Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa
File: JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa (raw, json)
Hash identifier: suXL0V83sdkLjwTY6BS/4DMQepDMTnnLPjHsyUslYPM=
Subject key identifier: 24:45:4D:59:09:BF:0B:1E:26:5A:AA:B9:7F:55:60:F7:16:7D:27:34
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F23691DA1BF2822A05DEB6F8A50B7F2C4
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41573
IP address blocks: 89.40.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:a1:bf:28:22:a0:5d:eb:6f:8a:50:b7:f2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24454d5909bf0b1e265aaab97f5560f7167d2734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:af:7a:0b:a6:44:f7:d8:86:fe:90:73:a6:
73:b7:8c:5f:66:4a:5b:d8:13:df:67:f7:76:10:b1:
5b:b6:7b:61:1a:bd:c1:f4:9a:f7:0e:97:ac:aa:d3:
67:66:80:f4:2d:f2:6c:d8:f3:54:19:b0:90:11:61:
4a:13:f6:25:9e:b2:4a:22:c2:37:09:e8:96:ad:eb:
b4:fd:72:85:69:f2:32:25:40:c7:51:01:5e:33:1a:
4b:9b:6d:a5:b1:10:92:d1:f7:b8:0c:f7:08:f5:37:
d2:62:43:50:d4:bf:f6:4d:93:ca:7c:75:b9:b8:f1:
3d:44:76:d6:8b:b9:ed:d3:ce:2c:52:88:3c:96:cb:
03:99:3e:e8:39:cf:d8:ad:61:de:15:05:89:65:74:
31:3d:51:e5:e4:27:fe:79:45:d4:87:a6:4d:dc:7e:
18:43:7d:c4:74:b7:ea:96:aa:fd:5d:50:f6:97:19:
f4:83:40:c9:64:ff:8d:84:a9:e6:b3:ca:2f:50:9b:
a9:8a:c5:39:0b:47:8d:02:1e:da:8f:d7:46:2a:95:
ee:29:5d:be:b6:83:8f:ae:3f:ee:d3:38:54:26:18:
7d:91:88:bf:0d:c3:c8:1c:39:37:bc:82:37:0b:81:
af:40:08:21:2a:41:ed:9a:a4:04:2a:b4:13:40:cc:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:45:4D:59:09:BF:0B:1E:26:5A:AA:B9:7F:55:60:F7:16:7D:27:34
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.225.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:96:2e:c7:9f:f0:cc:b7:95:d2:bb:02:0b:e9:ea:19:a5:47:
41:cc:e5:26:2e:d0:c7:a6:ea:98:ae:db:d9:e2:c7:cc:62:d5:
0f:4f:d4:79:ce:0f:75:69:eb:ce:bc:d4:cd:4d:2a:01:2c:8f:
f9:49:72:48:a5:97:2b:0c:9a:f2:fb:0f:fe:11:83:d2:cd:a2:
81:7b:e0:d4:2c:53:9b:7b:54:a0:47:5e:43:94:df:e9:9a:55:
ef:d9:08:bc:92:23:e5:27:34:5d:12:da:f6:42:cc:8e:d6:67:
cd:49:63:c4:e0:5b:f6:78:a6:5c:77:0d:5f:4b:56:e5:25:82:
1c:d5:cd:fa:f9:49:78:37:a9:ee:22:56:39:d6:b8:ce:7b:c4:
a9:41:0c:17:78:2b:20:65:f9:c5:4f:2a:1d:4f:49:2c:85:6c:
6d:95:64:8d:4b:b1:b0:33:42:91:88:6c:af:4d:f5:57:71:ff:
26:b6:ed:cf:59:48:66:87:f3:76:41:a0:e4:26:21:b9:71:f2:
1c:9e:4b:0d:d9:d6:d6:0c:aa:4b:b0:68:74:44:06:d1:ed:ff:
75:42:14:15:e6:d7:4c:a3:7e:05:9a:a4:74:82:d7:bf:30:20:
f4:be:c7:c9:33:95:f3:c1:11:2b:00:df:b2:ee:8f:5a:ce:97:
bc:83:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:18:18 2026 by rpki-client