Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jjGilfw-4fe6m-I2Z-WeoxYtlsI.roa
File: jjGilfw-4fe6m-I2Z-WeoxYtlsI.roa (raw, json)
Hash identifier: 7rMZ4U+4AQGDwcDkkGIK90j+I36rutf5C5jgLebpq04=
Subject key identifier: 8E:31:A2:95:FC:3E:E1:F7:BA:9B:E2:36:67:E5:9E:A3:16:2D:96:C2
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019DC7F79DBDD6FCA2F1BB9047EC5A0251F7
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jjGilfw-4fe6m-I2Z-WeoxYtlsI.roa
Signing time: Sun 26 Apr 2026 04:06:26 +0000
ROA not before: Sun 26 Apr 2026 04:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153517
IP address blocks: 155.254.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c7:f7:9d:bd:d6:fc:a2:f1:bb:90:47:ec:5a:02:51:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 26 04:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e31a295fc3ee1f7ba9be23667e59ea3162d96c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c6:56:5b:93:5b:b0:62:23:cb:20:ef:28:63:
fb:7e:1b:30:b3:97:f5:52:fe:d6:ba:53:f2:98:26:
3a:ac:2a:9d:66:f1:d8:89:4a:86:50:9f:97:a3:63:
1e:9e:f2:ae:f1:25:1c:c5:25:22:03:fe:fe:ea:f9:
0c:67:f9:13:16:75:10:1f:62:01:0b:42:c9:22:53:
36:ec:d7:18:5b:02:82:b8:72:31:c9:d5:90:49:aa:
c3:5c:48:29:fa:bb:3c:da:ee:0b:ad:9b:74:24:45:
27:46:fc:3b:2d:59:a8:93:7d:c8:0f:53:5d:70:c1:
01:95:e8:22:ec:83:b3:5f:c4:14:c4:3c:b8:1d:82:
44:66:83:d3:64:38:a2:7c:97:48:ac:21:53:01:7b:
65:44:1c:60:fd:d2:61:6d:51:8b:00:7f:13:d9:42:
da:94:ba:4e:8f:e9:fa:18:9a:c2:10:92:3c:1e:20:
f9:46:c5:70:0f:6f:a1:2b:06:f3:44:c2:62:09:64:
ee:0a:1c:46:87:a7:d9:e2:b7:46:72:31:ae:2f:97:
e3:69:2c:2c:fd:55:fa:e9:40:3b:75:71:33:92:99:
db:9f:e0:1c:0e:f3:fd:94:9f:fd:c9:57:06:b9:55:
37:58:2d:8e:50:92:d2:20:87:1f:80:76:aa:d9:f8:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:A2:95:FC:3E:E1:F7:BA:9B:E2:36:67:E5:9E:A3:16:2D:96:C2
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jjGilfw-4fe6m-I2Z-WeoxYtlsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.100.0/22
Signature Algorithm: sha256WithRSAEncryption
54:e9:28:fe:d6:07:89:b2:d7:e2:cd:a2:13:ed:de:11:90:85:
39:1f:10:97:29:c1:1f:82:93:39:ad:4c:c0:2d:85:35:ee:dc:
b9:9c:b4:ce:58:2e:0d:be:71:d0:77:5b:52:bf:a6:0b:4e:d2:
75:88:4b:d9:ae:b6:23:bd:2d:a5:23:c0:af:be:a3:6d:43:b9:
2d:81:25:b6:1b:b9:c9:ea:5c:b0:a8:63:08:36:ed:17:38:51:
75:f7:44:95:dc:c7:bd:ec:5f:69:80:c9:82:17:2d:ba:36:6e:
f9:a4:fe:a6:d2:d1:47:f7:74:ec:c1:61:86:b0:77:93:4e:85:
d1:5a:5b:eb:8c:f1:0d:73:69:e3:a5:e0:b6:85:b1:b6:dc:83:
94:bc:27:d0:a2:e7:d4:c9:62:8b:63:0d:ee:7c:e7:6b:d9:06:
73:19:86:1d:75:ad:bb:18:38:40:8d:16:b1:f3:82:b7:4b:7e:
bd:22:c2:f4:16:b0:b2:5d:2b:b4:d2:6a:1c:9b:16:eb:4e:7b:
81:82:16:48:43:f6:86:4b:1d:75:ee:b6:0b:ee:ef:20:74:d5:
b8:60:75:81:aa:75:36:df:81:0d:f8:5d:59:9b:c4:05:30:71:
fc:73:08:41:39:98:e3:15:60:b1:a8:6d:1a:94:a9:e9:de:33:
59:37:32:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:04:39 2026 by rpki-client