Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_jaXflEkRAtQILskcUKxDI332HY.roa
File: _jaXflEkRAtQILskcUKxDI332HY.roa (raw, json)
Hash identifier: HBd5UEZRsdodavRCpcLJMFqjqdijWvKNLtQbNzO1r9A=
Subject key identifier: FE:36:97:7E:51:24:44:0B:50:20:BB:24:71:42:B1:0C:8D:F7:D8:76
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690AD57A6E1D61AB8DBD54D3002400
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_jaXflEkRAtQILskcUKxDI332HY.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214618
IP address blocks: 109.176.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0a:d5:7a:6e:1d:61:ab:8d:bd:54:d3:00:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe36977e5124440b5020bb247142b10c8df7d876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:5d:e8:52:89:8d:24:38:25:94:f6:78:42:
31:2e:53:fc:6c:cb:3c:9f:06:3c:2a:f5:e8:a4:10:
98:88:ad:93:f6:5d:8a:4a:23:e5:29:42:48:9f:52:
83:fd:05:96:f6:ed:03:0a:72:e5:39:04:60:7f:a1:
be:7a:c3:48:f8:0f:f3:b7:9a:c3:2f:7a:a2:89:ce:
5f:f7:29:5c:28:4e:fd:55:6c:38:2c:3d:e0:47:5e:
40:e5:dc:1b:04:e7:df:6e:ee:4a:11:d1:bc:53:19:
84:84:f5:94:c9:10:62:06:7a:d7:ef:05:0d:03:fd:
e6:51:d5:35:32:86:e7:0e:1a:8f:80:50:f6:b8:38:
86:0a:82:21:9b:6a:58:ec:b9:69:fe:77:1c:bc:de:
4f:a6:37:5f:71:fe:00:4f:c9:7d:27:4f:6c:f4:16:
98:6b:70:63:98:58:51:4a:7d:61:d1:5e:12:11:e1:
12:85:80:b1:37:8e:62:a8:be:8a:26:8e:a3:3f:86:
28:7c:ff:dd:a6:c4:3e:fc:aa:a6:88:ec:42:be:a1:
df:b5:3b:e6:0d:c4:e2:87:92:0b:65:91:73:3a:10:
39:cc:e9:fa:b3:3d:62:5a:b7:09:33:38:db:e7:b6:
35:df:3f:0c:81:af:cd:5f:fe:78:da:d9:53:45:52:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:36:97:7E:51:24:44:0B:50:20:BB:24:71:42:B1:0C:8D:F7:D8:76
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_jaXflEkRAtQILskcUKxDI332HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.239.0/24
Signature Algorithm: sha256WithRSAEncryption
23:71:0a:0e:6c:ef:59:ef:0f:0d:2e:4c:e9:e8:18:d7:62:4f:
43:01:b2:6a:0f:14:61:bf:3c:51:e6:f7:44:91:90:dc:04:09:
dc:08:eb:71:89:bb:a4:3d:07:41:0e:eb:e6:a1:7f:e9:ed:aa:
ea:e4:24:20:09:e4:85:79:9a:66:e1:ca:95:ab:fc:74:d2:99:
3f:b3:dd:d4:01:41:3e:24:b3:4b:b1:0b:d4:66:03:92:77:71:
79:89:32:ce:0c:bc:a3:d7:cd:3b:04:bc:08:30:e6:48:b3:0a:
f5:57:8e:37:f0:01:95:82:39:ab:dd:30:5f:78:4e:79:f7:7b:
d7:c6:6a:bf:92:56:f4:25:b7:fb:de:83:8c:0a:4c:00:71:2d:
6a:e2:6e:61:f6:71:ae:5e:ce:35:58:bd:f3:c6:6e:c4:20:88:
37:32:dd:66:35:07:b6:3d:9a:f9:25:9f:68:38:3a:da:02:80:
ba:0a:97:76:23:ce:a1:95:86:8e:b6:e9:c7:29:30:d1:2c:25:
2a:4f:38:81:69:d7:d9:6c:a6:c3:f9:d6:3c:0b:04:89:90:e5:
ea:c2:01:15:35:61:9b:21:36:c7:86:be:b8:87:50:c0:d5:a6:
ec:dd:e8:98:33:8f:d5:0c:ec:eb:a4:b1:09:ae:66:39:9a:af:
c0:1c:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:27 2026 by rpki-client