Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jm-75neWAEEpsJ6QA5mTb9smzxw.roa
File: jm-75neWAEEpsJ6QA5mTb9smzxw.roa (raw, json)
Hash identifier: 3+QDeaRclQU/Zjap/DafozH2cIjLQecDJlnv6mxCUL8=
Subject key identifier: 8E:6F:BB:E6:77:96:00:41:29:B0:9E:90:03:99:93:6F:DB:26:CF:1C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368E1F93E55B59225BBE0770550A890
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jm-75neWAEEpsJ6QA5mTb9smzxw.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203048
IP address blocks: 89.213.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e1:f9:3e:55:b5:92:25:bb:e0:77:05:50:a8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e6fbbe67796004129b09e900399936fdb26cf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:83:65:a3:1d:30:d0:66:2a:8f:f4:11:eb:
eb:44:ac:19:83:76:53:71:1e:ed:a1:11:04:e6:27:
bf:f9:c2:e8:80:55:ef:dc:49:67:1b:5b:77:32:3d:
b4:10:a5:8e:8c:39:56:e8:33:79:c5:4c:f6:b0:ce:
4e:59:a5:fc:93:78:00:a9:30:cc:37:fe:35:d4:9f:
af:55:83:06:0d:55:66:98:9d:3b:b9:8b:c9:cd:9b:
2f:a0:61:98:03:50:6d:eb:c6:08:03:b0:c0:d0:15:
1c:c8:cd:4d:fe:62:7b:17:30:bd:8f:0a:10:fa:b4:
26:c2:2d:31:c3:c3:25:03:c8:36:1f:1c:d0:66:a8:
9f:81:96:89:f5:db:e4:51:1e:10:dd:53:c9:9a:f6:
c7:e4:a7:9c:c1:7d:53:07:9a:cd:93:08:34:66:8a:
22:38:e9:51:2c:be:dc:f8:63:b6:08:9d:e7:ae:7f:
61:e5:0d:87:64:81:c1:5e:e6:6a:c5:d3:a4:1e:33:
7e:ab:cb:e4:44:8c:f5:b5:7f:76:96:ab:2b:84:e0:
64:a1:2e:c0:0a:f3:a0:ac:88:48:bd:80:79:12:78:
1d:b6:be:2b:9b:56:95:4a:65:42:bc:8d:8c:cf:b6:
d8:58:b0:bb:c2:0b:67:dc:fb:12:38:29:c6:a4:c0:
2d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6F:BB:E6:77:96:00:41:29:B0:9E:90:03:99:93:6F:DB:26:CF:1C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jm-75neWAEEpsJ6QA5mTb9smzxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fa:e1:3c:bd:d4:c5:d7:10:ce:0f:ef:50:d8:98:05:c1:5d:
eb:51:87:ee:a9:5f:9d:86:ab:7a:21:27:73:8c:8a:3c:4c:f1:
86:6f:d4:c2:89:7a:ee:cf:d0:e8:37:c0:de:84:87:d6:bf:8a:
e9:1e:b3:a7:7c:96:0f:e0:bb:2f:f8:50:db:7b:f7:93:a1:8f:
36:92:dc:36:5f:76:7d:62:fb:5d:e5:aa:3c:59:31:b2:1c:d4:
d0:1a:a2:65:73:ad:1c:0b:59:a7:85:14:38:29:1d:81:3b:90:
32:6e:99:7c:40:ad:ca:c3:ac:86:7f:d2:4a:58:d5:ae:f9:c1:
aa:d3:71:97:1a:6d:72:99:85:3f:cd:69:e4:25:c1:63:86:71:
32:23:c4:4f:6c:25:5e:72:40:8d:71:2e:22:b1:04:c8:ad:7d:
70:7e:2d:19:f9:de:47:0f:f3:b2:58:5d:9f:30:ed:cc:2a:55:
78:cf:aa:10:43:2a:c1:d3:1d:02:60:65:6e:9a:02:fe:16:96:
1a:f7:ff:26:c2:14:7a:48:17:b4:e4:70:3f:b4:03:06:71:9c:
78:7c:e0:5b:8b:5e:67:90:e8:f7:1f:6f:ae:ae:82:78:30:29:
a0:32:75:90:fe:53:55:08:ac:e4:af:e9:b5:b7:b4:4d:67:d8:
45:5a:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:28 2026 by rpki-client