Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/rjj85G41agmWdzPiFSnsDPE87Hk.roa
File: rjj85G41agmWdzPiFSnsDPE87Hk.roa (raw, json)
Hash identifier: qHUw5mxXtkbJnKtqVrRVAoH6XcgzwBxRlv4VCQYqgJg=
Subject key identifier: AE:38:FC:E4:6E:35:6A:09:96:77:33:E2:15:29:EC:0C:F1:3C:EC:79
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 01A1C6F6AAC43874318972953474503A1462
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/rjj85G41agmWdzPiFSnsDPE87Hk.roa
Signing time: Tue 10 Nov 2026 19:36:56 +0000
ROA not before: Tue 10 Nov 2026 19:36:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 152.236.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:f6:aa:c4:38:74:31:89:72:95:34:74:50:3a:14:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Nov 10 19:36:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae38fce46e356a09967733e21529ec0cf13cec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:87:7c:00:ce:fc:da:cd:47:3d:15:ea:a0:
45:72:39:b1:22:1e:45:af:d1:fd:62:16:18:8e:18:
09:72:aa:d2:5d:b7:98:84:e8:a8:9f:dc:85:27:7c:
31:86:50:66:e3:17:be:6a:76:a1:79:37:bf:5e:9a:
8c:fc:0d:ac:4e:fe:ea:af:74:39:64:38:e1:5e:c0:
ee:c6:e1:63:56:9d:74:95:57:be:20:ae:3f:27:78:
35:e0:b6:d0:b8:7d:da:8b:9d:f7:c8:0c:2e:e1:37:
98:80:0b:74:7a:d9:ca:dd:a8:35:30:77:2b:75:13:
c7:ec:10:40:cd:d0:cb:1d:50:de:7b:1e:e6:6d:96:
0b:1f:ab:12:39:94:cf:b8:d9:fa:42:fc:37:72:29:
c7:cf:dd:a9:01:9b:02:76:05:f8:1b:58:e6:85:bd:
eb:b7:25:21:50:b2:cf:16:15:b5:75:8c:dc:6e:ad:
07:ac:18:15:10:5c:40:68:23:65:b7:0a:ac:74:cd:
c3:e2:c3:52:4e:17:9a:6a:c9:08:94:c5:0f:01:8a:
a3:8a:c8:4f:fe:ae:63:f3:7d:4f:76:23:0d:55:95:
a9:6e:32:47:b2:d6:26:47:5e:01:aa:0c:50:46:62:
f9:23:ec:bb:c2:99:0b:7e:a3:de:00:44:ad:c5:18:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:38:FC:E4:6E:35:6A:09:96:77:33:E2:15:29:EC:0C:F1:3C:EC:79
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/rjj85G41agmWdzPiFSnsDPE87Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.236.0.0/17
Signature Algorithm: sha256WithRSAEncryption
48:13:3f:2d:fe:6f:ca:3e:9f:ea:37:d4:cd:f9:7f:1a:74:58:
ac:a7:f0:90:15:d2:67:53:f9:1b:91:e3:aa:d1:d2:53:59:4c:
15:66:a0:68:8f:ad:90:db:3c:75:4d:9b:dd:73:f0:52:3a:be:
e3:6b:37:1a:96:d4:21:ed:9c:3b:d9:7f:b8:2a:14:b6:55:04:
1d:80:2a:cb:e6:99:06:22:d0:64:d5:a2:e0:f3:25:61:4a:64:
5f:4f:88:22:bc:6f:4f:08:49:a0:0f:bb:a5:9f:60:77:d6:83:
53:be:9e:df:1c:e0:ae:f5:2a:d5:6f:39:2f:91:7f:a8:c8:50:
67:49:f3:1a:e4:70:c4:90:96:9f:f3:43:8c:af:c3:37:a7:72:
62:34:c8:e2:65:85:df:1c:a6:7c:23:b8:58:f7:8b:76:8c:b3:
ae:c0:59:6e:d4:f3:c8:0d:7a:31:ff:60:4c:65:33:16:2b:93:
2a:a7:cf:f8:50:0f:9c:4d:77:70:fc:cb:3b:b2:b3:aa:9a:2e:
57:c0:5a:56:84:b0:b1:e7:84:26:a3:19:b1:a4:c4:5c:91:07:
65:ef:ba:cf:db:e5:a0:12:37:3a:0a:22:70:0e:4e:92:ea:07:
56:f9:75:57:c1:54:b2:a6:d2:68:37:d9:0a:5b:64:90:2a:93:
41:1a:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:47:57 2026 by rpki-client