Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/jjZTf9S4GO_XBjspeycypitIdus.roa
File: jjZTf9S4GO_XBjspeycypitIdus.roa (raw, json)
Hash identifier: iiH1k95gg1mLK9IHZzz2iRVg9BcAeQPvTecCMlNndD8=
Subject key identifier: 8E:36:53:7F:D4:B8:18:EF:D7:06:3B:29:7B:27:32:A6:2B:48:76:EB
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A183A659F6CB732450EA66D75123DE4724
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/jjZTf9S4GO_XBjspeycypitIdus.roa
Signing time: Wed 28 Oct 2026 17:54:39 +0000
ROA not before: Wed 28 Oct 2026 17:54:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 185.225.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:a6:59:f6:cb:73:24:50:ea:66:d7:51:23:de:47:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 28 17:54:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e36537fd4b818efd7063b297b2732a62b4876eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:aa:da:72:3c:b4:1a:2f:fd:d3:c4:4c:f6:
15:dd:6b:0f:32:17:e2:33:40:3f:84:5d:d9:4d:a5:
36:0a:40:b5:09:26:9c:b1:2a:06:2d:db:1e:10:c6:
11:de:70:83:9c:9c:ac:60:50:02:c6:5f:71:d3:9e:
48:69:ca:f8:c0:cb:47:2f:db:69:60:2c:39:6b:29:
68:38:f2:a3:69:85:a9:5a:28:e5:48:93:91:08:a6:
02:71:b3:8c:92:66:55:01:53:d3:0a:58:28:ff:1e:
ff:dc:2d:78:2b:70:a8:f1:eb:2d:5b:b1:cc:aa:49:
25:09:9b:98:f9:8f:5a:2d:bf:5d:ce:f0:53:33:b6:
92:d9:72:a0:be:1e:e3:b3:d7:94:c6:e0:e4:d5:8d:
63:32:3b:1a:0c:b1:95:08:8d:2c:cb:af:7d:f2:9f:
16:9a:06:b1:31:38:e1:1a:b6:73:6d:7f:4f:43:fc:
11:fb:44:b4:e7:25:27:c8:1e:44:12:05:14:bd:96:
66:46:b7:21:ff:53:ff:db:22:42:30:4a:bb:e9:6b:
d9:06:77:26:ef:16:59:b2:a6:28:ec:e9:02:7e:1d:
bf:ee:cb:71:a1:c5:ec:9e:8d:87:b6:9c:60:a2:10:
51:ad:c3:85:c1:fe:26:43:83:3b:82:8a:81:2d:17:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:36:53:7F:D4:B8:18:EF:D7:06:3B:29:7B:27:32:A6:2B:48:76:EB
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/jjZTf9S4GO_XBjspeycypitIdus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.170.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3f:63:3c:6a:02:b5:45:79:2a:b8:27:25:61:a2:e0:60:a4:
3f:1f:a7:3a:0e:ca:4c:dd:cf:c4:fb:92:44:c4:00:c2:03:4b:
b8:5f:63:b7:66:f9:24:ad:75:b4:ce:60:94:72:31:ea:f1:ab:
16:58:11:a1:17:11:9e:c8:52:6c:22:69:dc:de:9b:6a:45:a2:
1c:56:23:05:d2:8d:79:1a:97:06:08:5b:97:d0:73:4e:70:c0:
24:38:47:98:d2:48:8f:29:f6:89:fa:04:72:65:8e:50:5d:60:
81:14:2c:66:c1:d2:08:9b:7a:a8:f2:11:fb:00:65:91:12:9a:
fa:d8:a9:b0:9e:46:9b:2d:23:a5:09:90:54:98:09:8a:94:1f:
eb:53:5e:e5:23:cd:fd:af:54:37:e1:44:2f:59:53:08:77:99:
f1:72:01:2b:78:a2:48:41:8b:67:6a:e3:f2:96:6b:26:eb:30:
54:ea:f2:20:bb:f3:b8:de:52:d6:c9:46:84:f5:23:54:1e:14:
f7:8f:6d:5d:bb:8a:0a:20:b5:f6:a9:b3:81:3c:c0:41:03:95:
ad:07:53:d9:aa:bb:e6:95:30:36:93:78:a2:5a:24:5a:f6:0b:
34:76:32:0a:d2:f7:8b:d8:96:26:f5:0e:eb:a9:6f:6d:89:c8:
2b:18:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:31 2026 by rpki-client