Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/rjJKTuwppJ7p-ReLGMpjCfistEE.roa
File: rjJKTuwppJ7p-ReLGMpjCfistEE.roa (raw, json)
Hash identifier: e851YdW1QKiiLz4KzIiIg2sC/KFq8uwvbZPgdbnTblc=
Subject key identifier: AE:32:4A:4E:EC:29:A4:9E:E9:F9:17:8B:18:CA:63:09:F8:AC:B4:41
Certificate issuer: /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial: 01A0567D60DFDF0C3A1798997215349A4469
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/rjJKTuwppJ7p-ReLGMpjCfistEE.roa
Signing time: Mon 31 Aug 2026 06:24:12 +0000
ROA not before: Mon 31 Aug 2026 06:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 194.238.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:7d:60:df:df:0c:3a:17:98:99:72:15:34:9a:44:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Validity
Not Before: Aug 31 06:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae324a4eec29a49ee9f9178b18ca6309f8acb441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:ef:8f:a8:d4:a9:57:e0:18:65:35:2c:a8:
fe:dc:eb:52:76:ef:f6:22:f9:05:ef:20:ed:72:f6:
8f:7d:86:b9:81:d3:25:07:ea:d6:20:cf:ef:9e:6e:
62:0f:f8:27:c6:df:7d:a0:fe:56:84:31:1b:bf:3e:
dd:ee:9c:c6:14:1d:2c:d8:aa:f1:e1:1a:61:f0:dd:
e0:8c:32:c1:ed:fc:df:79:fc:04:16:1d:da:65:50:
47:0d:42:68:ae:ab:c5:bc:75:c0:d2:dc:db:30:ee:
8a:f6:bf:52:4f:03:81:8b:ab:ed:13:10:f4:b6:8d:
56:ae:ac:09:22:0d:ea:e5:7c:05:e5:1c:b1:ca:75:
9a:3f:23:16:44:dc:01:e6:0b:1a:ff:f5:2e:c7:4e:
41:7b:5f:ba:3c:ff:33:cb:06:e8:9a:32:2b:a2:05:
5d:7c:6e:2d:28:67:a6:3c:78:72:ba:0f:92:cc:7f:
53:05:24:40:2c:56:2a:78:ae:81:83:3d:b5:25:3f:
47:f2:1a:0d:d0:e4:65:56:70:21:ae:82:3b:35:62:
ee:2b:f8:f6:a0:69:99:7a:fb:0f:78:61:e1:c1:59:
7d:bf:8e:11:f5:88:aa:9c:1f:74:c4:67:81:22:57:
90:b2:73:42:96:15:e9:0e:d4:91:d7:ae:e6:d7:ca:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:32:4A:4E:EC:29:A4:9E:E9:F9:17:8B:18:CA:63:09:F8:AC:B4:41
X509v3 Authority Key Identifier:
keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/rjJKTuwppJ7p-ReLGMpjCfistEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.58.0/24
Signature Algorithm: sha256WithRSAEncryption
45:72:ae:64:46:0a:19:08:07:99:94:37:c9:5c:fd:a2:18:a0:
18:aa:4a:44:fa:65:e4:0a:17:7c:4a:2c:a5:76:73:01:de:d1:
59:76:ec:fe:02:b6:71:42:d2:73:c3:bd:f4:e4:a9:a2:57:3f:
ab:b8:23:1e:b1:57:90:7b:b3:bb:b6:23:03:ee:e3:6d:49:31:
3f:9d:79:bb:ab:a5:d5:25:60:e9:f1:15:88:9b:24:f3:6a:86:
36:af:30:33:5f:67:e2:bc:38:8a:59:79:90:2d:e2:c1:67:15:
bf:57:26:13:d3:95:c1:b6:9d:fd:39:8f:ea:98:a5:07:8d:98:
38:af:31:97:d2:1d:54:81:7f:ed:40:ce:ee:70:4b:20:20:01:
6d:cd:b1:2f:db:ce:3e:47:d3:44:04:1d:ef:e0:f1:76:c6:3a:
e5:77:06:a3:88:e8:47:3b:41:0e:b0:8e:0e:55:27:bc:4b:48:
d1:6f:7c:eb:bf:6e:07:3e:9c:83:e2:64:f3:72:bb:04:f4:b7:
9b:6b:a5:80:dd:30:9e:0d:97:c8:88:0d:2a:ea:e1:e5:84:60:
42:03:f9:14:93:98:cf:6f:85:7f:d5:d8:fd:d5:3c:29:80:10:
44:c7:a6:b8:3c:fc:e5:6c:20:b3:02:21:64:27:8e:30:4e:dc:
2b:ad:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:32:12 2026 by rpki-client