Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JKQjrAqyvtxWynutG2GaKnm7oLk.roa
File: JKQjrAqyvtxWynutG2GaKnm7oLk.roa (raw, json)
Hash identifier: oOhltmN3+s3VvzoMW7yMNhfIQ58E7TPFwv9DbR/fTvE=
Subject key identifier: 24:A4:23:AC:0A:B2:BE:DC:56:CA:7B:AD:1B:61:9A:2A:79:BB:A0:B9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A17E40ECF0A98834CB62BD496CE1757D00
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JKQjrAqyvtxWynutG2GaKnm7oLk.roa
Signing time: Tue 27 Oct 2026 16:45:46 +0000
ROA not before: Tue 27 Oct 2026 16:45:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218664
IP address blocks: 77.239.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:40:ec:f0:a9:88:34:cb:62:bd:49:6c:e1:75:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 27 16:45:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24a423ac0ab2bedc56ca7bad1b619a2a79bba0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:f0:d5:08:da:f5:0f:5d:db:bc:f6:85:f3:
2a:46:40:f2:66:dc:3c:60:b0:37:44:16:d2:d3:a3:
48:4f:e4:82:83:6b:a7:ae:72:92:60:8a:7b:ae:0d:
dc:7c:37:4e:f8:62:2b:d8:f2:3b:e1:5c:1c:16:fe:
00:07:a8:f3:22:f9:d9:5c:38:b4:0c:4a:f8:a5:59:
bc:f0:35:0f:12:d2:61:6c:d2:46:20:15:9f:b5:ea:
9a:12:9d:bf:24:21:09:03:ac:df:91:32:00:8f:78:
fd:8a:d6:f7:47:2c:73:52:f5:57:b6:a4:87:8d:74:
54:3e:35:ff:7b:7d:9f:f3:13:bd:34:3f:95:b4:48:
c4:3c:05:5d:21:04:1f:b1:4b:18:c8:31:04:5d:db:
0e:d1:0a:02:fe:8b:19:00:97:04:e0:d6:54:31:6d:
41:82:f9:ff:4a:cc:4a:05:0f:30:d2:20:b9:02:74:
01:65:82:23:5f:58:fa:34:27:23:09:8e:af:05:9d:
b1:f5:6c:97:bf:d6:45:2c:64:3d:58:56:ec:03:33:
f5:96:4c:23:3b:fa:df:db:ba:90:86:fa:bc:7f:72:
69:40:76:2c:7c:25:95:82:db:b7:40:8c:87:45:db:
a0:b3:ca:71:56:ef:59:14:70:e6:b0:c3:d5:64:54:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A4:23:AC:0A:B2:BE:DC:56:CA:7B:AD:1B:61:9A:2A:79:BB:A0:B9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JKQjrAqyvtxWynutG2GaKnm7oLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:cf:03:ef:66:75:6b:32:b5:81:d5:1f:77:83:06:ca:00:b3:
68:76:a9:de:1e:07:07:42:26:05:97:a3:78:d1:bf:f7:99:9d:
a0:a8:dc:85:32:e7:42:c9:fe:8f:c9:3b:66:60:f6:15:3b:1d:
05:03:df:53:88:e2:46:62:57:bc:24:58:e5:9e:69:32:79:24:
68:e6:cd:14:11:a5:ab:b0:ee:78:c8:48:f8:75:5d:d1:e8:bd:
37:d9:9d:b5:82:ca:2d:a6:51:57:c0:17:c9:61:c8:10:4a:74:
bf:55:bb:d1:37:39:10:ea:93:d5:8f:dd:ae:3e:f3:72:a7:fa:
37:cc:cb:54:14:5d:fc:01:1f:ee:e2:57:59:bc:37:6b:9c:b5:
08:89:73:3b:52:f6:a2:68:df:dc:a9:40:a6:43:8c:49:0f:fb:
5a:9e:35:b1:ac:9f:e7:d2:0a:3d:fd:c6:aa:ff:aa:bd:08:10:
c4:41:bd:09:57:b8:36:a7:79:de:a8:33:a4:a6:a7:46:80:f2:
3c:df:b5:46:4f:cb:54:69:8f:bf:55:38:15:e7:3e:3a:7f:30:
ac:26:4b:59:ec:79:b5:00:25:37:31:9c:bf:96:c5:47:67:c5:
38:90:89:22:ae:d0:9c:7e:6e:27:55:44:4b:bc:af:1f:a5:27:
48:75:4e:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF+QOzwqYg0y2K9SWzhdX0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDI3MTY0NTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGE0MjNhYzBhYjJiZWRjNTZjYTdiYWQxYjYxOWEyYTc5YmJhMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7jw1Qja9Q9d27z2hfMqRkDyZtw8
YLA3RBbS06NIT+SCg2unrnKSYIp7rg3cfDdO+GIr2PI74VwcFv4AB6jzIvnZXDi0
DEr4pVm88DUPEtJhbNJGIBWfteqaEp2/JCEJA6zfkTIAj3j9itb3RyxzUvVXtqSH
jXRUPjX/e32f8xO9ND+VtEjEPAVdIQQfsUsYyDEEXdsO0QoC/osZAJcE4NZUMW1B
gvn/SsxKBQ8w0iC5AnQBZYIjX1j6NCcjCY6vBZ2x9WyXv9ZFLGQ9WFbsAzP1lkwj
O/rf27qQhvq8f3JpQHYsfCWVgtu3QIyHRdugs8pxVu9ZFHDmsMPVZFRABwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCSkI6wKsr7cVsp7rRthmip5u6C5MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvSktRanJBcXl2dHhXeW51dEcyR2FLbm03b0xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATe9wMA0G
CSqGSIb3DQEBCwUAA4IBAQAqzwPvZnVrMrWB1R93gwbKALNodqneHgcHQiYFl6N4
0b/3mZ2gqNyFMudCyf6PyTtmYPYVOx0FA99TiOJGYle8JFjlnmkyeSRo5s0UEaWr
sO54yEj4dV3R6L032Z21gsotplFXwBfJYcgQSnS/VbvRNzkQ6pPVj92uPvNyp/o3
zMtUFF38AR/u4ldZvDdrnLUIiXM7UvaiaN/cqUCmQ4xJD/tanjWxrJ/n0go9/caq
/6q9CBDEQb0JV7g2p3neqDOkpqdGgPI837VGT8tUaY+/VTgV5z46fzCsJktZ7Hm1
ACU3MZy/lsVHZ8U4kIkirtCcfm4nVURLvK8fpSdIdU5d
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:55 2026 by rpki-client