Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jk0z4yIjAjZnmYVWNswYISPlu04.roa
File: jk0z4yIjAjZnmYVWNswYISPlu04.roa (raw, json)
Hash identifier: ebGe2VctJbsMhgIruXQ3EjKcnqELnR26HlESjt+R0T0=
Subject key identifier: 8E:4D:33:E3:22:23:02:36:67:99:85:56:36:CC:18:21:23:E5:BB:4E
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0FBBBE866784C9C908B66594AD94EBB86
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jk0z4yIjAjZnmYVWNswYISPlu04.roa
Signing time: Fri 02 Oct 2026 08:29:51 +0000
ROA not before: Fri 02 Oct 2026 08:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154950
IP address blocks: 77.107.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:bb:e8:66:78:4c:9c:90:8b:66:59:4a:d9:4e:bb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 2 08:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e4d33e3222302366799855636cc182123e5bb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:17:21:47:45:76:66:80:0f:e5:9c:f4:9c:
6e:53:65:c5:52:51:b6:4e:53:89:55:ab:94:ab:f8:
fa:d4:59:ef:86:bf:4d:97:dd:5b:98:f1:bd:74:ad:
67:03:b9:d0:ed:e8:9f:52:26:40:0a:03:9d:e2:6a:
60:05:e7:69:23:36:7c:92:49:1f:e2:d1:c8:43:76:
37:14:6c:29:41:0a:92:d5:21:21:ef:02:f5:62:d9:
fc:19:72:d6:fc:4e:a1:51:36:66:c9:9a:44:eb:ad:
26:13:d2:36:fe:6c:1a:4e:19:89:a9:ed:a9:2d:f0:
c2:fa:fa:71:67:63:2d:ed:8a:3b:3e:e0:b1:5d:ad:
88:87:30:aa:f3:60:6e:f4:32:83:1b:32:55:f7:98:
27:bf:fc:1b:83:2f:71:7a:44:37:59:5b:53:b5:6f:
4f:d8:f9:55:24:b3:68:f3:c3:62:3b:98:e7:7d:aa:
7c:cb:fd:50:d4:bb:29:8d:00:c9:fb:78:98:a6:8e:
56:b6:43:09:1c:3d:0b:6d:d7:1d:00:c1:a0:52:eb:
0d:6c:54:c5:b3:1d:4d:e7:2d:2d:f9:18:4c:83:c7:
3e:50:bc:06:3f:1f:03:42:c8:c5:ae:af:a5:f6:cb:
c6:84:b4:d2:ed:32:b5:7d:73:2b:99:d2:f8:f7:57:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4D:33:E3:22:23:02:36:67:99:85:56:36:CC:18:21:23:E5:BB:4E
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jk0z4yIjAjZnmYVWNswYISPlu04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.95.0/24
Signature Algorithm: sha256WithRSAEncryption
21:98:0a:86:f2:a2:29:93:1d:07:89:a9:76:c7:f6:dc:e2:93:
20:c2:56:6c:74:f7:8d:be:42:29:cc:24:a1:7f:c9:8f:9c:40:
0d:01:74:65:91:93:f7:6a:26:32:5d:cb:a7:6e:e4:9a:d5:91:
ef:a4:e1:ad:9c:a8:f3:ee:bd:95:c3:76:96:ef:0f:d8:26:0f:
af:d9:72:69:e6:2f:8d:13:f6:c2:4f:c0:e0:fe:d9:aa:eb:93:
92:9a:12:08:43:f2:99:66:e0:e5:b7:00:4d:8b:e2:8b:eb:b8:
ec:c6:6b:73:a6:fd:ea:69:a7:d8:af:48:5c:20:32:a8:1f:32:
e2:98:52:49:a0:8a:1f:24:3d:e0:05:2b:3e:d7:66:b2:19:18:
3a:34:03:7a:ff:8c:22:8a:bd:95:83:6e:65:32:bc:0a:5a:9e:
30:bd:30:79:36:de:a8:38:05:67:40:c1:fd:28:a5:c6:2c:6b:
64:5b:2f:2f:ee:e9:f1:bb:af:94:a0:6c:7d:30:d7:08:a6:36:
51:52:25:fd:db:6c:17:4e:61:71:9e:8d:bc:bf:14:2d:08:b3:
64:81:f0:35:d8:93:48:e6:45:bb:29:6b:62:2f:c2:77:3f:63:
1c:04:87:01:02:0d:42:68:18:ec:c6:98:78:12:b4:ba:25:9e:
1f:8b:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:28 2026 by rpki-client