Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jx08jb4mp6TzNhjqtwQfVVjCdkM.roa
File: jx08jb4mp6TzNhjqtwQfVVjCdkM.roa (raw, json)
Hash identifier: BVXs0Qlf4WAq4/vADObyzjfBcxdWKrxccrRv6eooV9k=
Subject key identifier: 8F:1D:3C:8D:BE:26:A7:A4:F3:36:18:EA:B7:04:1F:55:58:C2:76:43
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FED4AD4D382E46FE8E063B7C0BEF5E2D2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jx08jb4mp6TzNhjqtwQfVVjCdkM.roa
Signing time: Mon 10 Aug 2026 20:08:52 +0000
ROA not before: Mon 10 Aug 2026 20:08:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24947
IP address blocks: 87.83.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ed:4a:d4:d3:82:e4:6f:e8:e0:63:b7:c0:be:f5:e2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 10 20:08:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f1d3c8dbe26a7a4f33618eab7041f5558c27643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:f6:95:bb:96:d0:0e:e2:3f:05:0b:01:20:
6b:09:b6:a0:c3:99:85:e7:c5:d1:ca:f0:90:0e:b6:
dc:8b:5f:a2:1d:b7:b3:3d:6b:3d:a8:c2:c5:fd:46:
5c:8c:2c:cb:5e:56:72:70:99:af:89:00:91:61:ca:
17:dc:95:02:22:79:e0:6a:17:25:dc:c8:d3:54:c9:
4c:48:27:4c:72:53:ef:d1:6d:a8:e1:ed:be:63:6e:
76:a4:e6:d9:bb:2b:f0:77:c7:bc:ad:c9:9f:7f:5b:
21:49:ab:9e:96:b3:aa:2c:aa:14:1a:05:37:92:12:
6e:c6:4b:02:b8:f4:24:23:3e:b3:3e:42:77:46:49:
95:ec:4b:4c:94:fc:9a:af:f5:68:7c:69:b0:56:54:
f8:2f:75:50:95:3d:c2:5d:d7:21:3a:c5:47:06:53:
e6:83:58:07:8c:aa:5c:89:56:58:1e:22:73:c7:11:
a4:83:78:a6:8b:7b:ba:b5:18:9a:d9:47:af:5b:8d:
98:dd:5b:50:df:31:01:e4:f4:85:c8:91:e0:07:23:
d3:b2:f1:9b:7c:be:43:ff:b5:d3:44:bf:2b:86:e6:
25:4f:29:bb:e1:8d:04:7c:37:e1:88:fd:b8:b2:ca:
78:f2:2d:4d:5b:65:fb:6c:ef:f9:e7:46:ef:6a:d2:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1D:3C:8D:BE:26:A7:A4:F3:36:18:EA:B7:04:1F:55:58:C2:76:43
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jx08jb4mp6TzNhjqtwQfVVjCdkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.0.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:06:c2:b4:0d:30:ac:1e:9a:32:1d:f1:7d:15:7b:10:13:b4:
4f:f1:73:27:f0:05:81:12:54:f1:43:96:84:63:45:4d:7e:14:
70:44:ff:5f:4a:2d:34:65:50:99:11:c7:51:b0:47:a6:8b:88:
e7:02:8c:9d:7a:2f:57:3f:24:54:15:ad:10:49:f1:58:29:1a:
3c:cd:0b:b6:67:26:62:d1:56:3e:e3:e1:c5:2e:4c:79:60:10:
a2:2a:e5:e0:c1:e8:39:59:38:d0:18:b2:57:f3:58:75:cc:8d:
4d:e5:5d:af:08:38:a8:02:5e:7a:b2:19:39:68:f0:6d:4e:dd:
e9:7d:9a:4f:33:a3:89:cd:35:64:0d:a3:e9:d3:81:94:79:26:
8e:7e:c0:b4:75:d2:8f:6f:a7:48:51:fd:2c:be:78:e0:9c:73:
bd:de:39:46:fd:a7:a3:09:b0:8a:f7:cb:29:99:ae:2d:4d:a8:
07:52:4d:a8:ec:ef:a1:89:c4:28:3f:6b:50:b0:55:f6:6b:33:
89:da:28:31:d4:3f:46:12:2a:18:99:2e:ae:64:fa:d1:1c:38:
f0:6e:97:76:f8:d8:88:a3:e4:cf:9d:3d:25:38:9a:70:7a:a0:
36:56:ae:6f:9f:e2:43:a3:ca:09:a0:34:31:53:f7:72:3f:50:
69:2f:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:46 2026 by rpki-client