Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/juIKp_q4-ugglJfjEQ86ecQPIUY.roa
File: juIKp_q4-ugglJfjEQ86ecQPIUY.roa (raw, json)
Hash identifier: 8eYusNiYMZUBWKkpxOTy1PWao+uV6+N4duitF7Hwi6o=
Subject key identifier: 8E:E2:0A:A7:FA:B8:FA:E8:20:94:97:E3:11:0F:3A:79:C4:0F:21:46
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019D11B110B52FE977EAB14900B8AAA22CEE
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/juIKp_q4-ugglJfjEQ86ecQPIUY.roa
Signing time: Sat 21 Mar 2026 18:38:29 +0000
ROA not before: Sat 21 Mar 2026 18:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 94.103.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:b1:10:b5:2f:e9:77:ea:b1:49:00:b8:aa:a2:2c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 21 18:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ee20aa7fab8fae8209497e3110f3a79c40f2146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6d:61:46:1f:42:64:f4:81:37:31:a1:95:3d:
e0:b7:12:64:8f:11:14:69:f3:6d:f8:fc:04:32:b9:
6e:d3:d8:10:5a:1a:a4:17:64:e3:a0:8a:be:22:7b:
75:43:5d:69:58:c5:17:c6:ab:09:db:78:0a:9e:0a:
10:b0:d2:06:53:50:bf:57:95:be:da:ad:48:19:7b:
75:80:eb:41:b4:2e:95:ec:86:5d:76:0c:38:ab:48:
3f:09:a5:fb:cf:5e:20:23:b6:dc:02:e4:48:f7:76:
9d:fc:0f:5e:5b:85:26:23:1c:f9:24:d1:bd:35:0b:
be:24:e9:a0:97:1b:07:16:aa:bb:d5:6c:d7:18:8c:
88:be:98:5f:fa:b2:4e:13:59:c4:f9:09:46:4b:94:
fb:93:bf:6a:e8:a2:60:04:06:4a:70:f7:3b:80:8f:
47:fa:b1:5d:6d:90:b4:49:5d:ac:39:12:f6:87:28:
94:8e:4c:6d:55:d5:0c:f8:ef:62:de:f1:1d:d9:4b:
fe:09:8b:68:11:99:e8:0b:4b:b1:fb:d9:05:fc:5e:
84:f9:e2:e0:75:c0:53:d5:a1:da:ac:ff:57:b4:a5:
96:96:34:bf:88:81:49:30:11:8f:ca:b8:8b:a6:e3:
0d:ee:04:fb:19:17:0e:60:c5:be:63:8b:42:57:fb:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:0A:A7:FA:B8:FA:E8:20:94:97:E3:11:0F:3A:79:C4:0F:21:46
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/juIKp_q4-ugglJfjEQ86ecQPIUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:8d:33:75:44:db:85:47:58:04:89:c7:29:ef:55:c0:4e:0c:
6a:14:27:b0:32:03:d4:70:68:57:9d:e9:78:72:9a:03:0d:12:
28:ad:db:99:93:f3:a4:f9:43:b5:cb:00:95:47:2b:ae:53:a1:
b0:87:83:74:5a:77:3f:f2:20:25:1b:61:42:f7:ef:92:ce:1f:
d6:f5:04:69:ff:73:94:c1:92:03:45:3a:e2:19:9d:57:10:a2:
19:a9:f2:ea:c5:da:28:2f:ca:36:8b:5d:31:e3:19:87:9e:ca:
ec:d4:ae:32:ea:fa:c6:74:34:c6:5e:89:ea:12:3e:d4:78:16:
4f:f9:cb:af:59:20:3e:a6:af:c8:15:cd:19:53:71:57:83:29:
dd:17:24:cf:cf:2d:bf:57:4f:21:06:0f:1d:f7:10:7d:16:21:
6b:3a:6d:cc:50:b9:64:a6:1e:d5:b2:20:69:7e:9a:79:e9:ed:
da:94:06:03:e4:c4:9a:73:45:f9:c1:42:6f:7d:93:c0:2c:3c:
f6:84:ba:63:6b:22:30:50:b2:6f:7c:43:ab:a7:74:4b:d7:fc:
c3:da:2c:a8:18:c0:5c:69:c8:81:9c:76:79:4f:ac:de:99:1a:
21:1f:dd:79:8e:ee:91:05:b4:b8:4a:47:1c:8a:06:10:9d:eb:
c1:0a:80:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 11:18:21 2026 by rpki-client