Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/jaipEIhia85_PDKEJpxhgu2AIL4.roa
File: jaipEIhia85_PDKEJpxhgu2AIL4.roa (raw, json)
Hash identifier: 64Mw0DKIv6RtL+1DPKzBJCAF4c85fuKpqjuKBESEEsg=
Subject key identifier: 8D:A8:A9:10:88:62:6B:CE:7F:3C:32:84:26:9C:61:82:ED:80:20:BE
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F236904C2FA48A5347720C02FF054AAEA
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/jaipEIhia85_PDKEJpxhgu2AIL4.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 89.187.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:04:c2:fa:48:a5:34:77:20:c0:2f:f0:54:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8da8a91088626bce7f3c3284269c6182ed8020be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:a4:36:62:13:57:05:fc:df:d9:77:6b:07:
8f:4c:dd:b0:e5:4a:fb:f6:4a:fc:2e:cc:8a:db:ec:
4c:7a:ba:6c:15:1d:ca:e2:7a:a4:8a:27:c7:a0:71:
3d:b1:66:cf:b7:c5:d5:3c:ec:b6:7e:4d:ec:49:98:
fb:7e:09:af:30:23:0f:c9:22:a6:14:bc:f0:72:7c:
18:d0:2b:02:15:04:3f:af:4d:ef:01:33:89:3c:5e:
7f:4d:e3:d5:d0:22:ee:ed:f6:d8:9a:b7:1e:31:ad:
c4:19:8a:fd:5b:d0:9b:16:86:d9:37:6f:28:66:f0:
3e:fa:26:e4:67:d8:c9:5f:b5:ae:7b:9b:88:fd:93:
b2:19:90:e5:69:7e:11:23:09:25:d3:d5:b0:d6:ce:
85:85:2a:f1:7e:27:80:27:d8:b4:db:8a:53:1d:d3:
73:24:5c:e2:1e:3f:71:f8:3c:3c:0a:ce:91:3d:f0:
2c:6e:8a:c1:84:ef:d7:bf:2c:a0:df:b3:5a:dc:66:
3d:56:c8:d7:be:0c:ff:53:1a:f0:dc:ea:6c:19:46:
5b:02:c4:47:6d:70:a2:85:cf:33:eb:dc:7a:7d:0e:
c5:50:f4:c1:30:df:85:e7:30:b3:5d:8f:ae:c2:d7:
c7:55:15:ce:09:60:52:fe:8f:7e:11:12:d5:0a:18:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A8:A9:10:88:62:6B:CE:7F:3C:32:84:26:9C:61:82:ED:80:20:BE
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/jaipEIhia85_PDKEJpxhgu2AIL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.23.0/24
Signature Algorithm: sha256WithRSAEncryption
47:80:07:c4:50:b0:37:92:e0:7f:97:72:64:e6:0e:23:f2:9a:
11:80:1c:03:26:b7:cc:56:fe:c6:95:e3:ad:d1:45:90:83:3a:
23:e3:a5:73:c9:f1:50:06:7e:c3:be:88:42:6f:c4:6a:93:45:
25:18:db:45:f7:38:d7:25:e9:5e:17:fb:78:98:25:6f:44:f1:
11:bf:59:1e:32:7e:ec:ca:3a:03:7c:08:15:f3:ea:1f:ba:ae:
b4:33:c2:0c:97:9a:a5:f9:ef:22:c3:cb:1f:c4:c5:ff:d9:38:
02:10:d8:04:24:30:55:10:f3:98:15:84:fb:12:df:24:97:27:
ae:48:fe:73:b0:3a:a8:48:71:12:29:44:33:de:7f:14:21:5c:
a8:19:e2:42:a8:78:8e:7f:07:5c:91:84:01:51:78:af:e4:2f:
9d:6a:55:40:e6:59:15:55:43:41:90:1b:0a:92:2e:ec:31:9f:
99:67:44:ea:6f:3b:4b:f4:18:31:d6:65:f7:2a:29:ac:50:46:
a7:86:83:1c:0f:a2:51:48:b1:29:6b:d0:4f:10:d7:ff:f7:db:
0b:0f:e4:4c:5a:d1:31:60:1d:ac:ab:82:e2:44:f3:f7:be:59:
ab:68:6f:ac:76:66:5d:92:8a:39:90:59:bf:86:a2:09:f2:49:
20:c2:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:10:47 2026 by rpki-client