Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/j9lc-ex-WkmM9BnD45iMpsjwroI.roa
File: j9lc-ex-WkmM9BnD45iMpsjwroI.roa (raw, json)
Hash identifier: ZeS0Wk64Zr/6kFmoZd3JWU6lISb8tSsRWZWDLFzpZ2c=
Subject key identifier: 8F:D9:5C:F9:EC:7E:5A:49:8C:F4:19:C3:E3:98:8C:A6:C8:F0:AE:82
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A0AF14BE25A266F548D6F2C035A715DDF4
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/j9lc-ex-WkmM9BnD45iMpsjwroI.roa
Signing time: Thu 17 Sep 2026 11:16:07 +0000
ROA not before: Thu 17 Sep 2026 11:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 109.111.34.0/23 maxlen: 24
109.111.40.0/23 maxlen: 24
109.111.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:14:be:25:a2:66:f5:48:d6:f2:c0:35:a7:15:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 17 11:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fd95cf9ec7e5a498cf419c3e3988ca6c8f0ae82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:10:10:d4:2a:40:40:b1:56:a0:1f:42:1f:
55:69:c3:59:98:34:be:61:cf:7c:b8:0a:21:a6:96:
dc:6c:3e:85:22:81:57:59:ed:9e:1f:39:f7:7b:46:
97:3f:bf:33:ca:9b:b5:f3:79:e4:a2:57:03:7a:a0:
41:80:ff:69:26:cb:1f:8b:b7:49:4a:47:a9:0a:03:
df:da:93:dd:d3:5d:35:db:86:3b:79:71:c8:81:5b:
c9:8e:a0:24:86:35:20:ff:12:bc:77:b9:be:df:1a:
a5:7e:8d:1d:94:a0:69:df:c5:37:66:98:3e:cb:44:
d7:5e:29:7c:d1:73:96:82:78:c3:7c:b2:14:2c:7c:
f8:f3:00:32:14:f9:1b:54:86:01:ad:df:ce:b7:d9:
cd:bb:07:64:c1:7e:99:36:29:e8:af:e5:ae:ec:9b:
68:54:c2:50:e9:f2:01:64:30:1b:db:f8:76:20:d3:
b6:0b:c4:5c:85:98:a4:ac:2e:63:bb:42:8c:45:da:
62:49:68:58:06:8f:3d:fd:b2:07:98:86:3b:c2:f2:
53:ec:55:6a:58:63:60:a6:87:56:90:72:62:1e:b0:
3d:c6:3a:be:4e:a9:cb:25:5c:a7:70:e1:e9:aa:3f:
29:a0:0b:7a:16:b7:98:35:91:8f:62:7f:a7:4d:3f:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:5C:F9:EC:7E:5A:49:8C:F4:19:C3:E3:98:8C:A6:C8:F0:AE:82
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/j9lc-ex-WkmM9BnD45iMpsjwroI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.34.0/23
109.111.40.0/23
109.111.48.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:4e:18:3f:93:14:a9:aa:c5:67:91:4a:16:89:a4:f8:07:e4:
25:a0:96:0d:68:4e:66:8a:6e:e9:3e:11:87:e3:af:de:59:16:
25:8a:14:13:ec:e1:7a:49:84:f9:84:50:ad:08:0c:e2:6e:04:
7f:48:fb:b6:86:27:ad:20:3f:e2:92:5e:11:99:29:69:34:65:
63:1a:3d:60:8a:e9:07:cf:a0:d1:40:d1:01:38:c3:f6:b9:4c:
e4:64:20:96:88:b1:7b:9b:b7:01:fe:16:91:24:1d:1a:60:00:
c7:25:5e:9b:f7:75:d2:bd:c5:1d:d4:61:06:c8:cc:79:5b:7f:
5c:3f:bd:ff:37:2d:0f:a0:bc:27:60:75:e5:98:87:0e:33:3e:
c6:a8:ce:2c:31:78:4d:d5:aa:4b:0f:80:e5:45:da:85:99:1d:
c6:cd:cc:9a:49:2d:b4:b4:97:1c:74:8b:46:4e:07:3e:77:41:
a9:bc:ce:f2:59:ab:03:c1:b4:c8:1d:bd:5e:77:96:ad:3d:9a:
1e:a9:24:f0:6a:a6:b9:fe:c6:f6:5b:75:8e:36:96:89:6b:12:
e3:7c:35:35:99:5d:2b:ac:ee:ad:e2:b6:af:73:42:7b:88:ee:
96:ac:39:1a:55:1a:f3:f4:28:af:a5:a9:f6:a3:a4:f8:16:85:
b7:63:e5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 01:29:49 2026 by rpki-client