Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/JsExkxn6ORep1Qkd7h1bnFYNnP8.roa
File: JsExkxn6ORep1Qkd7h1bnFYNnP8.roa (raw, json)
Hash identifier: w/DL5qJe1mUIHpRScRPUTBRiJWpSst+kv/3eNPLA4cI=
Subject key identifier: 26:C1:31:93:19:FA:39:17:A9:D5:09:1D:EE:1D:5B:9C:56:0D:9C:FF
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019FC3332129A5BA6E901DF8B8EEA61A4688
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/JsExkxn6ORep1Qkd7h1bnFYNnP8.roa
Signing time: Sun 02 Aug 2026 15:58:55 +0000
ROA not before: Sun 02 Aug 2026 15:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209604
IP address blocks: 143.246.43.0/24 maxlen: 24
168.222.182.0/24 maxlen: 24
208.92.224.0/24 maxlen: 24
208.92.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:33:21:29:a5:ba:6e:90:1d:f8:b8:ee:a6:1a:46:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Aug 2 15:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26c1319319fa3917a9d5091dee1d5b9c560d9cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:a0:bf:ae:2a:f1:94:9b:6b:50:a2:e7:4f:
be:8b:67:82:3a:ba:60:00:82:33:82:ea:25:49:45:
c3:4a:57:c3:84:d2:d3:b5:91:82:e7:73:5d:5f:12:
a5:69:cc:71:ea:7b:36:8e:54:ee:31:bf:20:1d:9f:
0e:bc:b6:0c:31:b0:64:00:2c:06:c5:9d:bc:6d:ad:
eb:23:7a:e5:9f:7a:1f:ac:0a:08:00:be:35:e9:4f:
97:73:5c:a5:95:11:dc:46:76:88:42:9f:88:95:d0:
10:4c:cd:b6:72:0d:50:01:1e:e9:b4:ac:f9:1c:bc:
1a:19:ba:ab:e6:37:eb:df:48:ef:a3:f5:87:e6:cc:
8f:6d:85:4a:e5:d7:95:2e:20:96:91:57:38:86:cf:
44:73:a9:83:e8:3b:f3:22:cb:d8:bb:a5:96:b7:26:
b8:f5:54:55:85:3e:ae:84:a0:e1:fa:35:d9:e8:a3:
48:4e:91:f1:af:7a:72:42:60:f4:e2:d2:b0:d1:85:
6c:95:47:33:69:65:5a:95:ee:49:13:19:4a:24:88:
8d:ee:1d:cb:df:8c:2c:1e:8a:42:ba:9a:11:11:49:
87:49:99:15:f4:4f:f1:48:53:4a:9d:a0:1c:0c:58:
8c:6b:58:6f:2d:ae:84:2c:c1:75:aa:7d:3e:df:f9:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C1:31:93:19:FA:39:17:A9:D5:09:1D:EE:1D:5B:9C:56:0D:9C:FF
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/JsExkxn6ORep1Qkd7h1bnFYNnP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.43.0/24
168.222.182.0/24
208.92.224.0/23
Signature Algorithm: sha256WithRSAEncryption
da:f1:cd:2b:f2:4d:0b:b0:bc:98:f1:7e:cf:5e:a5:53:6c:ef:
28:3c:b3:14:1a:04:3c:d5:be:45:06:35:11:9d:26:f6:ba:3e:
77:c1:30:e0:9c:29:f3:7a:06:77:f4:9b:a4:47:33:42:c6:2a:
b6:34:4b:a7:d1:a9:49:7e:53:ce:bc:93:f3:b8:d3:0f:36:03:
16:21:36:db:bd:0a:62:0c:30:47:c1:a0:a4:33:e2:92:1e:5b:
64:43:f5:58:12:ed:ef:f8:1b:74:eb:43:55:db:5e:45:22:ac:
62:18:3e:08:dd:a4:61:11:2e:72:fa:4e:bf:58:13:23:9c:81:
ee:f3:7e:54:cc:c3:7d:0f:3b:43:13:7d:2f:c1:6a:d7:ce:82:
ac:c8:bf:44:c1:f4:44:bd:ea:5b:bc:52:a8:b4:ad:39:24:a2:
57:19:09:81:74:0e:dc:6a:34:de:05:aa:b3:9a:63:60:d7:f4:
bf:f7:69:9e:79:20:b5:6f:4b:3c:26:0d:2b:ba:47:8c:25:fa:
62:85:f8:c3:c4:28:ac:6a:cf:17:41:47:09:a0:94:9c:b3:ea:
81:8a:65:56:1b:1b:d3:51:3a:88:cb:4a:88:eb:e9:9a:a2:fb:
20:9b:ba:dd:54:b4:2e:7b:dd:27:4b:33:a2:ef:e3:e2:22:df:
5c:0b:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:06 2026 by rpki-client