Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/jwCeqhEGnEwv6Y19UtXUg8GD6zU.roa
File: jwCeqhEGnEwv6Y19UtXUg8GD6zU.roa (raw, json)
Hash identifier: WEJrQ+xJek+2Absm0J+C3VpL2xmTd9FmmDu0jKWpyi0=
Subject key identifier: 8F:00:9E:AA:11:06:9C:4C:2F:E9:8D:7D:52:D5:D4:83:C1:83:EB:35
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01A08052BAE230250AE88E6CC37884D81B17
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/jwCeqhEGnEwv6Y19UtXUg8GD6zU.roa
Signing time: Tue 08 Sep 2026 09:21:40 +0000
ROA not before: Tue 08 Sep 2026 09:21:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 158.173.54.0/24 maxlen: 24
158.173.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:52:ba:e2:30:25:0a:e8:8e:6c:c3:78:84:d8:1b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Sep 8 09:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f009eaa11069c4c2fe98d7d52d5d483c183eb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:b8:e7:d0:3a:03:b1:7c:73:4f:e6:18:37:
61:5b:80:44:bd:5a:99:2d:98:68:a0:a4:ad:a9:d9:
45:bc:3d:3e:f2:dd:13:1e:30:1f:7d:6d:49:2f:3b:
6f:ba:8a:5a:b1:25:c1:7d:3f:32:18:1a:49:0c:aa:
d9:96:b8:c9:38:be:45:d2:8b:de:95:42:4b:e0:c0:
43:2a:95:fc:ba:e2:b9:99:13:9c:e2:9e:75:71:3f:
22:22:e1:b2:cc:3b:df:1b:e3:c2:63:ac:81:90:2c:
4c:ce:d8:d7:3c:2c:83:08:b5:13:0f:81:f6:ce:7b:
ee:30:ca:4a:86:79:93:7d:12:6a:35:e3:f5:ba:ec:
85:b9:b8:ad:81:6d:4d:de:fd:66:46:0d:ec:f5:3a:
09:24:df:4a:33:d5:42:fa:d9:47:f7:f8:01:c4:e8:
21:49:dc:5f:a2:54:57:2b:e6:84:9a:51:bd:9b:08:
0a:79:e5:e5:45:53:0d:74:e6:89:fb:ac:9d:96:6a:
1d:bd:1b:51:d9:db:91:2a:62:04:44:f2:3c:9c:f7:
0a:d1:73:4a:7b:18:ea:9b:08:fc:20:3a:bc:3f:e3:
e5:40:d7:4d:12:c5:92:2a:3f:a2:9e:cc:2d:bc:72:
09:40:9e:be:13:2b:b3:82:ce:db:89:3b:72:a8:a9:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:9E:AA:11:06:9C:4C:2F:E9:8D:7D:52:D5:D4:83:C1:83:EB:35
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/jwCeqhEGnEwv6Y19UtXUg8GD6zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.54.0/24
158.173.119.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a9:ad:17:17:9e:ad:2e:c1:15:b0:9d:06:e7:93:15:fa:44:
ed:06:cb:71:dd:69:a7:5f:25:18:a7:1e:f5:4d:91:74:79:49:
e5:cf:d8:2f:2d:57:e8:b3:c3:4e:50:18:43:d3:87:1b:0b:25:
ea:91:f2:23:65:12:86:6f:9a:4a:03:20:c8:b6:6e:75:d3:b5:
24:98:f1:26:23:54:ab:99:42:35:39:a5:ec:f8:c7:77:47:e4:
ac:80:67:80:3a:25:e2:d9:76:52:e1:84:74:23:52:7a:6e:7f:
93:0b:e2:8c:36:c1:53:3f:57:6c:64:ef:9c:5f:58:32:dd:9a:
4b:ab:73:90:38:65:5a:97:39:06:b3:02:38:e2:81:a0:f2:a9:
50:ce:34:65:19:17:65:51:ec:f6:c3:fa:97:07:df:ac:90:0f:
85:b0:9f:d0:73:c1:31:f8:56:62:78:d0:00:40:1e:32:a6:96:
4f:d2:da:b4:98:b4:a3:fd:28:77:77:82:1b:6c:71:6b:d8:10:
b8:cc:4a:9e:22:8f:97:82:61:a5:54:d1:ef:bd:44:72:f0:cb:
f2:41:1e:0e:ea:e2:d1:ed:c3:e3:19:ed:55:db:16:31:72:80:
89:0f:2d:dc:41:e1:14:be:cb:07:c6:83:9c:74:b3:4e:41:cd:
91:ab:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:25:49 2026 by rpki-client