Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/JC0oeVPutrtoz5pIK0joUbwgQxA.roa
File: JC0oeVPutrtoz5pIK0joUbwgQxA.roa (raw, json)
Hash identifier: uLDZ1wLhDZ2EH2LLCVxun1/uekD7dCugVFL0P/ftqcU=
Subject key identifier: 24:2D:28:79:53:EE:B6:BB:68:CF:9A:48:2B:48:E8:51:BC:20:43:10
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 019FF0A67E9E700D781C4315C955669B4FFE
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/JC0oeVPutrtoz5pIK0joUbwgQxA.roa
Signing time: Tue 11 Aug 2026 11:47:51 +0000
ROA not before: Tue 11 Aug 2026 11:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40985
IP address blocks: 195.189.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:a6:7e:9e:70:0d:78:1c:43:15:c9:55:66:9b:4f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Aug 11 11:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=242d287953eeb6bb68cf9a482b48e851bc204310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:98:a3:a3:2d:3a:d1:2c:9f:57:c5:bb:1f:
8a:3b:4a:5b:d5:e4:a0:bd:3a:dc:fc:ef:1d:46:59:
5e:cc:5d:61:33:38:59:b0:9a:a0:3b:e6:5e:35:11:
ef:1e:42:45:ac:c0:56:23:e8:ef:ee:8e:f8:55:05:
33:4a:07:e7:fc:b4:9f:11:7a:78:98:59:72:77:9c:
77:8e:fd:9e:4a:62:89:04:34:99:66:da:ac:0b:23:
ad:96:6f:2b:19:18:fc:d5:ec:52:1a:05:18:a8:ff:
1f:33:16:03:34:2a:23:34:37:85:1a:a6:9e:c6:6a:
fc:c3:3b:36:b4:15:13:d0:fd:f9:3e:1d:3a:33:62:
95:09:ce:9d:5a:82:ae:35:ef:6a:b1:2b:93:95:9f:
99:24:51:80:4c:92:24:06:b3:d3:4b:09:c0:09:8e:
26:22:89:07:95:cc:c3:5f:17:ea:47:ad:8f:5a:7d:
cd:a0:23:75:4e:53:ed:db:fe:fa:5e:76:bd:67:41:
dd:2d:f8:a8:6c:a9:a8:72:a8:04:2c:18:7b:eb:6c:
54:ae:11:43:1c:75:30:b8:01:85:67:39:29:73:41:
45:66:89:ad:4b:9d:3f:d8:72:bd:23:c4:31:d1:2e:
b9:14:c4:33:52:d5:c2:b7:d7:59:f3:23:a8:5e:da:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:28:79:53:EE:B6:BB:68:CF:9A:48:2B:48:E8:51:BC:20:43:10
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/JC0oeVPutrtoz5pIK0joUbwgQxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.216.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:e3:f1:00:2a:5a:c6:f0:fb:d9:e0:c7:84:78:1f:1c:52:52:
10:df:96:97:c2:38:7d:0e:ca:c0:74:dc:a8:b4:c7:6b:64:e7:
51:54:1b:aa:98:52:d2:60:f1:a5:91:33:10:cd:ec:29:c3:f8:
ad:b3:c8:27:77:fd:bb:a2:a5:07:12:80:e5:80:be:ce:ee:2c:
a7:43:38:89:de:da:23:24:2b:07:5d:34:f3:06:9a:b9:21:2e:
7c:3b:f1:68:95:0f:80:29:5e:8b:06:eb:fc:9b:73:88:bc:76:
e5:fa:df:87:22:fb:cc:bc:a3:d3:d8:6c:93:31:97:60:e4:ad:
40:98:96:77:66:60:a6:4e:5f:d2:ec:f8:06:45:a1:50:6c:84:
e9:68:f2:14:6d:1e:32:a1:ab:2d:7c:03:78:52:6c:2a:e3:06:
bc:37:10:1a:f5:f7:87:72:fc:e0:62:e0:16:f3:5e:52:fa:c6:
9f:4c:06:06:6b:49:4c:8a:9f:3b:22:6e:22:9c:bf:4c:95:7c:
10:e7:28:be:93:ba:9a:44:b2:b7:29:17:f9:b8:7e:f2:66:dd:
57:2d:da:32:cd:49:6a:5c:b6:14:ac:bc:6e:e8:85:c9:f3:5b:
cd:cb:39:97:b3:f2:6a:f4:65:e4:6d:2a:4e:95:a6:16:dc:db:
03:24:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 02:03:37 2026 by rpki-client