Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/jOAZ3E7oW-kBXNuE4GL1fYgaDyI.roa
File: jOAZ3E7oW-kBXNuE4GL1fYgaDyI.roa (raw, json)
Hash identifier: YE6xZb8RdMntJLYJXnM9I5dsHeZDxxUZFJG8X5S7g60=
Subject key identifier: 8C:E0:19:DC:4E:E8:5B:E9:01:5C:DB:84:E0:62:F5:7D:88:1A:0F:22
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019EC174669E1B6CA02C238A1560F0036712
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/jOAZ3E7oW-kBXNuE4GL1fYgaDyI.roa
Signing time: Sat 13 Jun 2026 14:48:11 +0000
ROA not before: Sat 13 Jun 2026 14:48:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 212.108.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:74:66:9e:1b:6c:a0:2c:23:8a:15:60:f0:03:67:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Jun 13 14:48:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ce019dc4ee85be9015cdb84e062f57d881a0f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:cc:e4:77:4e:cb:9e:9c:13:74:8c:1d:ff:
40:08:12:6a:4b:ce:d4:7c:90:85:cf:66:f7:8f:74:
75:fe:e1:d8:0e:80:a4:ea:e7:d1:96:ac:0e:6b:54:
21:35:a9:81:a3:93:28:e7:cf:dc:d2:54:bd:51:b1:
b5:77:f5:b1:dd:2b:ff:64:e9:94:68:5f:47:83:00:
6e:23:32:1a:86:b5:bd:a2:28:90:35:50:2b:9d:ad:
c5:4b:c8:8e:61:c6:91:17:c4:f3:ab:24:30:11:f1:
ed:ab:81:6a:b2:7d:85:e2:2b:de:53:1a:22:45:97:
51:52:b7:9b:a9:81:06:69:e2:67:9c:87:25:ef:de:
4e:50:ca:ee:fa:12:19:99:aa:5b:bb:f2:f6:fa:b4:
a5:72:6c:b6:19:41:ab:59:d6:ad:64:12:15:90:a7:
0e:61:5f:44:74:f0:ff:69:36:49:84:5c:8d:0f:80:
ca:73:b5:d9:ec:cd:08:39:55:3a:22:89:cf:af:61:
e9:a9:69:9b:ad:26:6d:a6:37:1f:d0:aa:39:41:a7:
4a:bd:b4:06:74:6d:cc:c1:23:77:b8:5d:0d:5b:5a:
ae:17:9e:f7:05:d2:a2:6c:c7:25:66:40:b5:8f:51:
ee:ed:93:04:35:b3:d9:6e:34:1f:7f:ed:86:77:43:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:19:DC:4E:E8:5B:E9:01:5C:DB:84:E0:62:F5:7D:88:1A:0F:22
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/jOAZ3E7oW-kBXNuE4GL1fYgaDyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a6:32:1a:43:2b:b7:94:f8:cf:ed:54:b6:91:02:b5:bd:af:
d5:92:f2:c1:56:7d:25:93:d8:70:85:ad:80:77:5a:e4:54:5b:
85:d1:2a:17:dc:db:16:01:79:08:ef:80:a5:6f:81:9a:2f:ad:
ae:0c:30:0c:3c:cf:e7:45:9f:32:bd:7b:31:f1:35:6f:eb:10:
81:4a:10:2d:9b:b0:f0:29:63:3e:ca:92:b9:c3:29:00:d8:a5:
d7:47:6f:a2:14:10:c0:d6:df:3c:56:22:7e:13:19:14:22:7e:
09:ae:24:f1:8e:a0:68:3d:42:c1:e6:7e:44:a8:8e:1b:f0:54:
bf:f0:02:b7:57:5a:42:28:83:05:10:d2:0b:8e:85:ae:d0:09:
cf:bb:1b:c8:28:a7:4e:14:b1:9c:f9:2b:51:8d:55:89:01:c6:
f0:d1:ec:c3:c6:41:15:b4:d2:51:22:02:81:07:63:83:17:7c:
87:0d:6c:fc:c8:f2:b0:e3:01:73:3c:23:ae:bf:cf:45:d4:6c:
45:d2:ac:7c:eb:36:28:2b:f1:18:2f:ec:73:ba:53:e1:9f:a4:
70:09:26:f4:9d:b3:5a:06:1d:a7:e7:19:ae:12:52:a4:6f:b4:
8f:e4:8d:de:c9:96:1e:c3:8a:8b:70:18:37:54:c2:f4:a0:11:
97:c8:e1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 09:48:23 2026 by rpki-client