Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/CJ-zj836A3TR54KML6nA2kNlyiY.roa
File: CJ-zj836A3TR54KML6nA2kNlyiY.roa (raw, json)
Hash identifier: AuGdHKTStnhkWfUpHj8s2x6Pp9jt1yZgqVw4hJJIo3Y=
Subject key identifier: 08:9F:B3:8F:CD:FA:03:74:D1:E7:82:8C:2F:A9:C0:DA:43:65:CA:26
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 019F23688811D9E4B5C7DE281227BC427139
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/CJ-zj836A3TR54KML6nA2kNlyiY.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47913
IP address blocks: 5.252.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:88:11:d9:e4:b5:c7:de:28:12:27:bc:42:71:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=089fb38fcdfa0374d1e7828c2fa9c0da4365ca26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:a3:cb:f1:8b:49:32:11:5e:9e:57:5c:3b:
d1:46:0f:e8:a5:dc:6b:a5:a8:ca:f1:63:59:5c:7a:
da:f5:ef:34:70:6e:15:8e:34:a9:44:e0:7f:ff:e8:
02:70:79:02:8a:91:e9:67:a4:31:e8:5b:d5:ee:92:
b5:23:6f:9f:f7:13:4f:6e:21:9a:67:2e:23:b0:40:
f7:da:aa:27:47:ad:70:7f:9a:18:41:5d:e7:23:78:
1d:9f:b1:71:cd:16:b6:37:1a:b1:9c:f7:47:3d:71:
51:8b:fa:3d:ae:e8:95:7f:95:e6:44:f1:10:d3:02:
70:2e:6a:86:3f:e4:af:ef:46:be:23:c8:86:4d:96:
0a:01:3d:ae:e4:58:f6:e8:49:4b:58:42:4d:28:4f:
91:48:3d:14:6e:df:f7:64:fe:8d:fd:d9:16:b4:84:
d2:52:a4:7b:0b:68:5c:ed:d1:d7:bc:fe:87:b2:8a:
37:99:e9:be:d6:c1:93:64:61:97:68:78:21:5e:cc:
25:ee:93:18:f7:54:14:b1:42:79:7a:e7:df:c4:f4:
8e:ce:53:90:84:b7:b5:46:33:05:9a:05:fd:5e:ee:
80:e4:63:26:38:d4:62:85:e9:c9:b5:3d:93:91:be:
01:c8:09:31:d1:ee:94:b8:0e:b2:b4:a8:2c:a1:45:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:B3:8F:CD:FA:03:74:D1:E7:82:8C:2F:A9:C0:DA:43:65:CA:26
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/CJ-zj836A3TR54KML6nA2kNlyiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.28.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:d3:74:10:a8:28:11:29:7c:12:21:ec:68:45:7d:31:56:8c:
89:b1:a3:49:40:e4:9d:b9:4c:30:6e:a1:25:b8:17:3e:8f:b8:
2b:33:0f:9b:9e:98:5e:16:52:b4:52:8c:6d:51:7c:a5:3c:e8:
dd:65:35:e0:ca:cb:03:4e:d6:2d:13:18:47:13:20:c8:ef:0e:
ad:7d:b4:c4:2d:a4:77:a4:ed:50:88:73:72:10:33:4e:7c:f9:
1c:e7:59:14:f8:05:52:e7:ee:17:47:36:0b:ed:db:89:04:37:
c1:ed:4e:b5:74:88:ad:cf:bb:25:c4:f9:82:fd:fe:e8:5f:a6:
08:a1:7d:28:39:43:07:32:f6:c9:31:5e:07:5e:e7:1c:32:cb:
a1:35:04:70:1a:a2:01:dc:d0:7e:39:60:cf:d5:6d:27:71:10:
b7:0e:c9:72:18:43:f6:67:95:33:a2:4c:ea:4b:ad:d7:73:f2:
6d:5b:16:c7:91:aa:d4:00:f0:49:b9:19:71:4f:7f:be:58:1b:
f7:b7:88:ac:6c:e7:a3:58:ea:50:c1:15:7b:aa:a5:5c:da:39:
f1:f2:ae:d1:3e:ee:77:60:27:04:d8:9f:7d:83:f6:0b:d1:70:
ea:c7:17:0f:75:a8:ca:7c:5f:a9:aa:7f:1d:42:7f:46:ae:5e:
2b:c2:23:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:30 2026 by rpki-client