Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/JKGW4gg3OI-zymSfSwtWhhEO1-c.roa
File: JKGW4gg3OI-zymSfSwtWhhEO1-c.roa (raw, json)
Hash identifier: Hj2gZmYvtr1JqmPfTXMpYrbuy1yiPpWa6zihMnTrs60=
Subject key identifier: 24:A1:96:E2:08:37:38:8F:B3:CA:64:9F:4B:0B:56:86:11:0E:D7:E7
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019FDB64A5E852702BEAB7DEBB8EF3E164C0
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/JKGW4gg3OI-zymSfSwtWhhEO1-c.roa
Signing time: Fri 07 Aug 2026 08:43:54 +0000
ROA not before: Fri 07 Aug 2026 08:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 212.102.236.0/24 maxlen: 24
212.102.248.0/24 maxlen: 24
212.102.249.0/24 maxlen: 24
212.102.250.0/24 maxlen: 24
212.102.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:64:a5:e8:52:70:2b:ea:b7:de:bb:8e:f3:e1:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Aug 7 08:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24a196e20837388fb3ca649f4b0b5686110ed7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:05:3d:74:84:3f:bc:6d:b3:ee:38:fb:49:
a1:10:40:71:fd:a3:1d:21:95:49:08:6f:7d:b9:fa:
1d:84:8e:54:09:f1:e5:ba:f2:57:41:b9:e6:21:bf:
28:5a:5c:0e:3b:79:5e:b0:c9:51:c3:96:6e:f0:76:
ca:3f:c4:1a:1a:73:ba:74:b8:79:a7:0b:f2:44:5e:
63:f8:23:e6:0a:7e:e7:13:53:06:6a:79:46:be:86:
ab:58:97:d8:b7:22:19:16:86:18:64:5e:23:40:c8:
64:a3:b6:74:74:b8:88:df:a6:22:22:88:25:b6:d8:
60:21:88:a1:fb:6b:eb:9a:0c:78:83:5b:7f:52:e4:
b4:f2:04:d7:43:1f:97:6b:44:bd:55:dc:98:10:02:
af:66:0c:4f:c5:56:dd:70:dd:7e:92:d1:ef:31:3c:
e7:ce:8a:5a:33:da:80:ee:96:5b:47:ec:23:fa:0e:
d4:89:f7:75:63:ad:85:5d:7d:68:21:0e:25:de:b2:
24:9f:90:e7:d3:a1:53:0d:ce:eb:d9:1e:fa:78:81:
a1:a2:d8:ed:0b:f9:6e:eb:32:13:72:37:75:7c:11:
bb:7f:ce:68:3a:fd:fe:be:5c:9f:8d:05:f4:9d:f7:
87:81:8d:f5:5f:78:51:95:1d:74:b3:ad:d7:4a:71:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:96:E2:08:37:38:8F:B3:CA:64:9F:4B:0B:56:86:11:0E:D7:E7
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/JKGW4gg3OI-zymSfSwtWhhEO1-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.236.0/24
212.102.248.0-212.102.250.255
212.102.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8d:4b:4f:7a:d1:57:19:d1:be:e1:40:38:4f:11:48:6c:b6:
c6:63:5d:9d:9d:90:45:82:6c:3d:2f:80:e9:e7:be:45:4d:7f:
e4:ff:ef:79:d8:e9:8d:79:05:10:51:71:01:2b:91:90:e8:7d:
92:c1:4c:15:92:62:ed:9f:6b:e9:c1:f4:6b:c1:0e:28:5c:94:
8c:9e:10:7d:08:17:38:40:b3:73:22:69:b7:10:56:bd:90:c1:
73:d6:eb:57:f7:5e:9a:97:3d:f4:0c:88:83:4b:3d:ec:be:a6:
53:70:9a:57:e7:ba:a6:f4:58:65:29:8b:5d:78:1a:25:b7:46:
63:9b:ea:43:09:b9:ed:c8:30:25:80:10:a1:59:a6:2c:4c:ee:
07:6b:ed:4d:61:4b:61:29:49:8a:8d:2b:86:52:80:7e:68:a0:
ee:a6:69:fe:ad:41:95:a2:d7:9a:5e:77:2a:39:94:0f:4b:c9:
b1:de:6b:88:17:57:91:a7:2a:3b:3b:5f:85:01:12:0f:b0:e4:
ff:6d:82:7e:61:da:3a:c1:9c:9c:d4:47:e0:71:ec:2b:cc:73:
41:ef:b3:65:aa:84:2c:5e:d5:eb:8d:c5:4a:69:d0:4d:51:f4:
28:27:7d:10:41:8c:9d:69:df:8b:34:29:25:d6:ed:1c:37:fb:
20:6f:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:54:16 2026 by rpki-client