Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/jbfWEblDU9JoZUKXFxvq4cX9iak.roa
File: jbfWEblDU9JoZUKXFxvq4cX9iak.roa (raw, json)
Hash identifier: htDa9O2FAE459I7whhzqTFK5LJwnvazGr69XNvnq9Rc=
Subject key identifier: 8D:B7:D6:11:B9:43:53:D2:68:65:42:97:17:1B:EA:E1:C5:FD:89:A9
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A01B072628445DEAE61DE1962E37018805
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/jbfWEblDU9JoZUKXFxvq4cX9iak.roa
Signing time: Wed 19 Aug 2026 17:17:28 +0000
ROA not before: Wed 19 Aug 2026 17:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218970
IP address blocks: 201.7.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:07:26:28:44:5d:ea:e6:1d:e1:96:2e:37:01:88:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 19 17:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db7d611b94353d268654297171beae1c5fd89a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:05:7b:34:f9:c4:a0:3f:a8:d6:8e:64:66:
95:e5:88:b5:63:21:10:b2:9a:01:f3:61:c7:0b:c8:
d2:fd:f3:7d:76:77:a8:8f:de:56:9e:70:cf:8d:5b:
40:d8:ad:64:2a:42:dc:5d:bf:5b:8c:26:57:8b:c7:
65:07:45:f2:fc:bf:c7:39:01:1d:44:1c:99:d8:af:
7c:23:06:9c:ba:8c:d3:73:59:9c:e6:ad:0a:58:ca:
df:3a:19:03:2a:d2:f8:da:43:4b:36:dd:b2:b2:0c:
60:3b:4f:0f:09:6e:73:1c:d9:a1:0c:26:9c:85:6e:
70:4a:89:af:75:67:95:1c:b5:ba:7e:14:8b:57:43:
58:cf:26:a4:b3:aa:c5:bb:79:21:de:b1:25:10:91:
5b:1c:0a:78:d0:7d:15:b3:e8:20:64:89:76:d4:0e:
32:f9:23:66:d9:da:ba:0b:b9:05:2f:41:73:35:f9:
e0:d1:91:9e:f0:0c:3b:e5:56:c0:6d:18:66:b4:bb:
7a:50:fd:e9:ff:87:c3:33:39:2f:de:0c:53:7b:2d:
c8:56:20:a3:de:b6:19:71:88:ca:fe:66:18:4c:5c:
6b:89:38:80:d4:34:f4:47:fa:0d:f3:73:a7:36:8a:
e5:d0:2e:ea:ad:e1:98:76:80:0d:30:50:87:f4:e7:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B7:D6:11:B9:43:53:D2:68:65:42:97:17:1B:EA:E1:C5:FD:89:A9
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/jbfWEblDU9JoZUKXFxvq4cX9iak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.23.0/24
Signature Algorithm: sha256WithRSAEncryption
81:fb:3e:be:d6:34:71:7f:0b:02:93:4c:6b:79:5f:c9:33:f9:
0d:5d:83:86:93:7d:ce:19:e1:6d:8d:da:4a:31:34:00:0b:d2:
8b:61:a8:20:82:57:be:cc:9d:ee:28:38:ef:99:5b:99:f5:95:
51:f2:7a:0c:4e:b5:dd:f8:27:8b:fb:32:ae:43:bd:23:e0:65:
5e:72:85:c7:f4:c2:9c:e7:de:8a:89:36:0a:4c:82:8d:06:ed:
32:93:38:42:72:33:e7:a5:81:39:ee:4c:3c:19:2c:3b:45:0f:
46:76:8d:a1:d6:9c:22:f2:19:0d:e3:2e:ad:70:5e:76:70:b2:
02:58:3c:a5:af:b7:4e:23:9d:9f:a3:4f:82:39:d1:3f:d0:32:
7e:19:1b:f3:43:91:ad:67:49:80:68:0f:20:e4:59:06:ab:7b:
88:7d:e4:e4:3d:00:38:fa:29:2c:0d:32:df:4b:9e:17:b0:cf:
b5:a7:92:66:b5:9b:b7:35:a6:4a:0f:78:08:68:e2:56:9d:b4:
da:73:bd:bb:d7:4a:71:d4:a9:d8:bd:29:99:a1:34:4e:be:1b:
e3:1c:c2:d3:ad:8e:c4:0d:ff:e6:25:ba:bd:dc:57:12:4e:29:
64:ac:53:20:99:8f:ea:41:1d:da:7a:46:09:c0:17:74:bc:d1:
09:84:9c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:17 2026 by rpki-client