Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/JJSXlUjdgsXsxr441kL45vuNPlQ.roa
File: JJSXlUjdgsXsxr441kL45vuNPlQ.roa (raw, json)
Hash identifier: RV4cugeNLggjz/BuldqDCL7PylisxFfq49zCoougTQc=
Subject key identifier: 24:94:97:95:48:DD:82:C5:EC:C6:BE:38:D6:42:F8:E6:FB:8D:3E:54
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A029F2B846A88E07A5807F1CB4128D5DA5
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/JJSXlUjdgsXsxr441kL45vuNPlQ.roa
Signing time: Sat 22 Aug 2026 14:49:27 +0000
ROA not before: Sat 22 Aug 2026 14:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204603
IP address blocks: 130.78.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:f2:b8:46:a8:8e:07:a5:80:7f:1c:b4:12:8d:5d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 22 14:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2494979548dd82c5ecc6be38d642f8e6fb8d3e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:bf:28:83:b7:af:60:52:c9:fa:b5:2b:34:
24:79:3e:91:79:b2:e4:65:63:b8:37:72:24:9d:2b:
89:86:1a:9c:27:ca:c0:ca:33:fa:17:7c:24:a1:8d:
e0:7c:96:8f:b2:50:62:ce:03:c1:ef:1b:6b:a8:7a:
f9:18:e5:71:40:aa:9d:26:57:41:23:9f:90:b6:fb:
c6:f5:36:71:4d:09:74:90:8e:7f:10:0b:b9:2d:68:
3c:c2:53:10:d2:a0:96:7c:b9:cf:4b:2a:bd:c1:09:
4d:43:8c:5c:e0:d8:9b:f7:85:3a:91:ca:ff:07:1d:
aa:af:24:ed:dc:2f:31:70:ac:0d:31:b4:3c:14:05:
f4:21:3a:e2:1e:39:8a:be:50:71:01:eb:fe:60:37:
55:52:d5:6b:0b:9f:dc:bb:57:9c:bf:58:e4:be:f9:
33:53:16:00:0e:c0:7e:d6:ab:90:f1:9b:cb:1d:61:
18:db:92:08:8f:bc:9b:fa:05:18:c4:e2:ee:a6:96:
bc:56:45:1f:28:b1:f4:e5:5e:52:70:c9:8f:be:c2:
9c:2a:21:d7:4b:f3:73:af:c5:e4:1d:d2:7f:45:72:
ee:0d:4f:2c:94:e1:5d:8c:e4:a3:2d:9a:f3:e3:20:
25:c9:a3:ac:b9:ac:2a:83:f4:4c:75:49:97:e9:d5:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:94:97:95:48:DD:82:C5:EC:C6:BE:38:D6:42:F8:E6:FB:8D:3E:54
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/JJSXlUjdgsXsxr441kL45vuNPlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.188.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:86:b8:d4:c4:5a:58:41:99:0c:cd:58:ba:60:96:1f:0f:2b:
cd:9e:af:aa:b6:24:14:0a:d9:f4:92:37:2e:76:80:13:9d:8b:
33:aa:2f:5b:91:f1:08:dd:38:bb:66:a6:ae:b0:2f:7f:38:7f:
f2:09:6d:81:d7:7f:b8:65:da:48:2e:90:72:20:56:8a:96:f2:
fd:79:eb:ce:a2:80:be:9e:1c:f1:23:ad:cd:ef:88:bf:39:e0:
e6:2d:d8:12:4a:88:89:a0:47:19:d2:8a:0d:35:b6:3e:5b:c0:
8b:b1:3c:af:0b:b0:77:d9:ba:e5:3a:84:ae:7e:ac:6e:97:0f:
e8:4e:e7:67:02:12:1f:ae:28:75:17:bc:cd:cf:2a:7f:b7:2f:
83:69:d9:ab:d8:7e:83:03:e4:25:25:81:d0:72:a1:39:1c:f1:
a3:a2:be:67:82:5a:14:0d:11:8a:e1:51:63:ef:53:6f:37:dd:
d4:c5:19:c2:57:80:2d:f7:13:07:48:5b:c9:89:e7:31:6f:dc:
c5:41:cc:e5:bd:24:52:c9:a4:dc:81:a2:f6:5b:5e:6b:d6:19:
31:4a:32:9a:a3:7a:19:82:a3:28:b9:af:24:f8:22:7c:2c:89:
fa:2c:9e:64:cd:d7:3a:ad:f3:a4:79:fe:76:2c:0d:1c:5b:40:
e3:6a:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:44 2026 by rpki-client