Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/1jdP05-NgIwTl3lk44cn8qIQMdc.roa
File: 1jdP05-NgIwTl3lk44cn8qIQMdc.roa (raw, json)
Hash identifier: pQSMoWYjWspbL7UN2RACxWoJYmx2sKJPGc9pWAJvtrU=
Subject key identifier: D6:37:4F:D3:9F:8D:80:8C:13:97:79:64:E3:87:27:F2:A2:10:31:D7
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019FFA587DD6F11212EDF0113F621002C3F7
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/1jdP05-NgIwTl3lk44cn8qIQMdc.roa
Signing time: Thu 13 Aug 2026 08:58:51 +0000
ROA not before: Thu 13 Aug 2026 08:58:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 80.86.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:58:7d:d6:f1:12:12:ed:f0:11:3f:62:10:02:c3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Aug 13 08:58:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6374fd39f8d808c13977964e38727f2a21031d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:a7:d2:dc:c6:c7:be:36:c6:17:6a:af:eb:
fe:38:e9:79:14:c6:73:19:94:58:46:97:74:da:5d:
89:10:b6:f1:4f:4a:fa:24:2e:8e:ce:8e:3d:63:bc:
f1:0d:34:4d:48:e2:83:01:07:34:d3:e2:a0:8a:ea:
bb:6d:11:10:a7:1c:88:6f:a3:41:72:8c:9d:3b:16:
80:64:65:ee:2d:bd:73:ad:28:86:f6:e2:8c:3c:09:
a3:f1:e8:f1:48:df:70:f9:14:23:e4:ae:31:1c:e3:
81:02:23:9b:8d:4b:b0:2b:75:1e:65:42:10:9b:f2:
45:e6:22:f1:5c:dc:79:3c:93:58:bd:29:96:c4:5b:
ae:b4:69:66:2f:d3:ce:98:81:44:3b:14:7e:5a:c9:
6d:06:72:d3:9b:f1:f6:7d:8c:09:ff:1c:3d:36:d6:
fd:9b:d6:da:82:d7:91:b3:da:53:91:9f:df:b3:77:
25:47:4d:ef:77:72:a5:f0:55:d0:20:aa:67:cc:a6:
e0:f6:21:2b:e0:40:18:ac:db:ec:94:e5:1b:43:76:
de:22:dd:c1:ff:41:ab:b1:ab:8c:d5:02:a3:31:00:
5d:32:30:48:cd:e2:26:85:71:65:31:cf:48:ee:d5:
51:5a:68:03:7a:ea:53:52:fa:38:d0:93:58:bd:d0:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:4F:D3:9F:8D:80:8C:13:97:79:64:E3:87:27:F2:A2:10:31:D7
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/1jdP05-NgIwTl3lk44cn8qIQMdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:14:18:bb:d4:9c:d4:9c:7e:19:a2:5b:35:7d:f8:29:fd:e9:
6c:1d:f5:93:1b:75:67:0b:8f:ae:62:4d:d1:c4:da:7e:bb:74:
12:9a:04:64:2a:ea:57:71:d9:25:76:25:7e:d0:7a:f0:5f:34:
4a:53:17:e1:30:46:d3:ec:f5:79:84:cb:eb:4a:25:e0:f5:0a:
ba:27:2f:1c:ce:61:e7:48:5d:98:9a:15:eb:dc:00:23:a2:79:
a3:2a:99:b4:ef:9d:a6:d3:ca:48:c3:65:42:3d:1a:02:a5:96:
06:e9:7d:f6:c8:b0:dd:c7:3c:be:89:f6:06:0c:d8:ee:4d:23:
35:b1:9a:eb:04:e3:2c:48:81:39:b7:8e:43:23:b3:6b:e6:ef:
12:9c:a9:56:24:02:94:88:d0:9b:fd:a0:28:10:82:eb:22:dc:
3a:8d:4a:e2:b4:4e:8b:b8:91:f0:c9:01:23:fb:8e:b9:56:4f:
a7:01:9f:b7:be:85:91:22:bf:34:c3:49:c8:9a:9e:59:bf:52:
13:c3:0b:fd:b0:6d:06:ff:61:a5:63:6a:52:72:46:11:f2:3c:
3c:56:c0:42:f9:b9:dd:de:47:a8:d5:14:de:2f:db:e0:b6:81:
f9:39:71:da:e5:54:e3:9b:5f:ec:20:36:91:bc:04:94:fc:5c:
1a:a5:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:51 2026 by rpki-client