Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/Jpb-L2aLSHDF_WEc1A-SXkbLjMI.roa
File: Jpb-L2aLSHDF_WEc1A-SXkbLjMI.roa (raw, json)
Hash identifier: 2LG1cLyf6HbUm9jPYsS781lxHNJqUO267pNajZI09DI=
Subject key identifier: 26:96:FE:2F:66:8B:48:70:C5:FD:61:1C:D4:0F:92:5E:46:CB:8C:C2
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 01A1CB7D2BD37822596D51180FCB05338F19
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/Jpb-L2aLSHDF_WEc1A-SXkbLjMI.roa
Signing time: Wed 11 Nov 2026 16:42:20 +0000
ROA not before: Wed 11 Nov 2026 16:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201508
IP address blocks: 185.245.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:7d:2b:d3:78:22:59:6d:51:18:0f:cb:05:33:8f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Nov 11 16:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2696fe2f668b4870c5fd611cd40f925e46cb8cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:0a:99:24:75:3c:9b:46:a7:24:a8:b1:c2:
c1:9c:82:98:62:da:75:f1:fd:48:07:9d:9b:b3:ec:
8d:f8:f3:ec:ee:44:2c:75:22:2b:b4:4e:91:79:62:
c9:2b:fb:01:7f:71:0f:bb:a5:ce:39:7c:35:e0:1c:
6f:e3:fb:6d:24:6a:f1:f4:c4:ae:00:dc:ee:a3:54:
2b:d6:5d:98:7d:76:ca:78:d9:86:46:1b:fb:94:3a:
51:81:cd:18:19:73:90:2d:ff:1a:80:7a:c6:fd:7f:
f2:4a:34:f0:28:e2:05:15:4c:a0:cc:a1:6c:00:3d:
28:bf:8a:9e:8a:4d:23:bc:fe:69:f5:74:f4:5e:99:
db:71:dd:01:85:35:bf:9b:e5:f4:69:42:5f:0d:02:
d1:91:98:5c:56:0b:07:2c:43:aa:39:32:18:b5:71:
0d:99:a9:39:63:08:02:cd:6e:46:45:4f:37:a1:76:
45:9a:ec:51:5e:d9:0f:6c:47:c6:c1:11:1f:ce:a9:
9b:32:24:33:72:1d:44:93:e8:2e:b7:ce:75:7c:32:
fd:a7:38:1e:3d:f0:7f:51:4a:32:49:22:6f:07:e1:
ab:97:0e:c5:c5:8b:a2:bd:fb:31:80:c5:e4:a9:7d:
6a:95:a4:55:92:0b:39:42:5a:c5:8c:d2:00:e2:32:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:96:FE:2F:66:8B:48:70:C5:FD:61:1C:D4:0F:92:5E:46:CB:8C:C2
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/Jpb-L2aLSHDF_WEc1A-SXkbLjMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:1f:e1:c3:ad:5c:a7:28:58:d9:3d:63:5c:83:a0:46:c3:6f:
c5:c0:fc:75:0d:88:f5:d7:b9:62:22:cf:12:37:e3:22:49:b2:
ab:f7:61:fe:3c:bb:62:51:16:c4:3c:5e:c7:ad:f0:66:75:f4:
c8:3d:12:52:aa:34:02:21:38:a8:5d:74:ac:0b:a8:38:38:27:
00:91:f1:9f:d0:18:0f:8c:10:9f:e4:ba:a8:f5:a0:95:6e:bc:
22:19:36:db:3c:b4:61:80:30:6f:44:73:db:64:29:7c:7d:43:
12:8b:20:d0:04:87:a6:fe:f0:b7:2f:e2:f1:8e:8d:f2:18:31:
56:a7:5c:07:ee:0a:f7:da:6c:40:57:6c:05:53:90:f4:fd:88:
81:ce:e8:e1:e1:ee:a9:6e:de:84:c6:e2:a9:28:12:72:ad:4a:
22:37:8f:48:b4:da:f1:8a:16:f3:5d:a5:56:95:f5:c9:ce:42:
20:59:5e:46:c7:4b:b1:9d:61:20:11:67:36:2e:41:74:f7:5c:
52:f5:ab:68:d6:d0:36:63:49:89:09:db:39:50:e7:5c:68:08:
47:de:d4:ec:bf:b3:ec:0e:aa:b9:14:35:8c:48:7a:67:f6:6d:
cb:15:9c:fe:08:e1:8f:20:60:9b:0a:67:29:32:07:73:5d:9a:
41:f5:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:07:31 2026 by rpki-client