Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/JlmnFaROi5T304MtHTA71UjxRy0.roa
File: JlmnFaROi5T304MtHTA71UjxRy0.roa (raw, json)
Hash identifier: WacUNUJcf2dZiJ0rjzTFqXu+Ypi8vybjU4bLACTaUYw=
Subject key identifier: 26:59:A7:15:A4:4E:8B:94:F7:D3:83:2D:1D:30:3B:D5:48:F1:47:2D
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 019B7C80B5A38EB427352032D06073A5DD36
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/JlmnFaROi5T304MtHTA71UjxRy0.roa
Signing time: Fri 02 Jan 2026 02:19:28 +0000
ROA not before: Fri 02 Jan 2026 02:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208145
IP address blocks: 185.227.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:b5:a3:8e:b4:27:35:20:32:d0:60:73:a5:dd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Jan 2 02:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2659a715a44e8b94f7d3832d1d303bd548f1472d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:88:c9:6c:2a:78:6b:10:b7:67:0c:01:79:
72:73:59:d0:80:de:b3:07:d3:1f:d3:7b:60:22:6c:
6a:b2:d8:cd:89:64:32:76:af:57:2a:da:72:ec:8f:
05:3e:aa:fc:1a:23:30:13:fc:a5:78:46:3d:98:79:
79:3e:99:50:da:4d:94:9f:0a:f9:87:8e:16:f9:aa:
49:c6:0d:f7:b3:7d:70:fd:43:86:f9:38:89:6b:2f:
8c:c1:68:dd:fa:58:f3:87:a2:fc:80:ae:84:75:69:
c5:d8:c9:e0:be:ba:29:ff:41:6f:71:cc:5e:6e:45:
ad:3d:90:27:c5:5c:fa:af:1a:6b:ef:aa:fc:4e:03:
05:38:ec:b9:e6:57:7a:af:8e:2f:e4:f1:5f:e6:92:
c8:97:e7:fa:26:86:92:42:67:e6:06:d5:89:59:88:
dd:e3:bc:3d:97:0f:cb:79:db:d8:5a:ac:67:81:7f:
f9:35:d0:99:5d:6a:4a:70:d1:f1:4c:d2:62:94:80:
f9:6f:b7:88:e1:0a:df:62:6c:51:4f:20:8b:e0:b4:
65:db:d8:57:fd:52:10:75:c0:b5:ec:bb:c1:5b:32:
15:43:a2:45:1d:58:63:14:60:6a:41:9e:8e:6b:d8:
93:80:8e:ee:63:a9:d8:a0:bb:1d:2d:7b:7a:89:42:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:59:A7:15:A4:4E:8B:94:F7:D3:83:2D:1D:30:3B:D5:48:F1:47:2D
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/JlmnFaROi5T304MtHTA71UjxRy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.190.0/24
Signature Algorithm: sha256WithRSAEncryption
20:14:4d:36:ed:3b:12:64:b8:ae:44:de:7d:19:5c:33:2a:96:
57:71:e0:54:7b:43:f6:e4:df:a9:8e:55:75:89:a4:25:8b:aa:
02:cd:d8:ed:0f:cc:cf:06:59:e3:18:b3:b3:f7:cd:1e:4c:aa:
ce:c8:f4:bb:30:c4:6b:14:e5:a4:26:11:6f:07:87:3d:ba:c9:
bf:3a:78:62:1c:6f:70:c2:12:7d:9f:54:30:cf:65:2c:ef:5d:
84:c4:3b:1f:24:37:88:02:fb:0f:b1:d0:af:59:cd:3c:f6:09:
6c:c5:9e:90:d8:f2:dd:6e:4c:35:33:c8:1b:b5:72:77:88:f2:
0b:a3:1b:a5:86:f6:09:f4:cb:d8:fd:6e:9c:b8:3d:7a:81:9b:
78:36:36:8f:7b:df:8a:99:5f:65:48:4d:28:d5:c4:77:4c:ad:
fa:36:83:86:e0:05:46:d9:28:a8:57:6b:78:ff:9d:95:0e:2b:
1c:ba:21:67:e2:40:11:51:31:e6:4b:6c:55:f0:a6:e2:a8:ee:
91:3a:27:63:bc:13:9e:ea:30:4b:1d:71:53:01:6a:8d:e8:fb:
ff:4a:97:8d:df:20:79:52:1f:71:33:11:6d:f2:e3:25:f9:28:
cc:d8:93:fe:1b:c9:68:fd:04:6f:0f:6d:80:e6:d5:46:d2:5c:
ca:46:7d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 09:02:46 2026 by rpki-client