Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/jXlPjmax2D6xk6xk15LqeUs2Fa8.roa
File: jXlPjmax2D6xk6xk15LqeUs2Fa8.roa (raw, json)
Hash identifier: ZUhfEbcBqZVUtm9r9VeW3nIknnrUSnVpiKVvjVmMjCA=
Subject key identifier: 8D:79:4F:8E:66:B1:D8:3E:B1:93:AC:64:D7:92:EA:79:4B:36:15:AF
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 01A07F4BF986F59CAAAC7D79FB29A2EEBA07
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/jXlPjmax2D6xk6xk15LqeUs2Fa8.roa
Signing time: Tue 08 Sep 2026 04:34:40 +0000
ROA not before: Tue 08 Sep 2026 04:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 195.88.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:4b:f9:86:f5:9c:aa:ac:7d:79:fb:29:a2:ee:ba:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Sep 8 04:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d794f8e66b1d83eb193ac64d792ea794b3615af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:a2:72:e5:dc:ce:69:74:9f:1f:5a:c7:08:
42:68:8a:44:a5:81:94:65:b9:fc:68:9c:46:68:cf:
30:c1:82:43:56:52:24:f0:d4:f9:2e:f9:d6:40:d5:
4a:7d:20:e3:a1:56:4c:55:c1:12:ae:1a:55:11:3e:
b4:24:84:c7:eb:b3:52:27:07:9f:45:45:80:56:c8:
fb:55:25:aa:08:b5:65:d7:ac:94:7e:ca:1e:8c:28:
4d:33:5d:b0:30:a1:6a:82:d4:1a:98:7d:c0:98:67:
ed:eb:8d:ee:26:28:2d:f9:32:f9:be:f2:12:18:b2:
bf:db:b5:a7:b3:9d:ce:03:f7:b3:93:f4:b3:45:a2:
35:80:a8:56:47:a8:00:88:be:e1:0a:78:c3:e7:66:
9b:21:2f:86:e1:b2:42:68:29:93:fd:e2:20:3a:47:
f6:16:1f:c2:7c:55:5f:d6:41:c2:ae:5e:31:83:02:
57:ac:c9:d8:f9:b0:85:da:25:4c:eb:5f:58:7a:30:
92:46:02:29:ad:23:7a:da:1d:1a:38:30:7e:46:73:
8b:ef:60:05:ac:f4:f5:62:d0:c5:ef:de:b7:4f:ca:
d9:3c:b2:6d:fa:eb:37:51:01:c4:2e:ed:e6:85:28:
6c:67:f7:9f:72:e6:cf:90:18:8a:60:12:6b:a3:7c:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:4F:8E:66:B1:D8:3E:B1:93:AC:64:D7:92:EA:79:4B:36:15:AF
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/jXlPjmax2D6xk6xk15LqeUs2Fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:75:a1:2e:c7:f4:f2:a2:42:12:33:aa:a1:c1:8a:68:c2:9f:
28:e5:6c:db:b2:b8:ac:59:8c:e4:ec:0d:a7:75:f5:da:e9:2f:
ef:17:93:a4:1c:44:14:84:08:52:22:fe:46:f5:d0:95:b6:09:
ca:b3:50:b8:f9:cb:40:2f:3e:8c:90:e3:27:20:4e:eb:7b:37:
49:69:5f:9f:2b:82:0e:ae:ae:a4:28:16:ff:f1:60:a0:d5:f8:
e8:cf:b8:a7:f1:53:9c:56:12:07:01:0b:23:59:01:94:41:23:
ec:78:db:81:9c:8e:bb:2d:d2:f4:94:f7:2c:c4:23:3b:bb:37:
8e:f7:15:3c:65:cb:61:93:eb:41:32:0c:16:48:ce:68:25:ee:
cf:de:5a:95:b3:06:4d:63:15:fd:99:6f:ea:73:04:2c:ac:58:
3b:46:1b:db:4a:d3:5a:d9:fe:0f:c5:bf:7c:20:29:8b:84:21:
b3:54:df:1a:e6:b3:3d:80:da:42:7a:95:74:fa:3f:cd:45:f1:
69:03:29:9b:55:b2:d7:4a:b5:62:ad:01:28:6f:3b:ca:18:cb:
6b:2f:14:17:1f:04:e1:7c:87:f4:0a:5f:62:c8:6b:ca:6d:ba:
b4:ac:06:16:c3:5d:aa:d5:d3:f4:58:55:6c:fe:44:18:4c:89:
88:14:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:22:02 2026 by rpki-client