Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JdsnWjKWNpK-M4eYvb6jZgwOlnU.roa
File: JdsnWjKWNpK-M4eYvb6jZgwOlnU.roa (raw, json)
Hash identifier: Kjpigw4CPkE1L9c6CynQo27agyjms5NJfqFBMkDkACQ=
Subject key identifier: 25:DB:27:5A:32:96:36:92:BE:33:87:98:BD:BE:A3:66:0C:0E:96:75
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A05C6CA323BB903F7339F7973210692031
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JdsnWjKWNpK-M4eYvb6jZgwOlnU.roa
Signing time: Tue 01 Sep 2026 10:03:38 +0000
ROA not before: Tue 01 Sep 2026 10:03:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 88.216.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:6c:a3:23:bb:90:3f:73:39:f7:97:32:10:69:20:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 1 10:03:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25db275a32963692be338798bdbea3660c0e9675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:35:ef:91:91:66:fa:b6:d5:c7:d5:2a:1d:
53:94:fb:97:98:07:c8:e8:02:1d:bf:05:5a:55:fa:
ae:cf:af:bd:64:9e:b5:be:e2:fb:1a:0f:ad:09:2c:
5e:53:2d:9a:03:8a:36:96:6b:50:18:6b:78:25:7e:
21:d8:9c:47:6e:ae:49:27:2b:e9:4d:cf:6e:2e:72:
7e:e7:d3:0b:97:33:ec:77:ed:ca:1a:41:42:ad:9f:
5e:56:a0:50:48:bc:08:6e:f1:7e:1a:c4:5d:f7:45:
cb:01:b8:fb:13:02:da:c2:da:7d:a0:79:d2:0a:d6:
41:32:75:ae:c5:9e:03:81:c6:6e:53:00:29:55:74:
8b:ec:45:af:dc:cb:5e:67:04:85:1a:4c:7b:bb:c4:
53:a3:e5:74:b7:c3:cf:24:98:7d:f6:51:ea:f7:98:
3a:78:76:aa:06:c7:34:f1:56:7e:81:db:16:03:5a:
3c:12:89:f4:77:85:9d:90:e7:ba:ae:4c:2c:1d:1f:
03:8a:dd:75:9d:cd:2e:ac:ba:25:ee:c4:0c:2a:5c:
be:59:b5:b5:06:95:78:22:42:e2:de:5d:95:64:b7:
0c:9f:84:72:de:4a:e3:ce:79:f1:da:6d:95:5e:36:
87:2e:90:8b:18:c1:a9:69:23:eb:f1:bb:08:7f:43:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:27:5A:32:96:36:92:BE:33:87:98:BD:BE:A3:66:0C:0E:96:75
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JdsnWjKWNpK-M4eYvb6jZgwOlnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.135.0/24
Signature Algorithm: sha256WithRSAEncryption
32:33:41:83:87:ee:88:81:9e:38:ce:a8:56:2a:9c:2c:11:94:
7c:17:a7:c0:83:c0:c5:92:8c:a2:37:c0:5f:8d:f2:08:24:81:
7f:70:29:93:64:9b:c3:0e:a2:d4:fd:9e:cb:fa:30:f9:51:cc:
9f:e1:37:3a:4e:e0:b6:3c:a7:8c:e8:e4:af:48:73:94:da:e8:
3a:67:3d:a3:23:92:fb:0c:b5:98:88:10:77:bf:72:fa:98:bc:
af:63:f2:2b:69:e6:ea:34:f5:c2:58:1f:42:05:c4:39:c9:67:
0e:e7:98:84:93:b2:4c:02:38:b7:6c:65:b4:96:32:5c:1c:86:
30:97:5b:c2:25:a2:f7:4d:d9:34:f0:fb:72:61:29:fe:89:b3:
cc:3a:86:39:2b:64:31:b9:02:51:aa:19:68:5d:3b:b6:02:88:
fd:b4:48:88:9d:cb:70:a9:21:9d:f0:81:94:16:e9:44:7a:4c:
59:aa:96:df:d0:e7:8b:bc:61:4e:75:bb:15:e4:f7:74:47:e1:
9f:4a:44:00:d8:20:de:1d:62:05:c9:29:44:55:e8:12:66:4d:
bb:3a:b5:f8:8f:d1:0b:c9:e9:f8:18:49:d8:9e:e7:27:4c:9d:
ac:cf:b5:32:fa:e5:14:9d:33:df:8a:d1:62:a9:32:4d:7b:ae:
5a:f3:50:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:49 2026 by rpki-client