Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/jBFBWWjIaJu67xGcpk1-p45qsdU.roa
File: jBFBWWjIaJu67xGcpk1-p45qsdU.roa (raw, json)
Hash identifier: THJXMMGpVdQhi29jGrWB/2bHfOqzvnHxTtQk9TgxUsc=
Subject key identifier: 8C:11:41:59:68:C8:68:9B:BA:EF:11:9C:A6:4D:7E:A7:8E:6A:B1:D5
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 01A0B4158FB6343F6CBA0589D7891AF499D2
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/jBFBWWjIaJu67xGcpk1-p45qsdU.roa
Signing time: Fri 18 Sep 2026 10:35:07 +0000
ROA not before: Fri 18 Sep 2026 10:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.206.56.0/24 maxlen: 24
185.206.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:15:8f:b6:34:3f:6c:ba:05:89:d7:89:1a:f4:99:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Sep 18 10:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c11415968c8689bbaef119ca64d7ea78e6ab1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:02:6b:16:f5:a7:a4:77:d4:e1:cf:a1:9a:
0b:b0:c1:e2:a4:01:06:8e:c6:d0:e3:54:5d:e7:ba:
25:10:9f:17:7c:17:34:a8:5b:18:88:16:6b:9f:ac:
0d:28:22:87:7d:bc:1e:74:e2:7a:a8:7d:40:4b:c6:
c0:ee:33:a6:1c:a3:a5:d3:0c:62:7b:be:35:1b:85:
df:d9:9a:93:fc:59:d7:39:da:82:08:5d:d4:8f:a2:
5f:09:09:47:bf:83:cc:fa:ff:f7:ef:2f:c8:b0:a9:
40:9e:53:1c:e3:d3:af:96:6e:c7:44:f4:1e:2a:94:
2a:bc:87:70:6a:cd:63:4a:7c:b3:0d:52:44:a6:30:
ca:32:bd:e3:26:64:f4:e7:52:65:9e:c3:42:6e:ad:
ac:48:e3:55:9d:8e:d2:9c:2e:97:1b:62:cf:b1:cd:
61:55:48:10:e9:20:66:36:bc:14:0c:fb:2c:5d:86:
b3:1b:36:bd:ef:6b:0b:85:73:81:24:4d:e5:d2:d3:
44:db:1e:4e:60:77:3a:0c:33:76:20:38:85:8b:f7:
63:3e:c0:56:43:23:df:0c:4a:11:3e:ae:a0:c7:f9:
56:a0:66:e7:df:16:2c:8c:a8:4a:88:38:ea:ac:c4:
96:05:bd:22:3f:29:84:e4:41:bf:11:c3:a4:a4:8d:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:11:41:59:68:C8:68:9B:BA:EF:11:9C:A6:4D:7E:A7:8E:6A:B1:D5
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/jBFBWWjIaJu67xGcpk1-p45qsdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.56.0/23
Signature Algorithm: sha256WithRSAEncryption
40:be:2a:d9:ad:db:6a:62:06:3e:d6:4e:df:fc:e3:6a:b2:99:
d9:bf:50:37:2c:8a:4e:e1:2d:e6:b2:64:5d:9b:28:17:a7:67:
fa:f3:ce:c6:41:fb:7b:dc:e9:ef:d8:45:82:e0:61:19:25:80:
b2:41:07:41:f3:d0:de:83:31:05:5d:e5:94:57:dd:04:84:51:
5f:f2:0d:5a:e3:8f:03:35:1c:33:d9:a4:c4:7b:66:62:bb:b5:
2c:ac:fa:dd:33:9c:02:89:ee:37:3e:28:ce:42:88:53:8d:29:
ac:9c:cb:e0:6d:4d:61:ee:fd:d5:31:5b:b2:9f:b1:b9:50:f5:
6d:95:3b:0b:ae:00:fe:37:7a:6e:ae:30:5c:f3:cb:40:c4:61:
c0:12:59:49:c8:dc:13:11:d9:55:8a:43:6e:44:5b:52:5f:0d:
a8:54:13:4e:02:8a:5d:b7:74:ac:88:4d:af:e4:50:83:ad:e2:
33:17:ab:ae:fc:94:da:46:1f:fc:09:d6:5a:c7:44:3a:0b:f0:
41:e9:a2:7f:72:ae:cb:48:e4:9d:fc:62:13:0f:24:ba:21:43:
3a:2c:31:a7:b9:e4:94:14:97:31:b0:c1:52:18:ed:b8:51:28:
b7:0a:f5:0f:e6:df:7b:54:36:3a:41:a9:c7:a4:25:e5:01:43:
9d:2b:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:08:45 2026 by rpki-client