Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/JTTUyu5nc_9IvpckIchUMfL8d-Q.roa
File: JTTUyu5nc_9IvpckIchUMfL8d-Q.roa (raw, json)
Hash identifier: k689XM21lYKhDs0reuH4im2kA1E+0+3a4hWTbaFrhPE=
Subject key identifier: 25:34:D4:CA:EE:67:73:FF:48:BE:97:24:21:C8:54:31:F2:FC:77:E4
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A0E72AC29897F3081FA011250A9656A67E
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/JTTUyu5nc_9IvpckIchUMfL8d-Q.roa
Signing time: Mon 28 Sep 2026 08:38:54 +0000
ROA not before: Mon 28 Sep 2026 08:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 79.110.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:2a:c2:98:97:f3:08:1f:a0:11:25:0a:96:56:a6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Sep 28 08:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2534d4caee6773ff48be972421c85431f2fc77e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:78:8c:dd:89:91:a1:10:a2:98:d4:fb:1d:
36:7e:9a:ea:6c:95:48:d1:dc:1e:b9:f9:d4:39:67:
b0:7a:7e:1a:2d:f1:81:7e:bf:9b:d0:60:d6:cb:00:
2f:51:e5:dc:bc:dd:b5:ff:ed:61:17:1b:fd:12:29:
a4:04:9b:75:de:74:58:9e:dd:23:e5:ed:96:6c:92:
d1:1a:4c:33:e5:21:46:9d:a4:3f:07:c3:bd:50:87:
4e:cb:4f:ec:28:ad:4b:c8:ad:fb:f7:db:a9:42:c9:
18:ba:46:b0:eb:2b:94:87:99:8b:2b:5c:45:41:46:
bc:fa:5d:25:d2:7e:dd:d4:3e:f3:31:57:2f:df:c6:
c3:c6:52:1a:15:fd:84:3e:4e:11:9c:a6:88:6c:11:
ea:4a:96:da:2c:55:28:d0:4d:0a:e2:e4:0f:e4:bc:
ac:9a:5f:cc:6d:e5:76:e2:24:6b:d4:2b:33:da:6a:
6f:90:44:32:e0:05:27:e6:94:dd:ef:5b:8d:48:43:
03:0a:b0:0b:79:ac:6f:fa:b0:a4:bd:53:9c:3c:63:
e3:ed:d9:10:e6:b5:2a:19:4e:c0:eb:92:7c:d4:69:
ff:f3:7f:00:6b:88:70:b4:da:3e:4c:7d:50:82:84:
f6:38:08:00:07:39:d6:83:c1:25:a4:1f:a6:cc:46:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:34:D4:CA:EE:67:73:FF:48:BE:97:24:21:C8:54:31:F2:FC:77:E4
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/JTTUyu5nc_9IvpckIchUMfL8d-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.3.0/24
Signature Algorithm: sha256WithRSAEncryption
49:aa:1b:db:35:8d:d9:52:5c:50:cd:1f:51:95:68:86:30:bc:
43:76:f1:0c:b2:c1:00:45:c9:72:e1:c4:66:45:65:c1:d5:ad:
42:b4:ff:ff:48:e9:a6:8e:03:7a:47:c4:cb:96:4c:f2:46:ec:
08:78:12:1d:21:f0:15:30:6b:21:0a:b3:3e:58:1e:a3:74:05:
7a:10:ed:02:92:c2:05:36:e3:9f:66:f9:0f:dd:89:b9:25:ee:
ba:f6:93:87:d8:22:53:85:ca:0c:14:bb:df:62:3f:ea:d1:5f:
68:c8:91:bc:80:8e:15:a1:c2:5d:8f:c4:5b:ae:7b:fd:bf:b0:
17:f0:99:d5:14:89:aa:46:61:25:cf:56:7f:60:7a:23:47:ac:
5a:bd:21:ef:d0:32:d4:b6:74:a8:5b:e1:2f:88:46:20:52:b1:
2b:51:32:3d:36:e2:66:64:e8:fb:30:5e:fa:fa:6b:57:ef:88:
c0:81:cb:a1:93:03:8a:5f:d7:2e:c9:64:38:23:cb:2b:a0:74:
20:2e:44:9b:dd:2a:8a:ca:54:46:bd:90:f9:c9:59:d7:4f:aa:
2c:3b:e0:4c:9e:c9:b4:bd:8a:65:61:6c:5b:e4:8a:ae:75:98:
e1:1f:b6:d3:1e:c9:aa:95:48:fc:31:15:58:4a:33:95:df:06:
d6:ff:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 21:14:42 2026 by rpki-client