Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa
File: jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa (raw, json)
Hash identifier: 7kRo5njKROlYBvZ0FU20K/hBTNAanIB/DZh3W6WgLMY=
Subject key identifier: 8E:59:D1:A7:B2:6B:F7:2B:67:48:7E:27:54:64:95:98:17:FF:93:AA
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F236943AB3F9B5A0AA0E1D554888A274B
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 45.92.28.0/23 maxlen: 23
45.92.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:43:ab:3f:9b:5a:0a:a0:e1:d5:54:88:8a:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e59d1a7b26bf72b67487e275464959817ff93aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e8:e4:57:9e:21:21:d3:b8:be:2a:1f:1f:93:
0c:a6:8b:91:ed:cc:61:16:89:56:45:16:cd:c3:a7:
f9:64:f5:d3:9a:a8:30:2e:df:09:60:c8:f9:4d:ee:
d0:c2:e7:65:92:b4:41:b3:45:b8:18:44:02:cb:5c:
f9:68:3d:ef:2a:e0:aa:8c:d7:f5:c3:5e:7a:9f:a9:
1c:f1:ee:6f:b3:97:a0:47:b0:18:56:02:56:fb:82:
fd:60:ff:e1:13:89:40:9f:45:b8:85:ba:8f:e5:eb:
9f:90:d2:f9:e8:b8:6e:07:f5:ff:5d:cd:31:65:15:
c5:f2:48:95:6c:a3:f3:14:6c:9e:a9:70:e0:83:b1:
dc:ac:d5:08:73:19:79:6b:cb:6e:b0:7e:03:37:36:
d2:7b:b1:e8:89:2c:95:46:b2:04:99:ac:2b:fe:84:
d3:de:f8:3b:79:65:1b:d4:a0:d5:53:0c:bb:37:fd:
01:fc:01:8f:84:4c:50:c3:59:c6:7c:a0:65:49:98:
87:8c:c1:f0:1d:66:85:6a:8c:8e:d2:35:51:17:77:
b8:a1:46:29:8c:b8:8e:2d:08:cc:56:39:75:3f:dd:
89:9d:32:80:50:c9:03:01:9b:c7:76:00:2d:1d:23:
48:65:f3:56:14:e4:b7:0e:fb:73:08:21:62:23:73:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:D1:A7:B2:6B:F7:2B:67:48:7E:27:54:64:95:98:17:FF:93:AA
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.28.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:04:6c:09:c5:8f:85:bf:e7:13:7d:0a:09:28:4c:6c:4d:26:
8d:8e:40:cd:5b:30:91:25:69:42:8b:94:dc:22:06:5c:be:6a:
70:d4:55:cc:89:73:f5:7c:1f:f0:9c:79:5c:30:ed:19:e2:b8:
32:8d:32:54:b2:61:f5:dd:d8:44:de:8f:f4:e8:98:84:ec:63:
03:a3:bf:94:dc:78:ce:18:04:2c:a9:9e:5f:88:20:a3:f3:52:
e5:93:02:39:b2:f5:b3:7d:bf:7b:2a:46:bc:8c:ca:53:7e:4e:
73:46:67:94:d8:fe:83:0f:2b:b4:c1:31:e3:d5:4a:1c:f6:fa:
a0:31:f8:c8:55:18:51:e2:f0:fb:30:ad:a5:c9:cc:cd:59:98:
16:09:3d:9d:1a:5b:cb:65:1f:b9:1d:4a:b7:d4:2c:59:0f:ca:
62:58:08:16:31:e4:d1:4e:13:db:44:aa:00:cb:83:91:26:a5:
7d:44:04:54:72:f7:47:25:47:c0:a1:03:1f:b0:0a:00:23:f7:
93:c9:11:25:51:b5:56:64:88:4e:42:d4:eb:d8:9f:08:e7:c4:
bb:26:d1:0d:aa:a2:df:a2:05:1a:5b:3d:bd:31:e6:83:b3:d8:
34:da:a2:ba:bc:55:e2:2c:f5:2d:82:05:ca:17:3d:00:e1:f6:
d2:1c:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 12:25:29 2026 by rpki-client