Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/je1dtZZtpw-SGYKozEUcM8HAR3k.roa
File: je1dtZZtpw-SGYKozEUcM8HAR3k.roa (raw, json)
Hash identifier: paFASByH+7kLDS74pGbIiRtyCI/k65Cw9X+LDzR9Wog=
Subject key identifier: 8D:ED:5D:B5:96:6D:A7:0F:92:19:82:A8:CC:45:1C:33:C1:C0:47:79
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368F6C8FFBE9EA7747181E56B3ECA0F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/je1dtZZtpw-SGYKozEUcM8HAR3k.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212306
IP address blocks: 77.107.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f6:c8:ff:be:9e:a7:74:71:81:e5:6b:3e:ca:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ded5db5966da70f921982a8cc451c33c1c04779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:b4:0d:3d:39:64:af:a2:29:f5:1b:e6:e5:
da:5f:5a:c1:b4:6c:8b:01:2d:4c:67:48:9b:c8:0f:
65:a0:8e:54:b7:9d:36:f0:58:bc:88:7d:eb:c1:38:
61:d8:f0:46:a3:f5:fb:60:a2:a7:b7:73:0f:a9:ff:
f2:cb:95:ce:fa:ba:74:79:d6:2b:a7:a2:b7:88:e7:
d1:24:18:98:39:29:01:d1:c3:d7:7b:ee:d1:f0:aa:
22:b3:8c:49:28:fa:c6:a3:b0:c3:b1:ec:af:7c:1c:
09:ae:a0:75:51:0e:fb:51:81:a6:05:e2:46:de:f1:
4e:55:91:54:6e:a9:e7:fc:c1:1c:46:95:0a:22:fa:
2a:3a:6a:fe:b4:3c:33:72:8d:66:f1:23:fe:53:1d:
f6:ae:b2:83:d7:8b:38:02:eb:c0:bb:65:e3:be:a6:
70:dc:ac:81:7c:e4:05:86:03:1f:8b:ae:8c:08:4e:
76:fe:9f:e2:35:8b:35:ed:f0:f4:7f:23:32:8f:3e:
12:47:01:cb:f6:44:38:ea:9b:85:df:15:4a:18:c0:
76:43:6d:cd:fd:d9:34:90:06:8e:e3:13:17:ab:2f:
96:3d:6a:22:f4:7a:70:4c:48:f7:e4:2f:60:b5:d8:
1c:38:ff:45:89:88:b3:79:27:d8:33:5f:11:bd:62:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:5D:B5:96:6D:A7:0F:92:19:82:A8:CC:45:1C:33:C1:C0:47:79
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/je1dtZZtpw-SGYKozEUcM8HAR3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d3:28:e4:82:df:2a:7b:90:bc:78:4d:85:47:10:86:f9:77:
af:55:d5:d9:08:f8:13:c7:de:05:3f:e7:87:c8:61:99:11:d4:
3e:6b:fd:94:3b:18:ff:92:b3:ff:34:58:4b:04:51:04:76:95:
e9:f0:c7:df:20:2b:59:22:ea:30:12:47:68:63:71:7f:22:89:
b3:5d:48:f0:c1:62:eb:5e:80:df:62:a7:e2:d1:ae:01:97:5f:
48:2c:3a:be:cf:99:04:5a:22:88:a2:59:ed:d5:9d:95:2e:f4:
0a:ed:5b:10:94:f1:05:a3:df:86:2e:be:f0:6a:39:eb:ac:bf:
c3:ed:5d:fe:f5:31:7c:0d:3c:44:d3:96:22:1d:1a:13:69:34:
99:12:e3:a0:7b:b2:5f:d9:4f:8a:e5:9b:33:26:63:f7:77:7e:
43:0e:45:77:96:37:88:78:d7:d6:d0:25:a9:3e:f5:f9:6d:45:
c7:87:a5:c2:9e:a1:f9:d8:45:5e:0b:08:a7:aa:d5:aa:6f:2a:
71:07:bd:cd:38:3b:8e:40:ff:5a:55:72:e5:f4:af:08:b4:e3:
d3:37:8f:93:d8:41:9b:31:6c:ac:19:bc:f7:60:b6:a5:41:4d:
cb:30:b6:96:c2:e0:46:b2:1a:22:11:9e:f6:06:75:5b:9b:77:
ab:ba:7a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:28 2026 by rpki-client