Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/JTOnlQRCrvTlkZ6vLnYF9lTRiKU.roa
File: JTOnlQRCrvTlkZ6vLnYF9lTRiKU.roa (raw, json)
Hash identifier: MwvmqSJJSWw0PBGTzywlFK2cPLnsMw/OAeiAKakQBt4=
Subject key identifier: 25:33:A7:95:04:42:AE:F4:E5:91:9E:AF:2E:76:05:F6:54:D1:88:A5
Certificate issuer: /CN=02f37611530eaaa9596e68c467b253992a4ce7c3
Certificate serial: 01A11C58D5F9324E6D4AC8B1D2AA7A87E06C
Authority key identifier: 02:F3:76:11:53:0E:AA:A9:59:6E:68:C4:67:B2:53:99:2A:4C:E7:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvN2EVMOqqlZbmjEZ7JTmSpM58M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/JTOnlQRCrvTlkZ6vLnYF9lTRiKU.roa
Signing time: Thu 08 Oct 2026 16:29:06 +0000
ROA not before: Thu 08 Oct 2026 16:29:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47764
IP address blocks: 160.5.208.0/20 maxlen: 20
168.113.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvN2EVMOqqlZbmjEZ7JTmSpM58M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:58:d5:f9:32:4e:6d:4a:c8:b1:d2:aa:7a:87:e0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f37611530eaaa9596e68c467b253992a4ce7c3
Validity
Not Before: Oct 8 16:29:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2533a7950442aef4e5919eaf2e7605f654d188a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:93:63:f9:02:b1:5d:8b:eb:51:2d:f8:a0:
20:2a:f8:cc:69:76:2c:2f:5c:de:0a:d2:8e:0e:2e:
30:1a:81:f4:26:95:3d:3d:29:0e:0e:ec:a9:98:e0:
05:11:01:03:91:00:2f:f4:35:30:88:34:e0:20:c9:
da:9e:1a:b6:43:01:fe:a0:f5:bd:b7:0d:76:48:c7:
ad:e3:59:49:07:8d:33:f4:43:0f:6d:f1:aa:8b:fd:
61:f9:29:0f:12:fa:a6:06:25:14:9b:f5:09:2a:1c:
c2:12:90:70:68:07:40:8d:55:63:40:50:09:b7:e4:
31:2f:ce:6c:21:78:f6:a0:be:86:43:72:78:f7:4f:
5b:08:c9:00:e5:0d:cb:b9:ee:6e:03:ff:f9:03:1b:
a4:78:e2:7a:6b:ae:9f:ec:5f:c4:5d:44:68:ce:7e:
cf:f7:28:12:3b:46:74:65:1b:bd:6b:d4:2c:a6:60:
ec:a2:80:10:88:f7:05:39:dc:4a:d9:e2:05:09:ab:
17:2a:8c:05:06:6b:ff:04:bf:c8:f3:67:39:d6:33:
f9:c8:53:77:c3:ec:39:33:81:06:51:f1:63:31:8d:
fe:53:1b:5f:94:4f:6e:8f:bf:2d:5c:4b:b3:43:48:
39:fd:9c:ca:02:1a:2f:21:2d:6b:0d:3c:12:c5:85:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:A7:95:04:42:AE:F4:E5:91:9E:AF:2E:76:05:F6:54:D1:88:A5
X509v3 Authority Key Identifier:
keyid:02:F3:76:11:53:0E:AA:A9:59:6E:68:C4:67:B2:53:99:2A:4C:E7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvN2EVMOqqlZbmjEZ7JTmSpM58M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/JTOnlQRCrvTlkZ6vLnYF9lTRiKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.5.208.0/20
168.113.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:43:fd:b8:f4:0d:c6:be:18:08:03:e1:8f:84:a9:ef:f8:d9:
8d:af:ea:95:65:6b:7f:0e:55:57:6b:a5:c5:72:68:f9:a6:88:
b5:fb:d7:27:2e:02:c7:71:12:a3:9f:30:85:68:92:d0:11:c2:
66:45:6b:8c:64:34:c9:4f:a4:03:75:37:29:0f:a0:ac:f4:66:
3b:7e:1e:d3:3c:2e:52:d8:d7:c8:3d:e0:94:f8:7c:b4:2a:a0:
19:bb:42:a0:34:76:86:99:9d:55:8e:c0:ef:56:71:cc:86:ee:
fa:7e:1d:17:b7:60:2a:c5:ff:f8:a8:ef:7c:61:6a:e3:20:af:
cd:2f:fc:4a:09:23:49:45:e9:f1:dd:31:6e:10:69:1e:54:8a:
3b:dc:a4:47:92:a0:6f:69:93:2b:a0:1d:83:ef:94:4a:01:26:
c1:b0:5c:82:44:12:fc:a5:fb:76:4e:22:aa:db:b3:dd:4f:13:
3c:81:18:57:55:cf:4a:c0:d6:d5:c1:0e:07:18:e3:c5:00:3f:
4e:e0:2a:ed:a5:de:e6:15:f8:59:46:47:56:56:fe:5f:a7:97:
e2:77:e0:c9:1f:6b:75:17:13:52:05:a7:b9:52:49:e4:d8:d1:
71:f2:46:85:4c:e6:03:11:2c:90:bc:e0:e1:1b:ca:2d:eb:75:
7b:29:6b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:56 2026 by rpki-client