Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/jp6El6-zoYiY_qWzYe-Z_PtQJMc.roa
File: jp6El6-zoYiY_qWzYe-Z_PtQJMc.roa (raw, json)
Hash identifier: b0DJL3J5CgThunZiaIQsJQga45myTFuuPNByALnSnMs=
Subject key identifier: 8E:9E:84:97:AF:B3:A1:88:98:FE:A5:B3:61:EF:99:FC:FB:50:24:C7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019DD74002FE4B8CD0354CA5B0BC50C43A56
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/jp6El6-zoYiY_qWzYe-Z_PtQJMc.roa
Signing time: Wed 29 Apr 2026 03:19:49 +0000
ROA not before: Wed 29 Apr 2026 03:19:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32418
IP address blocks: 194.231.152.0/24 maxlen: 24
194.231.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 12:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:40:02:fe:4b:8c:d0:35:4c:a5:b0:bc:50:c4:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 29 03:19:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e9e8497afb3a18898fea5b361ef99fcfb5024c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:a4:ed:2f:74:a2:d3:ad:21:40:ba:ea:08:
3d:8c:30:1c:f2:08:1d:41:3e:e0:44:c7:81:b5:67:
63:2a:53:b5:5f:55:95:9d:d5:bc:05:1a:a9:f1:60:
79:25:60:07:a5:ca:dd:eb:55:e0:44:21:e7:37:db:
7b:2f:cd:e0:0a:8f:60:15:41:bd:75:c1:57:af:49:
62:8b:ab:6f:dd:72:fb:44:4a:6d:43:8e:8b:b3:83:
ca:88:02:b8:a7:a6:96:ea:9d:61:75:e8:1f:58:c9:
3a:d0:66:12:79:f0:7d:e6:12:01:f6:10:d7:00:2f:
4f:dd:47:5c:e9:47:cb:6e:ed:a0:22:83:ad:f4:58:
4f:6a:b6:12:ca:d3:2f:d5:99:84:09:00:c7:dc:82:
35:1b:ab:78:42:1c:ca:be:17:2b:a5:da:1e:f3:14:
76:eb:9d:d9:37:a5:ac:4d:9c:20:90:ab:f9:5f:a0:
14:e0:82:05:76:aa:16:46:ca:89:44:62:7b:19:81:
16:4b:4f:5a:eb:b5:08:d7:4d:95:88:3e:f2:fd:d9:
df:2a:a9:60:6b:d6:96:54:85:33:62:6c:51:79:7e:
38:93:03:2d:26:41:68:b1:02:17:45:f7:b3:90:1f:
f3:df:f5:1b:22:75:e9:53:c3:0d:f3:60:4e:84:a6:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9E:84:97:AF:B3:A1:88:98:FE:A5:B3:61:EF:99:FC:FB:50:24:C7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/jp6El6-zoYiY_qWzYe-Z_PtQJMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.152.0/24
194.231.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f2:96:d1:ef:5d:33:95:3f:ef:5c:42:5e:d8:e6:a0:75:9b:
e6:bf:8a:f0:dc:6c:99:5c:a4:4c:37:26:f0:1c:03:a5:f0:a2:
5e:1a:9d:3c:38:d1:d1:f9:73:b0:9c:44:b1:94:cf:bc:9c:f1:
47:14:8e:f9:86:22:00:9e:b7:c4:a6:fb:a9:86:09:bb:d4:f7:
e7:7b:fd:e1:9d:a3:b2:ee:6a:47:fc:59:26:b2:48:b1:9d:14:
22:88:c4:d9:d9:d3:94:4c:e5:3d:2d:ce:1f:36:2e:9c:f2:ca:
e1:9a:b2:69:8f:c8:2f:cb:dc:7d:71:f5:be:c2:9d:a2:43:22:
0b:f8:dd:03:b7:2a:09:b5:b6:07:30:df:c1:9e:5e:d3:d6:a9:
92:29:b2:7b:21:2d:4d:c3:01:05:31:8d:fb:cd:32:77:90:c7:
07:2c:58:45:8e:61:7a:fd:7d:7c:24:29:e1:ff:a8:d5:3b:bf:
44:53:c6:21:aa:e4:ed:c4:aa:3b:44:a0:34:47:da:be:0b:da:
a3:45:2e:af:c4:2d:73:f3:56:a3:b4:34:a5:d9:d4:4a:4d:3c:
e5:60:97:30:50:e9:1e:b6:c0:2b:f5:8d:50:8c:eb:c8:dc:9b:
92:83:23:c2:01:b4:1b:86:b0:96:19:49:83:d4:6d:8f:05:68:
35:4f:1e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:32:39 2026 by rpki-client