Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/jmFkn4vccM7Nahi_nfzQikvxkrI.roa
File: jmFkn4vccM7Nahi_nfzQikvxkrI.roa (raw, json)
Hash identifier: P0HsjbFZ7YgQHT5P8Ip/3TqeAeybzew2hPG1QlqIC2o=
Subject key identifier: 8E:61:64:9F:8B:DC:70:CE:CD:6A:18:BF:9D:FC:D0:8A:4B:F1:92:B2
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A116C3B35D703D3D63801AB12DCDB340FA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/jmFkn4vccM7Nahi_nfzQikvxkrI.roa
Signing time: Wed 07 Oct 2026 14:28:06 +0000
ROA not before: Wed 07 Oct 2026 14:28:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207027
IP address blocks: 2.59.176.0/22 maxlen: 22
193.37.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:c3:b3:5d:70:3d:3d:63:80:1a:b1:2d:cd:b3:40:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 7 14:28:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e61649f8bdc70cecd6a18bf9dfcd08a4bf192b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:96:e7:f8:1f:40:de:08:49:e8:4f:bd:9a:
43:c0:96:4a:85:b9:ee:77:4c:ae:4c:53:43:6c:d4:
cd:ad:53:2a:7e:ba:43:61:85:e5:ed:b6:13:33:ba:
a0:29:a0:47:67:12:26:d8:68:e6:fc:ef:88:24:23:
16:fc:31:cb:27:7b:18:f3:bd:53:2a:c1:34:9d:86:
13:3b:f9:41:e6:40:ee:e1:32:30:68:82:06:be:29:
dc:6d:4d:04:6f:af:fa:43:2b:a0:64:e1:fd:87:45:
25:9f:17:9d:72:d3:1e:a6:2d:cc:6d:65:09:b9:28:
b5:40:c9:cd:8e:7d:62:75:b5:a6:4f:a5:af:54:4f:
c6:a8:1a:ca:3b:3c:52:d7:39:b4:5c:3d:0d:8e:85:
44:9c:7d:68:18:87:eb:ed:e2:e2:46:09:9d:23:fb:
b9:0b:8f:71:88:4b:f3:bf:2a:cb:c5:a5:16:5e:84:
f7:b5:9a:60:94:2e:75:bd:b4:5e:12:d4:87:98:00:
fe:03:48:ef:bc:fa:71:6b:c9:24:41:93:41:75:97:
5a:23:ac:2c:7b:d9:30:dc:55:11:2e:b9:5a:e4:30:
a6:9d:c8:5c:be:15:42:18:92:b1:e9:5e:0f:10:9f:
21:17:d3:15:ef:54:f2:84:ae:16:7a:70:40:fb:fc:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:61:64:9F:8B:DC:70:CE:CD:6A:18:BF:9D:FC:D0:8A:4B:F1:92:B2
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/jmFkn4vccM7Nahi_nfzQikvxkrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.176.0/22
193.37.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:87:a4:bc:41:dc:a2:ac:7a:3d:43:c4:96:05:be:62:cc:af:
7a:bc:ed:f6:c6:64:2a:8c:f1:85:d3:a1:ef:93:49:c1:64:a9:
1d:01:1f:fa:59:79:89:e9:a6:86:b3:61:e7:4a:b2:11:ee:96:
02:36:0e:34:9f:41:67:fc:d3:19:9f:9c:4f:f5:74:50:3f:de:
8e:9d:1d:37:c0:e0:62:73:ec:f7:9e:e3:2b:76:5d:e0:43:89:
a0:bb:21:16:7c:81:34:a9:29:b7:68:93:a4:8e:7c:ab:25:ec:
e1:99:5d:65:8d:2c:46:ab:fd:ad:0a:5b:e9:0d:01:03:67:88:
57:40:ae:c4:8e:bc:41:34:05:a7:41:04:f2:4e:4a:cf:71:c3:
5f:fa:a6:21:32:6e:b2:14:56:0f:cb:ac:2a:0b:a1:61:38:f6:
c3:b6:19:e6:11:fe:81:81:99:98:68:65:a9:6f:d5:d9:9d:7a:
7b:cd:29:ea:34:a1:44:95:10:96:aa:73:e6:44:7b:7f:de:dd:
21:39:9f:c1:34:21:82:09:19:8a:29:b7:07:77:d5:27:69:f2:
23:38:9f:f1:03:e5:1b:92:6a:99:d7:d1:0b:98:8e:7f:7d:a9:
e0:a1:21:70:6f:f0:e8:43:45:75:34:2c:23:7f:65:f6:50:bf:
26:ca:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:38 2026 by rpki-client