Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/jPK12EYF_F8N9qChJCYpeTggBjM.roa
File: jPK12EYF_F8N9qChJCYpeTggBjM.roa (raw, json)
Hash identifier: cyHVL2RzfZB+h/aqJsGsHiAbfgN+RdRCYZxKbcrn16k=
Subject key identifier: 8C:F2:B5:D8:46:05:FC:5F:0D:F6:A0:A1:24:26:29:79:38:20:06:33
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019F41ECD2D4F70E070C8A1A5526C05220AB
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/jPK12EYF_F8N9qChJCYpeTggBjM.roa
Signing time: Wed 08 Jul 2026 13:31:07 +0000
ROA not before: Wed 08 Jul 2026 13:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:ec:d2:d4:f7:0e:07:0c:8a:1a:55:26:c0:52:20:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jul 8 13:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cf2b5d84605fc5f0df6a0a12426297938200633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:6f:70:6c:4f:e3:75:0a:57:02:b4:9c:cf:
03:ff:6f:d1:35:51:4c:89:75:f9:9f:1f:6a:22:b5:
9b:81:ba:9a:e4:19:3e:07:45:60:f5:85:4f:ef:5a:
ff:93:00:6a:bc:69:05:67:f1:54:4a:ea:53:b2:68:
88:c6:96:6b:e1:01:e2:d1:46:f3:3b:da:f8:37:ca:
ea:69:dd:c9:de:66:63:66:38:17:28:af:56:76:21:
3d:fc:f1:0b:6a:18:b2:64:61:3b:1b:d7:cb:5e:17:
d9:cf:4b:d5:41:c1:76:aa:03:3d:8d:57:5c:3e:f4:
73:42:51:13:a0:89:d2:74:d1:b8:38:11:b7:68:84:
54:46:b0:4f:b1:0f:93:58:51:dd:58:79:ae:30:a5:
09:10:d5:b9:7a:a0:ab:92:d0:c1:56:48:a3:36:1b:
44:e2:fc:8b:10:43:77:8e:cf:15:82:c2:b7:05:05:
02:2f:2e:cb:60:5b:88:99:f4:70:11:c2:7e:23:16:
25:ed:ca:fc:44:57:42:1f:a9:8a:ba:de:d3:58:08:
ad:e4:aa:40:ec:d0:d9:49:c7:94:11:9f:ee:66:62:
9c:2a:01:96:bf:c5:dc:5f:6a:fe:39:6a:ee:8f:de:
95:0b:a4:22:bd:cd:c8:11:7d:ac:20:35:da:57:30:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:B5:D8:46:05:FC:5F:0D:F6:A0:A1:24:26:29:79:38:20:06:33
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/jPK12EYF_F8N9qChJCYpeTggBjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:19:aa:86:c0:81:cb:d3:0a:b3:fe:27:f6:2d:b8:c3:4f:d2:
54:c3:8d:3b:7c:8b:80:a5:d6:8c:ff:c1:90:e1:0f:a5:c4:92:
33:c0:c8:bc:7f:8d:f6:3b:cd:2c:17:c2:42:7e:c7:e3:43:ee:
5c:25:12:64:b3:d1:98:b7:0b:34:57:50:d1:46:e1:5b:75:93:
2c:a4:8d:25:9a:6b:ec:15:82:45:f8:86:c3:d7:c9:dc:04:e5:
98:e9:f1:ac:a8:a5:00:2b:b7:3f:8c:9b:94:05:0f:55:dc:1d:
8c:13:df:ab:1b:8f:17:b4:06:b3:b1:0b:e2:fa:24:ab:f1:12:
18:a4:24:62:79:31:e8:a1:d2:65:1c:fb:0b:9e:33:42:7e:99:
a9:97:48:de:3b:cf:5d:73:4b:06:3b:68:b2:a6:c7:e6:f4:87:
7d:cc:63:23:20:ae:b5:05:7c:13:e7:65:46:03:80:f1:2f:93:
9c:8e:17:71:ab:f4:ed:8d:ba:a5:21:31:72:5f:69:b5:9a:db:
2e:5f:db:46:e9:b6:4e:b2:69:e2:10:85:4f:1b:23:69:c8:a5:
d4:35:a6:d7:43:27:af:38:27:1a:72:ea:fe:b3:25:01:b6:35:
fb:d1:af:8f:1a:90:5e:9e:40:22:6b:31:f1:bc:94:c8:06:e3:
49:c2:b0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:47 2026 by rpki-client