Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jbMEBYDy7NegfRwfdWJBrd-Ly_U.roa
File: jbMEBYDy7NegfRwfdWJBrd-Ly_U.roa (raw, json)
Hash identifier: opzMzgTWI1citR81pDXumm5m0PmN1SmPcVWU5OUByJE=
Subject key identifier: 8D:B3:04:05:80:F2:EC:D7:A0:7D:1C:1F:75:62:41:AD:DF:8B:CB:F5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E8A050DA7096D9908140736125EC3A84A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jbMEBYDy7NegfRwfdWJBrd-Ly_U.roa
Signing time: Tue 02 Jun 2026 20:27:27 +0000
ROA not before: Tue 02 Jun 2026 20:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200173
IP address blocks: 167.17.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8a:05:0d:a7:09:6d:99:08:14:07:36:12:5e:c3:a8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 2 20:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db3040580f2ecd7a07d1c1f756241addf8bcbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:49:aa:bd:6c:97:c1:d2:65:fd:ea:51:f0:
f9:f5:23:a0:bb:1d:06:ee:8a:fe:00:20:ed:85:e3:
4a:3b:0c:33:21:06:61:6c:04:e6:21:f7:13:b8:fc:
e3:bd:28:5e:5f:c3:5b:3c:57:b8:0d:57:98:87:2e:
d0:40:b5:23:23:f6:36:52:dd:5a:5e:36:6d:db:1c:
28:91:a0:ed:68:d3:9e:3d:ea:00:1f:35:b0:48:85:
5c:45:68:b3:4a:95:cd:d8:2d:30:ed:ac:b9:48:9e:
c5:3a:61:a9:98:b0:46:fd:3f:84:41:05:2e:e2:6b:
b5:46:b2:8e:c5:6c:67:ab:f1:f0:53:91:dc:ad:ff:
13:42:e5:77:ba:1d:ec:7e:f6:16:65:93:82:c9:75:
df:00:73:41:30:4f:46:9d:00:51:12:d2:f2:1d:09:
ac:8e:1a:ab:8b:94:da:76:4a:37:b4:57:a0:b6:12:
e1:23:2f:25:bb:2b:b3:01:61:e4:0b:58:c5:58:17:
ea:63:a9:ac:62:b4:1a:32:41:7b:e1:eb:19:01:93:
95:17:fa:3a:1b:c5:bf:cb:c7:26:8f:13:2e:02:c2:
45:ee:13:9a:a1:ac:52:3f:cf:50:33:9e:96:1f:f2:
22:c5:64:2d:de:c5:49:92:a2:be:81:86:05:50:2a:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B3:04:05:80:F2:EC:D7:A0:7D:1C:1F:75:62:41:AD:DF:8B:CB:F5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jbMEBYDy7NegfRwfdWJBrd-Ly_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.17.58.0/24
Signature Algorithm: sha256WithRSAEncryption
48:33:3e:28:2a:1f:d8:f8:04:cd:3e:81:16:04:dd:76:7e:4c:
42:09:46:55:78:f9:36:80:ca:13:0d:3d:97:8f:e2:b7:4a:c1:
d7:a0:ac:aa:bd:9b:aa:4a:8f:20:79:99:ed:95:81:27:50:19:
be:26:bd:ef:73:7c:86:55:3d:9f:fc:29:a6:1a:24:e7:08:f7:
23:58:1c:2a:32:5b:53:3b:45:0e:82:26:db:d8:03:fc:e4:85:
cb:55:c0:36:b4:0a:3d:18:fd:87:b8:86:00:98:c5:b4:52:a0:
a4:38:8c:99:ad:a4:65:c3:7d:a8:33:1e:cd:f9:c3:63:27:c4:
3d:a8:8d:f4:ed:a5:e7:0d:c1:40:a5:e9:1c:1c:8d:7a:b6:19:
0b:5c:56:de:d7:34:54:5c:c7:19:bf:59:96:59:73:a4:7c:79:
70:68:41:e2:12:d8:d3:2f:64:94:d8:12:f0:5c:90:e3:51:40:
07:a1:18:50:d0:d9:9b:19:5f:f9:1b:93:a9:5b:e3:a3:31:d1:
11:30:12:46:be:fb:39:7b:86:77:1d:8e:61:65:20:dc:da:01:
fe:8a:ae:25:c2:00:bc:f7:14:68:e3:7a:63:27:57:43:12:f0:
5c:c2:c3:91:d4:90:6b:f9:dc:b8:b5:45:89:13:6d:fc:74:3b:
a8:23:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:20:38 2026 by rpki-client