Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/JDHzfbODeF1jb87zzN4sAP4jAbo.roa
File: JDHzfbODeF1jb87zzN4sAP4jAbo.roa (raw, json)
Hash identifier: BaHlrmbp9zG7hiRU2oGvQZ90gALPXRm/y+4P+IkdsMI=
Subject key identifier: 24:31:F3:7D:B3:83:78:5D:63:6F:CE:F3:CC:DE:2C:00:FE:23:01:BA
Certificate issuer: /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial: 019CB00F2001532DAE19F1D006F1E96FBA4F
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/JDHzfbODeF1jb87zzN4sAP4jAbo.roa
Signing time: Mon 02 Mar 2026 19:38:27 +0000
ROA not before: Mon 02 Mar 2026 19:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216155
IP address blocks: 195.95.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:0f:20:01:53:2d:ae:19:f1:d0:06:f1:e9:6f:ba:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Validity
Not Before: Mar 2 19:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2431f37db383785d636fcef3ccde2c00fe2301ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:e9:f8:e6:1b:f5:75:8e:14:64:e4:23:aa:
67:0f:0e:2c:07:42:68:bb:76:4f:61:cc:d5:f5:81:
a5:2f:6c:57:84:b1:79:0e:fe:e6:7c:14:b7:5f:89:
e7:56:de:48:19:7f:0f:f4:db:6c:13:bd:0b:32:4b:
df:3c:f6:f7:0f:8a:94:c3:f4:59:7a:0e:0f:0c:c7:
29:cc:18:bc:58:d3:07:cb:96:ed:6b:20:fe:27:b7:
44:a9:af:17:0f:f3:49:45:02:df:64:93:7b:f0:99:
7e:8e:50:6a:f3:ae:07:f5:96:a6:3d:46:8c:ea:ac:
91:45:cf:bf:b4:d4:25:16:ee:43:c7:1b:41:0c:86:
cb:8e:4c:e2:ef:60:ef:60:d1:60:2f:d4:6e:73:f2:
9d:ad:68:18:00:08:01:62:dc:fd:7b:23:63:c9:0a:
69:c9:65:e5:d7:0a:c9:a4:c8:72:d1:41:6a:a8:66:
f6:8c:33:14:a7:29:00:69:1f:ff:88:c1:e9:b7:41:
15:e1:37:6e:05:60:a1:6a:85:56:75:29:62:37:00:
2a:3d:e8:fc:91:9d:46:bd:34:78:04:f6:1f:65:5f:
f0:60:8c:ca:95:09:28:7c:c6:cd:e2:15:90:3a:a1:
c5:de:cc:7d:34:9b:af:ea:15:6e:78:a3:3c:c8:8c:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:F3:7D:B3:83:78:5D:63:6F:CE:F3:CC:DE:2C:00:FE:23:01:BA
X509v3 Authority Key Identifier:
keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/JDHzfbODeF1jb87zzN4sAP4jAbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.144.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a6:1b:f8:f1:25:33:1a:b9:c3:06:1f:11:72:71:20:f1:e5:
0b:c2:38:b1:f6:1f:b6:a1:bc:36:46:2a:e7:a1:e2:90:85:a6:
f8:81:ee:39:b4:d4:5d:ce:9b:e8:b7:a5:9b:1c:30:ec:1c:02:
6d:b5:c4:23:cf:e9:87:7c:2c:f0:5d:30:b5:2b:c2:9e:6a:f2:
72:5f:ca:e3:db:93:57:fc:77:6d:4f:06:66:6a:06:f6:60:63:
f7:9b:56:86:03:37:58:7b:df:e4:f2:45:07:29:e7:46:21:38:
f8:41:e5:94:c9:cc:0f:e5:d3:62:cb:3e:e9:47:44:3e:b8:bb:
69:00:5c:a8:2d:49:c3:f4:61:2c:a8:33:8a:1e:13:99:ce:28:
68:0f:b8:a0:e7:0e:35:bf:c2:64:6b:c3:9b:85:ad:4f:10:dd:
bc:0c:d0:69:3e:a2:b2:11:68:3c:c4:de:94:ab:f6:ec:bb:c9:
cf:a6:d9:68:45:63:4d:9b:3f:43:80:fa:f0:47:5c:6e:05:0d:
e6:4b:8c:5e:da:a2:b1:14:7d:48:52:bc:97:83:1a:7f:b3:e1:
72:ff:a6:87:53:5b:fe:67:6d:ee:a5:38:91:2c:16:d4:09:a5:
1c:a0:97:90:cd:39:be:7a:8e:5d:fb:f2:71:51:98:c9:f4:cd:
21:10:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 09:29:57 2026 by rpki-client