Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/JKUeD9Y_DYWzwIgnnR5SK1096p0.roa
File: JKUeD9Y_DYWzwIgnnR5SK1096p0.roa (raw, json)
Hash identifier: viibffM+FBdTp9HKwIvDiMb102oaNg4WwHccGoK3rYI=
Subject key identifier: 24:A5:1E:0F:D6:3F:0D:85:B3:C0:88:27:9D:1E:52:2B:5D:3D:EA:9D
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01A0D7E8D86D99CEA1216909662F6C7312C1
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/JKUeD9Y_DYWzwIgnnR5SK1096p0.roa
Signing time: Fri 25 Sep 2026 09:32:36 +0000
ROA not before: Fri 25 Sep 2026 09:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 62.244.39.0/24 maxlen: 24
62.244.47.0/24 maxlen: 24
62.244.54.0/24 maxlen: 24
193.193.209.0/24 maxlen: 24
193.193.211.0/24 maxlen: 24
193.193.219.0/24 maxlen: 24
193.193.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:e8:d8:6d:99:ce:a1:21:69:09:66:2f:6c:73:12:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 25 09:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24a51e0fd63f0d85b3c088279d1e522b5d3dea9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:7d:f6:28:de:48:ff:d3:08:7d:a2:07:dd:
97:f5:18:29:84:0c:c9:00:6f:53:45:07:aa:2b:19:
68:60:bf:cc:be:b6:fa:b8:bc:32:43:94:51:5d:72:
73:78:ac:18:c1:65:20:46:1e:9e:5d:27:18:d7:b9:
63:e0:5b:d9:3a:f8:33:a7:a6:ef:ec:bb:27:70:85:
67:8d:65:ad:cc:b9:8c:8b:e5:aa:ea:4d:03:4b:3c:
f0:9c:1d:e4:f2:28:f4:9d:c2:21:57:c1:24:73:4d:
e9:2f:85:f5:e0:54:89:7f:02:89:b7:a9:d5:20:3e:
dc:51:13:10:a3:b1:2e:e4:5b:49:8e:c2:63:eb:c7:
85:2a:05:e2:19:27:dd:c8:d7:a2:17:74:c6:e8:c3:
a1:4b:af:30:eb:f8:f4:82:0e:f0:d1:5d:bf:d9:08:
02:a5:fd:a5:9d:1d:45:d6:6d:d5:df:da:0e:a8:d5:
9a:3a:53:f9:6e:a6:d9:cf:ee:7f:2d:9b:95:46:72:
09:fa:0a:83:0d:9d:29:4f:38:f1:d7:17:a6:b7:b2:
ff:11:14:f8:59:73:fe:0d:37:85:12:d8:60:c2:3c:
89:4f:68:a8:d6:48:60:29:e9:58:5b:f1:a4:b5:69:
88:cb:9c:37:a8:f2:77:69:29:b9:5e:3b:91:e0:1a:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:1E:0F:D6:3F:0D:85:B3:C0:88:27:9D:1E:52:2B:5D:3D:EA:9D
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/JKUeD9Y_DYWzwIgnnR5SK1096p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.39.0/24
62.244.47.0/24
62.244.54.0/24
193.193.209.0/24
193.193.211.0/24
193.193.219.0-193.193.220.255
Signature Algorithm: sha256WithRSAEncryption
4b:84:e7:04:6f:83:09:c9:fb:0d:68:90:ec:55:d8:82:75:55:
8d:07:c1:8d:f3:c8:53:08:b3:49:86:ce:e7:47:15:21:a1:b0:
9a:a8:82:98:ac:d9:ee:89:0f:21:d4:07:b6:9d:4f:43:c5:c1:
56:88:26:6d:32:3a:f9:dc:39:12:6d:f2:6d:67:e4:e1:64:b7:
2c:24:c8:ec:e3:a4:75:00:45:77:c7:2f:83:8c:a4:83:74:82:
4b:ee:fc:5e:df:fb:77:30:89:b4:db:ea:28:55:9b:7e:13:ce:
db:96:22:a9:7a:70:36:1a:91:73:13:1c:e6:63:79:c5:e7:de:
f4:33:0b:28:b9:c9:70:8d:30:2e:2c:ff:dd:87:a0:20:d9:24:
61:9d:0a:f0:9f:ae:63:a1:df:97:e7:c1:0c:a4:73:44:63:54:
fa:3e:83:6c:27:00:14:b9:df:e0:9f:15:79:70:78:d1:5c:7a:
08:6a:0c:26:f2:9d:a9:dd:3a:ab:ba:bb:b8:1d:c8:08:e5:71:
e8:d5:5e:05:26:cc:99:98:38:5c:3d:55:5b:ce:38:9c:12:71:
00:9e:81:fc:ae:61:f6:9a:15:3c:06:f2:98:c9:c6:21:96:34:
21:60:c8:ac:9e:eb:07:f1:7d:b8:25:0a:32:c7:4a:ca:3a:49:
af:55:13:de
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAaDX6Nhtmc6hIWkJZi9scxLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4
NTU1MzkwHhcNMjYwOTI1MDkzMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGE1MWUwZmQ2M2YwZDg1YjNjMDg4Mjc5ZDFlNTIyYjVkM2RlYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX599ijeSP/TCH2iB92X9RgphAzJ
AG9TRQeqKxloYL/Mvrb6uLwyQ5RRXXJzeKwYwWUgRh6eXScY17lj4FvZOvgzp6bv
7LsncIVnjWWtzLmMi+Wq6k0DSzzwnB3k8ij0ncIhV8Ekc03pL4X14FSJfwKJt6nV
ID7cURMQo7Eu5FtJjsJj68eFKgXiGSfdyNeiF3TG6MOhS68w6/j0gg7w0V2/2QgC
pf2lnR1F1m3V39oOqNWaOlP5bqbZz+5/LZuVRnIJ+gqDDZ0pTzjx1xemt7L/ERT4
WXP+DTeFEthgwjyJT2io1khgKelYW/GktWmIy5w3qPJ3aSm5XjuR4BqJZQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFCSlHg/WPw2Fs8CIJ50eUitdPeqdMB8GA1UdIwQY
MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt
MzM2YWM5NDU2NDY0LzEvSktVZUQ5WV9EWVd6d0lnbm5SNVNLMTA5NnAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0
LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAPvQnAwQA
PvQvAwQAPvQ2AwQAwcHRAwQAwcHTMAwDBADBwdsDBADBwdwwDQYJKoZIhvcNAQEL
BQADggEBAEuE5wRvgwnJ+w1okOxV2IJ1VY0HwY3zyFMIs0mGzudHFSGhsJqogpis
2e6JDyHUB7adT0PFwVaIJm0yOvncORJt8m1n5OFktywkyOzjpHUARXfHL4OMpIN0
gkvu/F7f+3cwibTb6ihVm34TztuWIql6cDYakXMTHOZjecXn3vQzCyi5yXCNMC4s
/92HoCDZJGGdCvCfrmOh35fnwQykc0RjVPo+g2wnABS53+CfFXlweNFceghqDCby
nandOqu6u7gdyAjlcejVXgUmzJmYOFw9VVvOOJwScQCegfyuYfaaFTwG8pjJxiGW
NCFgyKye6wfxfbglCjLHSso6Sa9VE94=
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:40:22 2026 by rpki-client