Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JRAyqpCKhOP_oY2p7kVy_bmCR9s.roa
File: JRAyqpCKhOP_oY2p7kVy_bmCR9s.roa (raw, json)
Hash identifier: UO+Gl+8YM8e4AKJbwcgrMxv95gAa/ihUauXwAXfEcX4=
Subject key identifier: 25:10:32:AA:90:8A:84:E3:FF:A1:8D:A9:EE:45:72:FD:B9:82:47:DB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019E691848923464803463D1EC32CB3D4105
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JRAyqpCKhOP_oY2p7kVy_bmCR9s.roa
Signing time: Wed 27 May 2026 11:00:59 +0000
ROA not before: Wed 27 May 2026 11:00:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209378
IP address blocks: 45.148.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 14:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:18:48:92:34:64:80:34:63:d1:ec:32:cb:3d:41:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 27 11:00:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=251032aa908a84e3ffa18da9ee4572fdb98247db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:29:f0:e3:6a:f1:ae:ef:4e:26:c3:af:5f:
68:53:e7:be:42:e6:4d:5c:cb:94:a2:2a:67:8b:4c:
3c:37:3e:75:95:b0:36:e8:a9:08:da:74:ef:77:c8:
9f:d8:6e:85:08:5c:9e:0b:1a:4b:1a:7b:ac:1b:4c:
ca:af:61:5f:f3:0e:c4:8f:13:3b:c7:bf:01:01:9f:
b0:69:0a:44:36:da:94:59:5c:e4:09:29:64:d5:6e:
b0:3e:d6:e8:1e:94:1f:b3:54:ad:cc:53:30:21:da:
1f:e8:66:2b:13:b5:cb:df:5e:1b:a8:75:f1:87:34:
28:c7:62:b4:43:88:e9:f4:69:f3:6e:65:3c:0f:54:
b9:16:db:73:e0:83:16:53:31:2d:10:73:3b:39:42:
7d:d8:60:a2:9e:03:7b:1f:c0:b7:92:32:cc:69:7f:
3a:78:10:c4:31:a6:2a:d9:f4:10:f8:2e:dc:87:30:
e6:4c:93:d1:bc:ff:b5:ea:f2:bb:27:d6:61:f7:4c:
7a:b4:11:cd:e8:ec:47:8b:32:fb:b5:81:05:9a:f6:
21:73:3c:7e:67:4b:8e:b2:80:1a:2d:57:ee:68:49:
36:c5:a5:48:f8:b9:9c:c1:23:8b:1b:03:8c:2f:80:
c5:d6:da:85:e5:4a:3f:81:3c:25:de:4e:86:96:16:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:10:32:AA:90:8A:84:E3:FF:A1:8D:A9:EE:45:72:FD:B9:82:47:DB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JRAyqpCKhOP_oY2p7kVy_bmCR9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ec:c5:10:b1:b7:cc:fb:a2:5f:3c:5c:d1:65:18:ab:d2:1e:
0a:a3:17:b1:74:88:51:05:f7:37:4f:25:77:51:34:bc:25:28:
3d:fe:36:d5:c5:b4:1b:35:fc:17:48:8b:de:11:98:79:6f:e9:
ad:1e:b1:70:57:fc:cc:26:94:06:41:87:c4:4e:8a:13:3b:14:
22:73:fd:83:a9:1f:0b:1f:c8:36:2e:fb:9e:2e:22:43:ed:bb:
83:d9:8a:5d:55:0a:c0:d9:ff:1f:7f:de:df:a7:64:08:92:6a:
1a:d2:2e:70:a9:36:c8:d8:48:04:72:ad:3a:c0:7e:47:d0:3f:
1a:37:aa:7e:d4:8c:ff:63:86:5b:02:18:35:6b:74:00:cd:18:
5b:cc:12:91:ed:93:b2:e9:34:c9:17:58:84:0a:75:fb:36:31:
63:19:2f:c4:e3:fa:17:b5:d2:79:2a:dd:3b:22:99:a0:58:66:
44:56:bf:71:a9:d4:e2:91:33:93:d3:6b:2c:7f:4f:dd:ab:c7:
0a:4e:89:30:37:65:f0:04:53:2e:b0:32:e8:b7:12:9f:0f:6a:
0d:73:d0:9f:92:22:ed:45:18:62:6a:58:05:8b:b1:ff:d7:57:
38:37:3c:2f:ac:20:c6:88:f2:2b:2d:cc:58:58:88:42:f6:88:
fe:e4:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 21:59:18 2026 by rpki-client