Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/JRQBdP7ope_PtzqtZeZHn9Bvtyo.roa
File: JRQBdP7ope_PtzqtZeZHn9Bvtyo.roa (raw, json)
Hash identifier: mlXuFbiUkqJMpJ3gsU4Ys2bpdMZx0bolGvQ5xQgh3BA=
Subject key identifier: 25:14:01:74:FE:E8:A5:EF:CF:B7:3A:AD:65:E6:47:9F:D0:6F:B7:2A
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A0ED82FBA318CB7DECA0B494185988AB88
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/JRQBdP7ope_PtzqtZeZHn9Bvtyo.roa
Signing time: Tue 29 Sep 2026 14:12:59 +0000
ROA not before: Tue 29 Sep 2026 14:12:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 91.244.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:82:fb:a3:18:cb:7d:ec:a0:b4:94:18:59:88:ab:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Sep 29 14:12:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25140174fee8a5efcfb73aad65e6479fd06fb72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:78:43:44:b6:8c:75:39:12:b1:cf:9b:f5:
7d:0c:fd:3e:d3:c6:4e:6d:83:2e:ec:09:7c:b8:60:
81:9a:da:89:d8:b5:a0:65:05:fc:75:fb:36:2c:ec:
c4:6c:c7:3f:6d:3a:dd:26:ea:d6:33:15:2a:c7:97:
f2:c3:be:dc:72:85:be:e5:5b:24:b8:97:b1:14:d2:
5b:76:c9:fd:bf:b0:af:79:36:fa:e7:55:cc:0f:fe:
b6:61:98:d3:ae:2c:9d:41:ac:2f:b4:85:24:f8:6e:
bb:d4:a5:07:cf:54:88:95:96:83:61:89:71:b4:67:
53:ab:0b:da:81:cc:dc:27:5e:ff:49:e7:a5:b7:79:
e7:ba:d6:06:ec:3c:5e:c4:5c:c1:52:ff:11:75:46:
d5:07:35:9e:22:2e:ba:aa:33:e9:94:4a:e6:2d:7b:
ef:33:0a:37:b0:54:ef:54:c9:cd:69:49:07:10:b9:
3a:a0:f1:4d:a4:8f:57:7e:e9:7b:f5:32:c3:48:d1:
a5:65:6e:89:89:b9:e8:22:b7:fe:30:2b:24:45:b4:
8e:4a:6c:58:0f:05:cb:4a:27:2e:10:65:eb:60:01:
a6:85:69:5c:f2:e5:0d:1b:65:cd:bb:9e:10:97:40:
78:86:7a:6e:bf:65:a3:91:58:e2:c7:e9:99:06:bd:
8d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:14:01:74:FE:E8:A5:EF:CF:B7:3A:AD:65:E6:47:9F:D0:6F:B7:2A
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/JRQBdP7ope_PtzqtZeZHn9Bvtyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.136.0/22
Signature Algorithm: sha256WithRSAEncryption
46:50:62:f1:90:04:0f:20:1a:93:09:4b:1c:29:c0:8f:75:19:
ea:eb:bd:b0:f8:f9:5f:31:dd:83:95:bf:b3:99:1f:17:3e:aa:
56:73:7a:88:a6:3b:6e:c5:3b:ef:58:ca:91:b9:7c:b7:41:ea:
5e:50:e4:68:c3:08:3a:3b:e0:f3:89:18:05:e8:84:4d:70:c8:
55:ed:f9:ac:6e:8a:06:f7:59:ef:83:72:29:3e:e2:40:53:08:
a3:91:47:44:9d:b3:30:30:f7:fa:81:c6:49:b4:ce:d5:db:1d:
a2:e8:2d:83:25:de:f0:ec:60:e9:44:f8:03:84:db:d8:ca:ba:
0f:c8:0d:47:9b:09:27:0d:5b:9f:b3:da:1d:76:58:7d:4e:93:
53:b0:0b:07:f6:19:44:b3:84:7d:f6:dc:a9:f0:2f:35:62:dd:
c0:ff:10:30:01:de:49:34:b7:92:39:e7:35:26:73:96:dc:5f:
fe:c4:12:67:af:9a:29:9b:78:f0:53:44:9a:45:ba:3f:db:9d:
77:56:1d:3b:50:5d:1f:c7:8e:0e:26:e3:4b:40:27:53:05:7b:
ec:c9:26:bb:d3:91:00:2a:10:41:25:b8:02:d5:6e:89:9c:e4:
19:15:2d:53:9e:74:80:97:11:1d:05:6b:ea:c4:30:12:d4:b8:
c2:dc:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:59 2026 by rpki-client