Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JJdg16KE6S9XFBiehFokA5g2I-g.roa
File: JJdg16KE6S9XFBiehFokA5g2I-g.roa (raw, json)
Hash identifier: sOKAjaCb16kYk3+81LH1lzI/qTGdt7L+B+32Xv9rSTo=
Subject key identifier: 24:97:60:D7:A2:84:E9:2F:57:14:18:9E:84:5A:24:03:98:36:23:E8
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01A13611B0642087287CFBA22E7DA4820B2C
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JJdg16KE6S9XFBiehFokA5g2I-g.roa
Signing time: Tue 13 Oct 2026 16:21:31 +0000
ROA not before: Tue 13 Oct 2026 16:21:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49199
IP address blocks: 62.76.74.0/23 maxlen: 24
62.76.96.0/23 maxlen: 24
194.226.34.0/23 maxlen: 24
194.226.137.0/24 maxlen: 24
195.19.10.0/23 maxlen: 24
195.208.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:11:b0:64:20:87:28:7c:fb:a2:2e:7d:a4:82:0b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Oct 13 16:21:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=249760d7a284e92f5714189e845a2403983623e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:27:bd:74:72:d9:1f:2c:07:66:6d:f7:d1:
f2:cd:17:ad:c5:68:bf:cf:30:e1:a2:b6:9d:34:d4:
b0:12:2e:18:41:07:80:e8:75:48:36:4d:32:aa:f9:
9e:c0:4a:b0:e5:f5:fe:a7:a6:53:dd:65:21:5b:6b:
cd:20:08:d6:e3:35:b6:e2:a3:dd:ef:e3:08:01:47:
05:37:fe:76:c5:3a:8d:d1:5d:fb:af:0c:b8:8b:11:
dd:f3:9a:e7:42:8e:34:5a:15:34:70:a2:77:1d:ce:
4b:0b:64:78:30:4d:f5:5d:4f:c7:b5:c7:dc:eb:5c:
32:65:a0:54:0c:d2:cb:a7:ff:45:37:b4:e7:e0:5d:
a1:04:bd:f7:b5:fc:94:28:0f:00:63:6c:58:db:47:
5c:0e:19:37:b1:0a:93:ca:8b:05:20:38:8a:21:02:
ad:54:8b:4b:02:bc:e4:6f:3d:b5:50:e0:d0:63:76:
5f:22:0a:68:af:bc:99:5c:74:6d:3f:e8:32:f9:d0:
b0:ec:ae:bc:ac:3b:ef:e5:52:57:10:3c:a4:40:9c:
8a:e8:54:42:33:63:b3:1b:7a:fa:6f:47:03:31:0f:
c5:63:0d:32:3a:f1:a0:12:13:c1:f9:04:2f:ac:29:
cc:0e:5d:d7:63:c7:2c:82:24:62:e8:5d:27:8b:72:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:97:60:D7:A2:84:E9:2F:57:14:18:9E:84:5A:24:03:98:36:23:E8
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JJdg16KE6S9XFBiehFokA5g2I-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.74.0/23
62.76.96.0/23
194.226.34.0/23
194.226.137.0/24
195.19.10.0/23
195.208.220.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:60:e3:07:da:0f:d4:17:e3:6e:b8:6c:cb:af:dd:ba:93:65:
29:5a:d4:ab:2e:ce:ac:74:21:96:2b:a1:70:48:16:14:ca:7f:
80:4a:03:1a:07:c8:5f:22:ec:f2:0f:76:5a:ea:3c:9d:c4:39:
e3:ca:f3:23:ae:ff:bb:0f:9f:e8:6b:36:9d:65:f6:96:a6:23:
47:0c:ce:53:9f:bd:84:60:ac:3c:3d:ab:41:2d:f4:76:93:85:
e1:12:51:3d:ee:47:e4:c6:ea:99:68:ce:4c:70:8d:18:dd:75:
4a:34:43:2c:a7:e1:14:cb:60:12:8d:9c:a1:a0:8f:ae:a7:2d:
a0:93:58:6b:43:a2:f7:93:3c:2f:3a:cc:7e:60:14:ac:ea:ad:
3c:8c:59:1b:db:a7:03:d5:e4:6a:c3:95:8b:08:ca:f7:bf:a7:
1f:93:75:85:79:0b:f2:2f:8f:75:82:9b:5c:da:65:0e:f9:5b:
63:23:ac:d4:a8:f7:db:62:71:c6:9e:6a:a8:dd:3f:bf:b5:9e:
58:77:85:45:8c:3a:48:8b:68:b2:ed:9b:a2:ab:62:4a:ba:67:
f0:62:a0:bf:9c:57:f1:31:f1:f3:62:b5:48:89:4c:df:48:99:
8c:bd:5f:2f:8e:52:dd:94:ed:90:66:68:ca:6d:83:24:5c:e9:
07:73:0a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:48 2026 by rpki-client