Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/j-_hvWRe0EGuP-EBWKjV-ETCCHQ.roa
File: j-_hvWRe0EGuP-EBWKjV-ETCCHQ.roa (raw, json)
Hash identifier: 6ld09fCQvJNUIhzmqP0JfrB3sDt+7AG03q1dKIASyE8=
Subject key identifier: 8F:EF:E1:BD:64:5E:D0:41:AE:3F:E1:01:58:A8:D5:F8:44:C2:08:74
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019DB8E67F33D198AE737A3FCD7CF35CEBAB
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/j-_hvWRe0EGuP-EBWKjV-ETCCHQ.roa
Signing time: Thu 23 Apr 2026 05:53:26 +0000
ROA not before: Thu 23 Apr 2026 05:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 80.71.224.0/24 maxlen: 24
81.29.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b8:e6:7f:33:d1:98:ae:73:7a:3f:cd:7c:f3:5c:eb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 23 05:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fefe1bd645ed041ae3fe10158a8d5f844c20874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:b3:e4:49:92:d8:c5:62:3e:02:a7:4f:b9:
e9:b9:75:30:ce:32:ad:30:ec:07:70:c5:37:c1:b5:
0e:47:c4:96:db:0c:24:57:b0:14:f1:0e:eb:64:bc:
57:13:9f:d0:1d:99:10:18:d7:67:36:e7:3d:c6:d9:
87:f8:19:9f:04:b2:35:8c:7d:6b:70:c6:8b:f1:40:
31:27:39:87:c4:d5:c0:c0:bd:0d:0a:30:d6:8f:e9:
62:73:10:26:9b:e3:18:15:58:33:f7:e8:9b:81:94:
d5:55:e3:2d:ee:13:16:2b:de:3c:48:22:01:5c:75:
f8:8b:1f:b3:e5:ef:44:75:98:88:86:81:3c:6e:a1:
a8:dd:41:c6:bd:4b:ec:21:2b:c5:87:59:c5:36:8b:
d0:2d:91:cc:11:9d:3c:c0:7e:12:66:d8:a6:8d:39:
d9:7b:fc:55:dc:1b:96:43:e7:6d:d6:e1:89:3e:2f:
86:2d:59:3d:08:04:8d:78:76:b3:f9:e7:28:f1:3c:
6e:38:c2:0c:df:ac:53:db:96:85:e6:cb:80:55:69:
b9:7f:c8:39:48:1d:f8:30:15:f7:c7:42:a0:9f:85:
6e:62:2d:c8:2c:7c:00:49:cd:5c:8e:da:c3:55:a5:
84:b3:0b:59:5b:fd:65:cd:d2:df:4e:2f:e3:bc:61:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EF:E1:BD:64:5E:D0:41:AE:3F:E1:01:58:A8:D5:F8:44:C2:08:74
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/j-_hvWRe0EGuP-EBWKjV-ETCCHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.224.0/24
81.29.151.0/24
Signature Algorithm: sha256WithRSAEncryption
85:17:02:85:07:1c:fd:35:3e:36:e3:3f:76:e4:c7:ba:8b:93:
a9:f3:79:76:c7:bd:bc:0b:41:ec:13:7b:ab:3a:c0:88:aa:26:
e4:e9:8b:84:22:e8:5f:7b:b3:60:a6:cb:1d:71:09:72:d1:48:
b5:d3:ed:f9:27:4b:3f:4e:75:97:04:71:4c:bc:5d:e9:7d:41:
27:c3:c2:38:34:56:fe:c4:65:53:07:50:ac:cd:65:bb:37:e4:
cc:b2:1b:be:98:74:cc:fd:4e:94:13:98:c4:6e:87:5c:8b:03:
36:e6:28:69:22:14:e3:7a:3f:ae:73:73:b9:46:93:7c:6f:af:
c1:db:2f:18:f8:53:7b:4a:f0:21:3d:67:44:32:3c:63:9b:36:
3e:05:be:d9:8c:56:f0:61:5c:8a:df:5a:69:07:37:46:43:50:
35:2e:41:fa:6b:04:49:37:e5:ee:fb:31:fd:49:b6:3a:d3:ac:
93:1d:10:fc:c2:e2:81:f2:1a:5f:86:fc:b1:43:bb:91:5d:c4:
27:bf:af:f1:cf:e8:04:0c:57:0b:d8:74:9e:94:89:bf:ea:a0:
4c:d5:72:b7:c2:22:46:c6:c9:a6:14:69:0c:cb:21:a8:8a:8f:
7c:52:b0:f3:d5:d1:89:e8:86:59:a7:b0:c6:06:4f:54:ed:9e:
79:5e:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:57:22 2026 by rpki-client