Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jbVbBow607nmplBAwqzdHj3D3E0.roa
File: jbVbBow607nmplBAwqzdHj3D3E0.roa (raw, json)
Hash identifier: rsphfW2eUH2Is30cML103RbXGdloTFKL9/3eOcWYVzo=
Subject key identifier: 8D:B5:5B:06:8C:3A:D3:B9:E6:A6:50:40:C2:AC:DD:1E:3D:C3:DC:4D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019F31B966F140D107E762787C30D258EF9F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jbVbBow607nmplBAwqzdHj3D3E0.roa
Signing time: Sun 05 Jul 2026 10:01:01 +0000
ROA not before: Sun 05 Jul 2026 10:01:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202831
IP address blocks: 93.88.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:b9:66:f1:40:d1:07:e7:62:78:7c:30:d2:58:ef:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 5 10:01:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db55b068c3ad3b9e6a65040c2acdd1e3dc3dc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b2:4a:03:64:ab:a5:79:b6:43:ae:47:41:7f:
c5:16:da:8a:5c:2b:10:62:70:29:5b:a5:61:47:44:
2b:c9:14:48:fc:d8:08:95:96:a8:a3:3f:12:14:e1:
c6:18:16:39:f4:9c:9c:a6:25:59:5d:f2:94:da:64:
b6:f7:e0:d1:47:22:c4:ad:db:d4:6c:e1:d4:69:3a:
04:75:d6:6d:d0:d4:b7:d2:46:85:e3:89:6d:0b:94:
c7:77:8f:e1:32:01:a1:ce:3b:02:17:91:0c:a7:fc:
4f:b3:fe:1f:4a:5e:58:0d:bf:57:7f:ef:ad:46:59:
6b:07:26:13:a0:56:42:a2:0d:2d:b4:ca:2b:d1:e4:
68:22:dd:92:3c:29:91:a9:12:dd:c4:b1:5e:e9:49:
17:58:ba:63:46:3a:2e:b1:ae:67:fe:2f:3e:a4:2c:
70:4b:da:ca:3e:f1:61:f9:66:08:c3:13:b9:b1:c1:
92:67:21:ce:88:03:7f:34:e4:b4:4f:4f:64:7c:c8:
ff:28:67:c8:4f:ad:75:ae:52:e7:dc:c0:df:53:b5:
05:13:2f:1a:47:eb:3f:9f:cf:16:fe:7e:9a:99:9d:
16:ec:6b:39:3b:1d:21:8e:ab:02:12:40:e1:69:b0:
8a:57:7e:de:d3:9a:c4:11:71:3f:f8:b6:d3:15:d1:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B5:5B:06:8C:3A:D3:B9:E6:A6:50:40:C2:AC:DD:1E:3D:C3:DC:4D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jbVbBow607nmplBAwqzdHj3D3E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:75:30:f5:74:88:c5:34:2d:62:d8:8f:b6:f6:54:8d:3a:a5:
cf:03:8c:8e:1d:86:4b:95:6b:87:84:be:3b:ce:03:d5:19:e6:
97:9c:5b:d0:92:50:2a:a9:ed:3b:6b:e6:fa:b5:9d:37:33:8e:
17:a8:69:c5:ee:22:17:3e:22:d5:ac:dd:bb:34:46:3c:ab:f4:
a3:e2:26:c6:d6:7d:0b:b9:84:69:75:fd:3e:f1:7d:6c:a6:7e:
47:3e:6f:d0:04:67:14:c4:9f:d0:06:d6:9f:99:76:24:e1:cb:
00:13:2c:25:01:a3:33:2d:5b:83:3e:cb:e1:20:aa:e4:a5:8a:
3f:01:9a:c9:16:35:e4:34:81:fc:15:c7:86:82:58:68:2b:9f:
37:7d:56:48:8c:2a:a8:da:cd:04:30:e7:16:d8:b6:ae:f0:07:
74:93:92:33:72:66:08:46:b0:ea:eb:4e:70:7a:d5:ac:be:2f:
f8:60:cb:20:17:2e:ec:77:91:6f:de:58:06:55:17:cc:1b:5b:
20:c4:48:80:70:d6:2b:e2:9a:15:68:af:d6:4b:fc:02:31:6f:
bb:5e:de:c7:9a:6f:6f:c3:57:e6:b4:87:6b:36:91:64:b6:a5:
88:d4:9a:20:d1:ea:7a:ca:17:85:02:82:cf:1a:2e:77:b1:3d:
08:51:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 16:47:19 2026 by rpki-client