Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/JQQNGg1KudUDH0fH8zF77cHH04g.roa
File: JQQNGg1KudUDH0fH8zF77cHH04g.roa (raw, json)
Hash identifier: 7IYYPE95u23gGvwnp7lVhhX844kU4uZYL5U7EqRsXDU=
Subject key identifier: 25:04:0D:1A:0D:4A:B9:D5:03:1F:47:C7:F3:31:7B:ED:C1:C7:D3:88
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A020AE96537DCEEDA604F0EBFBF1046E08
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/JQQNGg1KudUDH0fH8zF77cHH04g.roa
Signing time: Thu 20 Aug 2026 19:38:27 +0000
ROA not before: Thu 20 Aug 2026 19:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31863
IP address blocks: 213.109.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:ae:96:53:7d:ce:ed:a6:04:f0:eb:fb:f1:04:6e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Aug 20 19:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25040d1a0d4ab9d5031f47c7f3317bedc1c7d388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dd:73:73:a3:a4:11:38:ed:e1:ee:52:05:ba:
b6:90:4b:40:54:fb:fa:4a:0e:30:f3:b9:d7:6d:22:
8a:80:42:32:e8:1d:27:c2:e2:5d:18:bb:98:58:c0:
75:c9:dc:4c:58:7e:9e:7d:1f:1a:8f:ae:86:90:77:
44:fe:fb:57:28:0f:cb:19:29:de:2c:3a:bc:3c:e2:
f5:61:31:2e:d1:46:3f:2c:71:ec:53:9e:63:65:09:
be:e3:23:b6:cc:10:81:bd:e7:e5:91:3a:b6:c7:83:
63:8e:20:bb:a7:57:b7:2c:2b:30:f6:88:9c:93:7e:
be:a4:74:f3:0a:3c:9e:dd:de:ee:5b:04:c4:a8:12:
94:09:4d:6a:98:9f:ba:a8:b5:e5:1e:bd:3a:5e:8d:
15:bd:d2:83:eb:4d:a7:2a:c1:59:36:9f:6b:70:43:
d2:f7:f7:4a:20:23:9d:bf:a7:7d:67:0c:ff:4a:68:
b4:bd:e0:52:84:ef:bf:65:93:12:74:ba:a5:35:69:
d0:50:0b:ce:da:5f:fc:95:18:7a:71:7c:5f:d9:eb:
a8:82:52:cd:b1:78:cf:ff:02:39:c7:5c:1a:47:a8:
cd:5d:3b:7b:d0:95:00:24:7d:ff:af:d8:fd:32:33:
27:df:3a:99:22:31:d7:ac:bf:63:97:88:ea:90:26:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:04:0D:1A:0D:4A:B9:D5:03:1F:47:C7:F3:31:7B:ED:C1:C7:D3:88
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/JQQNGg1KudUDH0fH8zF77cHH04g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.182.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:89:2d:e6:b2:04:f0:11:56:72:31:a1:d0:4c:4e:77:68:76:
74:31:de:13:be:1d:fd:3b:be:4d:1f:8f:52:28:04:c5:04:f2:
1b:a3:c7:ff:86:51:16:85:4c:d4:76:6b:af:ac:8c:3e:64:f2:
11:9b:3a:b2:66:b0:92:5c:26:4f:7c:a4:b1:c6:33:16:2c:31:
ff:e6:e6:de:5f:29:7a:08:fd:fc:14:f9:54:22:6b:bb:fa:0e:
a8:d0:db:7d:15:ec:77:45:8a:fb:75:2f:12:df:39:11:dd:ca:
02:e5:69:c7:1f:e9:a5:73:2c:31:f1:6f:fb:e7:c9:af:7b:bb:
f7:05:3f:8d:08:c5:31:0e:40:dc:96:c5:be:e2:c4:89:ee:79:
b4:de:4d:24:b8:e4:b9:ee:37:b1:ad:ad:70:15:a3:6d:c1:44:
5c:b2:3b:2b:4d:12:78:0c:20:fa:ec:ef:89:72:af:18:44:b9:
51:dd:83:05:e7:6d:20:26:81:f4:b3:99:f4:74:d0:7d:00:e2:
1f:1a:de:eb:e4:2d:07:d5:b1:69:47:f3:f6:e6:6b:44:a0:06:
1d:f8:9e:b1:32:8d:ca:92:2f:00:f7:4b:4d:ce:51:d1:46:db:
30:1d:75:e6:2f:bb:a0:0f:f5:24:fd:1f:f3:04:2c:4c:3a:06:
01:55:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 06:02:56 2026 by rpki-client