA not before: Wed 09 Sep 2026 13:46:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60117
IP address blocks: 195.162.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:6b:84:f8:1a:6a:68:54:db:76:cc:bb:8b:38:69:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 9 13:46:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24aa24ebc774a25c81749d5b492238b25e19556b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:2e:20:68:17:f1:a3:94:7f:b4:12:91:a9:
6e:7b:55:eb:ed:18:7d:2a:30:05:f0:1b:c8:23:9f:
6d:bc:34:8f:22:6a:e8:64:df:47:b6:68:7f:ae:f3:
cf:1b:b3:9c:4c:c7:3e:eb:1c:0c:9e:55:b0:6d:04:
86:85:2d:8c:91:25:90:96:70:21:7d:10:49:3d:07:
64:76:47:56:a3:b3:60:c2:70:db:fe:d4:03:44:d5:
bd:69:ac:2a:d1:cb:20:43:69:46:37:c8:b9:40:a5:
f4:9e:bf:fc:b9:67:46:de:78:6a:a2:12:18:f1:40:
c3:65:a9:12:eb:dc:4a:fb:62:e3:6f:ad:68:9f:93:
33:91:a5:94:e7:85:2e:f0:9b:5c:ba:ec:64:6a:e9:
1e:d7:98:ce:aa:14:7a:e0:3b:cd:a8:75:68:ca:bc:
e4:b5:e4:68:0a:97:d6:f9:e8:09:f0:8c:5e:f9:ee:
3a:5b:e4:12:f3:5e:18:9c:22:15:70:55:52:17:60:
61:24:82:4c:98:a7:6f:f4:8c:66:b9:ed:b2:19:52:
d9:7c:50:7b:63:86:fa:0b:92:97:12:1b:bc:b2:6f:
31:94:65:6b:76:2f:26:06:6f:61:8a:1c:0e:88:9f:
d3:54:1e:9e:6b:9b:67:d7:d3:23:b6:4b:b0:7c:dd:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AA:24:EB:C7:74:A2:5C:81:74:9D:5B:49:22:38:B2:5E:19:55:6B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JKok68d0olyBdJ1bSSI4sl4ZVWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:73:8d:04:5c:c6:fb:66:22:c9:04:3d:06:9b:1d:4b:9d:30:
a9:04:26:9e:7b:37:ac:4a:56:b3:e5:ea:4a:c4:77:c1:8b:35:
48:09:52:61:f6:b8:7a:83:28:7e:9e:e7:58:dc:d0:6f:c7:59:
0d:68:cb:88:0a:f4:e0:72:99:9c:51:75:c1:6f:ff:c7:47:ee:
8d:3b:81:19:c2:1b:f7:34:c5:d0:20:40:34:54:d2:86:32:70:
56:d8:8c:e5:b6:36:29:d6:41:d9:15:c7:67:e1:40:51:69:23:
de:4a:62:30:3f:eb:2c:01:f4:af:1d:94:37:41:67:b7:a1:86:
0f:cf:85:1b:85:25:30:49:b5:1c:17:24:64:6c:02:2c:29:96:
fc:58:eb:6d:79:f3:e5:14:16:bc:db:5d:37:58:6a:ab:60:6e:
cc:30:59:7b:55:18:d1:73:f0:3a:1f:c5:5b:87:d4:26:50:b6:
ee:be:35:c6:d8:2d:3b:25:2b:9d:f6:23:4b:c8:6c:15:76:d6:
74:b6:68:71:c5:db:18:1d:05:99:6c:a8:11:76:d2:1a:11:82:
82:f4:ee:cc:a5:5b:8c:74:95:f4:83:94:2f:a2:9c:b6:a9:77:
e8:8d:02:3e:6a:b2:2a:e9:a9:2e:4b:ca:f4:e4:2c:89:85:e6:
af:64:9f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:18:56 2026 by rpki-client