Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/JBhxjPEeoajBhy7cTpg7oEWhavM.roa
File: JBhxjPEeoajBhy7cTpg7oEWhavM.roa (raw, json)
Hash identifier: gWp4UHWiDKCPjbcZjxktO81He434yg99QNMFol+Sp+o=
Subject key identifier: 24:18:71:8C:F1:1E:A1:A8:C1:87:2E:DC:4E:98:3B:A0:45:A1:6A:F3
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FAE4FD3C883A9F8E87C1AF312E9A9E5E1
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/JBhxjPEeoajBhy7cTpg7oEWhavM.roa
Signing time: Wed 29 Jul 2026 14:38:14 +0000
ROA not before: Wed 29 Jul 2026 14:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28839
IP address blocks: 83.68.138.0/24 maxlen: 24
2a01:190:15ee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:4f:d3:c8:83:a9:f8:e8:7c:1a:f3:12:e9:a9:e5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jul 29 14:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2418718cf11ea1a8c1872edc4e983ba045a16af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:17:25:09:68:a7:16:88:99:18:e7:96:ee:
3b:5c:54:b1:13:22:d5:cd:18:46:d0:63:fc:7a:e2:
3b:dc:19:6e:78:ad:e6:f3:8e:a2:e2:9f:0f:fd:b6:
9a:88:af:d5:58:d8:74:c4:52:c8:09:c8:ea:9d:49:
70:c0:a4:48:ba:80:bf:b6:d9:d6:49:0f:18:7c:38:
e3:60:e7:bb:01:cf:0b:56:27:db:ca:f0:b6:3e:91:
25:50:d0:a1:1d:76:e4:20:de:44:27:71:8d:c5:25:
c9:76:e3:c2:25:90:ea:cf:d2:a9:5d:67:9b:36:6a:
ec:8a:7a:f2:11:13:fe:fd:8c:b9:ae:e1:9c:4a:bc:
3c:f5:91:53:8e:ab:58:89:e0:80:06:76:2e:e7:8f:
b1:a2:77:97:b6:3c:4c:02:26:8c:07:b0:00:c5:2a:
d4:27:e6:3b:40:e8:4a:75:8a:07:dc:70:ba:69:e5:
b7:6e:4a:43:16:4d:30:1f:57:77:36:c5:82:12:bc:
dd:92:9e:70:b0:1a:84:d9:1f:33:48:20:ec:58:63:
0a:a2:0a:44:23:50:3d:e9:6e:4f:b5:ce:02:d4:5f:
82:99:ab:ea:c7:17:b2:b6:d6:16:8c:4b:93:22:d2:
44:da:9a:10:ce:f6:64:ca:30:e3:cc:00:79:47:3c:
ef:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:18:71:8C:F1:1E:A1:A8:C1:87:2E:DC:4E:98:3B:A0:45:A1:6A:F3
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/JBhxjPEeoajBhy7cTpg7oEWhavM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.68.138.0/24
IPv6:
2a01:190:15ee::/48
Signature Algorithm: sha256WithRSAEncryption
55:14:f5:0a:7a:1e:29:77:e0:b8:46:df:a1:a0:19:6f:2b:73:
c4:f5:48:3c:9a:12:63:03:f7:fd:d5:c1:7f:0c:da:cc:36:60:
b3:1c:a4:29:ea:b5:00:88:7e:6e:40:f3:34:62:1f:3f:a2:33:
39:49:bb:7f:e0:51:36:79:73:13:18:ee:de:6d:ba:49:26:2b:
a3:f3:5f:5a:e5:07:47:ea:a8:b4:6c:ea:0d:12:c8:bc:82:aa:
67:bf:ec:51:c6:3c:ae:71:e6:61:24:ad:8a:d3:ab:9f:2d:f9:
55:81:e1:67:c2:89:4f:c4:dc:7b:47:30:e9:5d:8b:e0:ba:f2:
2d:76:a4:7e:54:3b:23:87:e6:9e:c9:2b:a0:f9:53:ec:5f:8e:
15:3f:8d:82:7c:a4:28:15:83:1f:9a:aa:ce:90:80:09:2b:2d:
6a:6b:f1:ae:49:30:06:b2:5d:65:bf:e8:24:04:fa:7b:b0:50:
ef:c1:d2:11:3a:88:2b:cf:58:c2:47:30:43:d3:b6:4c:4a:77:
ed:12:49:2e:8d:f7:ba:fe:16:78:21:b5:55:17:d7:10:31:ae:
a6:a2:75:11:e5:a1:3d:4d:ee:a0:79:af:18:59:5d:bc:c0:0f:
38:e9:58:ef:4a:58:2a:7f:24:a8:43:57:15:01:48:d7:c9:34:
fd:fb:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:47 2026 by rpki-client