Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JAZDIHYofldGpWNRrMWo7hh5ZxA.roa
File: JAZDIHYofldGpWNRrMWo7hh5ZxA.roa (raw, json)
Hash identifier: Nb8yK9TQlXPNw5A8ceV0F1eFTMTfTCPf8h05s8l3ttg=
Subject key identifier: 24:06:43:20:76:28:7E:57:46:A5:63:51:AC:C5:A8:EE:18:79:67:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EACE9A1A2A020F00D540E51532C892635
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JAZDIHYofldGpWNRrMWo7hh5ZxA.roa
Signing time: Tue 09 Jun 2026 15:04:12 +0000
ROA not before: Tue 09 Jun 2026 15:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 94.183.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:e9:a1:a2:a0:20:f0:0d:54:0e:51:53:2c:89:26:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 9 15:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2406432076287e5746a56351acc5a8ee18796710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:86:2a:2a:25:cc:1a:86:41:e7:90:e0:18:
fa:35:70:55:af:65:17:54:c9:bf:2a:b5:a7:ee:fb:
be:0f:82:50:a9:df:7a:e6:8a:66:a9:77:8c:35:04:
b2:af:2b:2b:8f:05:f4:cf:86:17:f2:f7:23:5b:6f:
3e:6f:08:3e:90:d0:51:05:eb:61:83:cd:53:e5:e0:
92:2c:73:eb:48:f3:75:a0:41:f0:c8:55:54:c0:42:
44:92:45:a1:15:69:bb:c4:c1:ff:b4:0a:58:77:a5:
a5:cc:5f:06:96:cf:65:57:72:6d:a8:54:aa:d2:a4:
42:02:c4:57:a8:5e:f5:2a:aa:6b:b7:75:57:a1:c9:
bb:24:ae:82:f7:d1:a9:58:3e:78:3f:84:cb:1d:31:
3d:09:08:af:25:4b:b4:90:28:65:f2:e5:b6:51:b6:
08:cb:4f:02:b9:8b:1e:4e:8b:f2:e0:5e:f4:1d:2e:
65:2f:71:0d:63:56:37:2e:d3:6e:13:c8:b8:46:22:
6c:da:bd:d1:2c:1a:1e:6c:34:5e:04:3c:77:d4:35:
a2:f0:99:88:20:04:a7:44:5b:20:ba:4e:17:9e:a7:
d1:12:44:32:49:04:38:7a:f9:91:10:9a:9d:c6:ef:
40:82:0d:a2:32:f0:0b:22:16:45:d7:2e:3c:25:43:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:06:43:20:76:28:7E:57:46:A5:63:51:AC:C5:A8:EE:18:79:67:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JAZDIHYofldGpWNRrMWo7hh5ZxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.211.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ef:d9:5d:25:2d:c3:98:e3:76:68:77:5f:93:65:5c:2b:d0:
41:96:3b:16:8d:f4:47:fe:3e:7d:04:2c:4c:38:8a:ac:29:c2:
58:47:4c:9a:50:15:20:48:3b:a2:85:dc:8b:a4:3d:42:f0:55:
20:34:55:6b:00:47:5c:df:3d:a8:b2:af:ff:25:c9:de:60:ab:
f0:75:17:24:8f:7b:79:f3:0c:48:a2:00:8d:02:92:e5:0e:82:
a9:7f:f5:bf:f0:15:fd:e0:13:91:c2:0a:4f:ca:f2:20:35:0b:
ac:fc:e4:fe:24:b1:25:81:c5:1c:eb:63:dc:87:af:93:65:83:
8d:8a:86:d7:b1:e2:02:0d:55:9f:4e:37:59:85:48:37:8d:51:
d4:2b:05:bb:2e:99:21:7b:54:36:55:ba:34:d5:1c:c9:3d:44:
49:b7:e0:14:e6:01:e3:6d:a7:62:52:b5:ad:14:53:cb:36:d8:
1b:83:fc:f9:f8:5e:dd:f7:ca:0a:1f:43:8f:a4:c4:f0:30:54:
15:18:19:48:a4:3d:cc:1d:e6:01:06:5c:a5:45:e6:0d:be:83:
d5:d7:9b:d6:f7:1f:5f:a2:43:cf:ba:db:ea:77:40:97:30:7b:
f8:54:2b:d1:ab:42:3c:b6:f4:ab:bf:30:5d:c3:be:7f:1e:a7:
39:16:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:27 2026 by rpki-client